Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa
File:                     3138362e3138362e36342e302f31382d3138203d3e2036333036.roa (raw, json)
Hash identifier:          P5OFIc8dpFXj+AyUHVY1F7XflTycavmhLQ/xhaWammY=
Subject key identifier:   D5:BF:0C:50:F1:DB:02:11:74:16:93:FF:AC:1E:9E:93:A4:44:74:57
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6C5DFC7611DB3655E70E44B9E67C9CD216070E80
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:54 +0000
ROA not before:           Tue 05 Mar 2024 17:36:54 +0000
ROA not after:            Tue 04 Mar 2025 17:41:54 +0000
asID:                     6306
IP address blocks:        186.186.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:fc:76:11:db:36:55:e7:0e:44:b9:e6:7c:9c:d2:16:07:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:54 2024 GMT
            Not After : Mar  4 17:41:54 2025 GMT
        Subject: CN=D5BF0C50F1DB0211741693FFAC1E9E93A4447457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:b1:91:14:2f:dc:51:82:f1:16:05:57:9c:
                    f2:b7:aa:8c:e4:60:96:ec:85:cf:25:9d:a6:08:4f:
                    58:fc:a1:5e:38:28:8d:8b:b3:5e:1e:fa:83:cc:01:
                    6d:1b:8f:bf:7c:a1:16:c5:46:55:22:bc:c9:9c:f3:
                    58:9b:0e:bb:f9:6c:64:5a:f9:b2:03:90:58:f9:69:
                    bc:41:8b:83:07:83:17:f3:3c:64:10:c4:a5:fd:71:
                    01:33:e3:32:fe:c2:e1:71:88:cb:2d:19:b7:81:dd:
                    30:cf:4f:8f:7d:1e:78:6d:6a:a6:3f:a8:c6:91:76:
                    32:ff:04:d6:64:59:02:61:ff:98:d0:16:26:56:02:
                    d0:37:7e:38:57:70:e9:e5:b0:1b:ae:b6:fe:c2:c4:
                    b5:e5:b0:70:54:f3:e2:d1:7a:51:9c:0e:af:6c:1e:
                    fc:3f:58:87:4d:ec:b6:27:7d:45:96:d5:29:91:c1:
                    ec:a1:e4:88:4b:5d:07:2c:71:87:2d:f2:ee:47:13:
                    9c:a4:73:04:c5:cd:58:db:18:c3:61:70:b9:f2:cb:
                    82:1f:24:d9:92:76:e3:0a:02:2a:d3:2f:a4:37:e1:
                    f0:d7:62:a9:17:0f:71:34:2f:53:a2:3c:db:02:71:
                    a6:18:fb:e7:1d:d9:e6:af:d0:d2:7d:49:11:97:2e:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:0C:50:F1:DB:02:11:74:16:93:FF:AC:1E:9E:93:A4:44:74:57
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:1c:6c:4e:12:81:65:7b:57:cc:f8:57:42:f3:06:4b:ba:fd:
         76:14:bc:6b:98:bf:47:7d:d0:ed:b9:ac:00:bd:42:82:09:c6:
         a2:57:29:80:e1:25:8d:77:c4:d8:ef:9a:af:9e:33:ac:e5:40:
         39:a5:fa:72:99:5b:61:70:40:c0:05:79:53:20:0e:4f:a9:18:
         2e:94:f0:09:8e:56:24:23:0a:64:4f:65:4b:06:06:07:2c:e2:
         e0:a1:d7:a2:a3:4f:f1:48:3a:1b:c5:bf:1d:8c:23:a5:ca:46:
         3b:2e:d3:3b:9e:ae:77:b6:eb:25:97:55:3a:3c:d7:52:b3:b3:
         e5:23:b2:0a:30:64:20:8a:0a:dc:4e:9e:14:86:f4:2d:93:46:
         33:ca:cd:7f:8b:7f:7a:18:33:51:33:95:49:01:4c:2b:43:18:
         05:9b:4b:62:b0:9e:89:78:dd:99:29:01:47:46:42:9f:e2:96:
         b1:79:ee:e1:da:86:c0:ba:c8:c7:2a:a3:e0:42:59:60:2c:9e:
         46:5a:68:c3:15:36:a6:22:29:9b:5e:af:56:c6:0c:53:14:4c:
         b2:60:70:08:e6:3a:e5:66:a6:87:f2:28:04:6b:58:3c:f0:b9:
         07:cd:1d:35:ab:1e:bf:c3:6a:0b:31:89:2a:4b:bf:e4:91:3b:
         b8:b8:0e:24
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbF38dhHbNlXnDkS55nyc0hYHDoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNDAzMDUxNzM2NTRaFw0yNTAzMDQxNzQxNTRaMDMxMTAvBgNV
BAMTKEQ1QkYwQzUwRjFEQjAyMTE3NDE2OTNGRkFDMUU5RTkzQTQ0NDc0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vbGRFC/cUYLxFgVXnPK3qozk
YJbshc8lnaYIT1j8oV44KI2Ls14e+oPMAW0bj798oRbFRlUivMmc81ibDrv5bGRa
+bIDkFj5abxBi4MHgxfzPGQQxKX9cQEz4zL+wuFxiMstGbeB3TDPT499HnhtaqY/
qMaRdjL/BNZkWQJh/5jQFiZWAtA3fjhXcOnlsBuutv7CxLXlsHBU8+LRelGcDq9s
Hvw/WIdN7LYnfUWW1SmRweyh5IhLXQcscYct8u5HE5ykcwTFzVjbGMNhcLnyy4If
JNmSduMKAirTL6Q34fDXYqkXD3E0L1OiPNsCcaYY++cd2eav0NJ9SRGXLjVrAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU1b8MUPHbAhF0FpP/rB6ek6REdFcwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzODM2MmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzYzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa6ukAwDQYJ
KoZIhvcNAQELBQADggEBAAYcbE4SgWV7V8z4V0LzBku6/XYUvGuYv0d90O25rAC9
QoIJxqJXKYDhJY13xNjvmq+eM6zlQDml+nKZW2FwQMAFeVMgDk+pGC6U8AmOViQj
CmRPZUsGBgcs4uCh16KjT/FIOhvFvx2MI6XKRjsu0zuerne26yWXVTo811Kzs+Uj
sgowZCCKCtxOnhSG9C2TRjPKzX+Lf3oYM1EzlUkBTCtDGAWbS2Kwnol43ZkpAUdG
Qp/ilrF57uHahsC6yMcqo+BCWWAsnkZaaMMVNqYiKZter1bGDFMUTLJgcAjmOuVm
pofyKARrWDzwuQfNHTWrHr/DagsxiSpLv+SRO7i4DiQ=
-----END CERTIFICATE-----