Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e2036353033.roa
File:                     3230312e3136332e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          6vyEUSsyyOxCTBsWZ99exHi3+SL1Jpx1L3IyNTi9P5k=
Subject key identifier:   F1:85:9E:80:EF:A4:79:EB:68:D3:40:52:8E:ED:7E:38:42:C6:26:01
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       22E253A7347D37917318573F0FAB81843D1A6623
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     6503
IP address blocks:        201.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e2:53:a7:34:7d:37:91:73:18:57:3f:0f:ab:81:84:3d:1a:66:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=F1859E80EFA479EB68D340528EED7E3842C62601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:5f:58:04:ad:5a:63:07:9a:ec:e8:60:4b:
                    da:e5:9c:5d:c2:24:0f:45:d2:06:3d:cf:9d:1b:bb:
                    be:30:0c:b1:8c:1b:3a:8f:06:82:2e:f1:4b:bb:f4:
                    2b:44:dc:5b:89:ee:3c:ae:0e:d7:07:0e:92:e4:f5:
                    2e:3f:ca:68:23:40:b5:39:c8:c7:ac:3c:7c:c9:ce:
                    4e:71:3e:4f:86:b7:51:81:e1:0c:c1:ab:17:ab:6a:
                    9b:94:2a:57:0e:c5:97:2e:68:62:c8:4b:ae:34:13:
                    77:35:ea:c8:f5:cf:82:21:4c:da:e4:6b:ce:b8:6b:
                    cf:5b:fd:5e:2a:32:66:2b:cc:4d:88:29:de:36:4f:
                    b2:dc:63:ea:1c:57:54:7d:e9:56:5d:fb:3e:14:1e:
                    fd:7f:65:3f:8e:d4:51:27:a8:0c:11:0a:d9:94:96:
                    51:f3:72:ae:9c:30:b3:76:c7:f5:51:bc:45:be:49:
                    17:3a:ba:c3:1e:54:91:70:40:67:05:cb:4b:bb:24:
                    23:26:a2:b5:43:af:e1:6b:57:23:a8:6f:28:77:f5:
                    60:7f:f9:7e:ac:74:77:5b:90:91:40:9e:58:a5:50:
                    e3:2d:7b:22:d0:41:41:13:67:9a:8a:f0:29:79:e9:
                    6e:d8:32:3c:a5:e0:82:28:cb:35:c0:78:5d:f9:ef:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:9E:80:EF:A4:79:EB:68:D3:40:52:8E:ED:7E:38:42:C6:26:01
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:32:fa:67:7c:c3:36:41:52:0d:e9:80:8b:61:1b:94:4b:b5:
         f3:a8:4e:c3:a1:5f:8d:b7:3c:08:87:78:8e:2f:84:03:cb:d2:
         e0:21:a9:d2:c2:1e:3d:36:5d:f2:2c:25:94:b2:82:c0:f0:ca:
         65:d4:88:da:0f:d2:21:7a:b5:6c:5d:ef:03:d2:0d:42:f6:96:
         c0:7d:d8:e8:d0:a0:f8:6f:b7:30:60:5b:39:c7:d0:b8:52:a7:
         91:ca:91:ea:31:ab:77:e1:c6:17:4e:6e:b0:5b:dc:b3:79:34:
         e5:d5:19:cb:bc:c0:33:94:04:78:b0:c3:45:4f:01:54:f5:90:
         3b:bd:52:86:8b:82:fd:11:c9:45:93:f8:98:9c:84:d1:01:84:
         01:20:70:67:55:96:20:5c:3c:1e:14:d0:3c:e2:f7:db:5b:54:
         83:57:2f:34:33:9e:62:2f:0e:32:54:b8:e4:75:46:3a:63:35:
         71:a2:24:a8:6d:dc:01:04:38:18:92:d7:6a:5b:f2:f6:9b:be:
         50:6a:26:5e:e0:4a:11:07:5e:3c:a0:bd:98:4b:03:db:94:5d:
         49:f4:75:80:80:e0:0f:5d:e1:5c:34:fc:06:95:bf:37:04:22:
         b6:24:ce:e3:3c:98:eb:32:f0:dc:f8:df:05:e8:b9:3e:41:c2:
         fb:74:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----