Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
File:                     3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa (raw, json)
Hash identifier:          cbMrLAn89T1Bl4DQ37iQfE5FaoZTpAmbrfyqB/R5EBQ=
Subject key identifier:   E1:3A:B4:15:04:E5:17:94:C9:19:F3:8B:47:40:64:D8:AF:F9:7F:5E
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       1CA6E0EF5989759D8D15298BD09C2AAC2453982B
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
Signing time:             Tue 05 Mar 2024 18:14:41 +0000
ROA not before:           Tue 05 Mar 2024 18:09:41 +0000
ROA not after:            Tue 04 Mar 2025 18:14:41 +0000
asID:                     264685
IP address blocks:        168.227.96.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a6:e0:ef:59:89:75:9d:8d:15:29:8b:d0:9c:2a:ac:24:53:98:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Mar  5 18:09:41 2024 GMT
            Not After : Mar  4 18:14:41 2025 GMT
        Subject: CN=E13AB41504E51794C919F38B474064D8AFF97F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:1c:e0:61:1f:1f:84:0b:5b:80:8d:4d:be:
                    79:8d:32:fc:ed:a7:f1:00:c9:e3:6b:b1:99:85:09:
                    b2:18:81:4d:45:7e:b7:bc:29:73:8b:c3:f5:da:e0:
                    be:4a:38:71:d6:7f:0b:59:b6:bb:3d:55:e0:37:b0:
                    0e:4a:cb:9b:60:79:40:8c:ee:9c:e2:0d:72:1a:b3:
                    60:fb:33:26:8a:e0:95:48:70:47:c1:31:b3:9e:b9:
                    59:77:bc:68:d1:af:dd:7b:5c:e5:03:ed:e9:01:6e:
                    80:57:2e:18:9a:94:5c:5b:cc:c9:22:69:3a:d6:d5:
                    1b:c0:8e:e7:39:b3:99:a3:de:80:48:6d:88:df:d5:
                    b7:39:b4:7a:8a:4c:b7:16:9d:42:36:3c:c5:0b:04:
                    a3:3d:2b:f3:56:7e:95:2f:1b:1b:43:72:b2:16:16:
                    ea:5a:ae:9a:cc:88:1f:7d:fc:6c:25:77:0f:7f:24:
                    6f:82:20:61:9b:f5:74:15:f7:f2:80:3b:f5:12:01:
                    9d:a1:71:5c:fa:90:8c:dc:39:40:5a:62:d1:d1:56:
                    0f:5d:cb:c8:fe:9e:99:04:f4:c1:4e:8c:4d:a3:cb:
                    9c:2c:bc:47:31:49:6d:2c:23:c1:92:cf:e8:b8:d9:
                    19:28:6a:9c:a7:50:0d:8f:b6:cf:73:39:44:c4:29:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:B4:15:04:E5:17:94:C9:19:F3:8B:47:40:64:D8:AF:F9:7F:5E
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:55:fb:3a:1d:31:9c:a3:99:ba:0a:20:ce:16:b8:06:b3:99:
         a8:18:4f:af:47:24:70:c6:97:90:86:f0:6a:a8:9c:44:eb:02:
         24:35:ab:69:08:93:f1:ff:11:7b:e2:5e:cb:59:51:73:62:f4:
         d7:10:b2:ee:90:db:f4:14:bf:a5:4a:f0:fa:c1:f1:dd:f7:4f:
         f6:5a:a4:85:b1:c9:dc:c1:40:97:38:09:cd:d1:1a:0f:67:7a:
         09:66:81:f5:f5:e5:ca:ed:bc:d4:4e:ae:52:36:5a:b8:17:b1:
         8e:b1:e6:ec:75:c6:93:84:9e:46:cc:ce:11:09:9f:90:5d:31:
         8b:4e:0d:fa:29:c0:ba:23:88:64:fc:02:e6:0f:ba:cf:de:c6:
         9b:a3:6d:e6:48:6d:ba:36:56:cd:6f:1b:43:23:92:5f:c9:eb:
         ba:46:86:d7:f4:f5:26:ee:d5:b4:06:13:0e:f2:5b:29:ec:39:
         96:c2:13:95:00:f4:29:d1:e5:9d:1b:66:af:ac:ca:f1:62:9a:
         0a:07:95:47:22:56:2c:02:05:5e:4c:6a:99:00:83:e7:bb:e9:
         63:8f:ab:41:72:50:9c:74:e0:9a:29:e4:91:1b:d5:5e:3c:87:
         09:2f:2e:fe:59:14:8b:70:a1:2e:8d:64:f5:2f:e2:c5:2e:77:
         be:6c:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----