Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e203136363239.roa
File:                     3138362e37382e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier:          PRqqN3NTeF2O6EYjHThJxqHLSmGHCrWNF6bGG62K3wY=
Subject key identifier:   BB:07:84:07:E6:E3:CD:91:E6:94:26:B3:11:B3:67:98:0E:BA:35:E9
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       782A458EF631D8A119288E6E0FB41F1FA3656A14
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:09 +0000
ROA not before:           Tue 05 Mar 2024 17:47:09 +0000
ROA not after:            Tue 04 Mar 2025 17:52:09 +0000
asID:                     16629
IP address blocks:        186.78.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:45:8e:f6:31:d8:a1:19:28:8e:6e:0f:b4:1f:1f:a3:65:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:09 2024 GMT
            Not After : Mar  4 17:52:09 2025 GMT
        Subject: CN=BB078407E6E3CD91E69426B311B367980EBA35E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:d1:62:de:50:64:d3:f0:11:eb:49:f6:34:
                    c7:58:bd:74:38:d8:a9:ba:e3:b5:5a:f2:7f:a4:6f:
                    b7:50:1f:50:3b:37:e8:2a:d5:60:f8:f2:71:61:c5:
                    ae:40:0c:87:27:2f:a1:ec:5b:f3:82:c6:1d:22:44:
                    4a:55:a9:f2:a8:d9:92:bd:4a:b5:2b:37:6e:c8:06:
                    bd:70:55:fe:d8:9b:7e:62:9e:48:87:2d:c3:b7:21:
                    06:0d:d8:e4:a9:16:2a:e9:65:b1:01:0b:4a:e0:55:
                    fb:06:fd:35:39:3b:51:a4:0f:ba:06:2e:89:fc:0c:
                    ac:1d:b0:e2:46:57:fe:44:66:1a:12:41:06:06:ef:
                    7f:61:13:c2:31:f0:4f:f0:40:c2:90:dc:16:f8:93:
                    1a:64:db:fd:86:91:c2:ea:2e:1d:58:31:d1:3b:ce:
                    a2:c4:d2:38:23:e7:ab:48:80:f2:9a:9b:86:51:79:
                    50:76:f4:9a:64:c0:92:1f:49:11:80:0f:5f:1c:f3:
                    c7:d3:92:1c:25:b9:1b:ee:65:ce:c0:f6:2b:29:ba:
                    ac:c7:73:28:a5:67:13:9f:e5:f9:8d:ce:34:1b:49:
                    e3:61:27:20:fe:1e:20:2b:1a:0f:79:da:b6:17:52:
                    fc:b3:bc:16:d5:95:bb:1c:9f:e1:d7:82:7b:e8:f5:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:84:07:E6:E3:CD:91:E6:94:26:B3:11:B3:67:98:0E:BA:35:E9
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e37382e302e302f31352d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.78.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:6b:d0:de:0b:d3:bd:51:bc:d4:0f:dc:41:d7:ad:1e:f4:
         31:3f:64:42:72:67:84:a1:bb:f6:7d:eb:b5:17:d0:19:a4:a3:
         d8:a7:12:90:bd:11:1b:a8:86:95:bb:32:79:23:06:a2:43:fa:
         c5:2e:8d:83:8a:b1:48:52:86:00:a8:75:30:6b:f8:85:96:80:
         69:c0:6c:25:70:03:48:1d:5c:c9:fb:09:f5:ba:a6:b3:7b:69:
         22:e7:1b:57:83:0f:82:f0:7c:4d:1c:b8:89:b8:0d:03:15:8d:
         59:c8:bb:02:d3:3a:a3:e6:50:1c:c8:63:22:52:bb:be:05:59:
         4d:2b:39:94:ba:16:6f:20:da:7c:4f:7d:52:b4:fa:49:ae:b5:
         e8:20:0d:f2:46:bb:ef:c1:c4:cb:2a:7f:73:39:06:58:8e:22:
         b4:cf:32:cd:9e:d1:2e:5a:8a:1c:3d:77:84:5a:bb:b2:88:91:
         4b:79:8f:ac:09:fd:34:d2:7b:06:fc:b2:e2:a3:ff:c1:4c:12:
         14:35:59:19:a2:38:35:60:34:00:2e:32:79:7a:80:df:e7:06:
         3a:d3:21:13:72:31:c4:c0:30:ac:70:b3:b1:dc:81:f3:70:89:
         60:49:6b:d3:f7:37:e0:15:fb:d1:24:61:93:35:67:c9:db:6d:
         1b:60:30:15
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUeCpFjvYx2KEZKI5uD7QfH6NlahQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MDlaFw0yNTAzMDQxNzUyMDlaMDMxMTAvBgNV
BAMTKEJCMDc4NDA3RTZFM0NEOTFFNjk0MjZCMzExQjM2Nzk4MEVCQTM1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4NFi3lBk0/AR60n2NMdYvXQ4
2Km647Va8n+kb7dQH1A7N+gq1WD48nFhxa5ADIcnL6HsW/OCxh0iREpVqfKo2ZK9
SrUrN27IBr1wVf7Ym35inkiHLcO3IQYN2OSpFirpZbEBC0rgVfsG/TU5O1GkD7oG
Lon8DKwdsOJGV/5EZhoSQQYG739hE8Ix8E/wQMKQ3Bb4kxpk2/2GkcLqLh1YMdE7
zqLE0jgj56tIgPKam4ZReVB29JpkwJIfSRGAD18c88fTkhwluRvuZc7A9ispuqzH
cyilZxOf5fmNzjQbSeNhJyD+HiArGg952rYXUvyzvBbVlbscn+HXgnvo9eHTAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUuweEB+bjzZHmlCazEbNnmA66NekwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzgzNjJlMzczODJlMzAyZTMwMmYz
MTM1MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBuk4wDQYJKoZI
hvcNAQELBQADggEBACxwa9DeC9O9UbzUD9xB160e9DE/ZEJyZ4Shu/Z967UX0Bmk
o9inEpC9ERuohpW7MnkjBqJD+sUujYOKsUhShgCodTBr+IWWgGnAbCVwA0gdXMn7
CfW6prN7aSLnG1eDD4LwfE0cuIm4DQMVjVnIuwLTOqPmUBzIYyJSu74FWU0rOZS6
Fm8g2nxPfVK0+kmuteggDfJGu+/BxMsqf3M5BliOIrTPMs2e0S5aihw9d4Rau7KI
kUt5j6wJ/TTSewb8suKj/8FMEhQ1WRmiODVgNAAuMnl6gN/nBjrTIRNyMcTAMKxw
s7HcgfNwiWBJa9P3N+AV+9EkYZM1Z8nbbRtgMBU=
-----END CERTIFICATE-----