Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
File:                     3138312e31362e3133362e302f32312d3234203d3e203532333233.roa (raw, json)
Hash identifier:          ts+ZhxnOMSa5OnTNLqHjjD9ok6LpqYKIxgu0CXrZ0YQ=
Subject key identifier:   6F:F7:BA:6F:C0:BA:59:71:CF:06:ED:75:B9:22:96:42:C3:33:34:C0
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       4EC155790235E644CF35E7E5F1E9E2F7BD76250C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
Signing time:             Tue 05 Mar 2024 18:07:16 +0000
ROA not before:           Tue 05 Mar 2024 18:02:16 +0000
ROA not after:            Tue 04 Mar 2025 18:07:16 +0000
asID:                     52323
IP address blocks:        181.16.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c1:55:79:02:35:e6:44:cf:35:e7:e5:f1:e9:e2:f7:bd:76:25:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Mar  5 18:02:16 2024 GMT
            Not After : Mar  4 18:07:16 2025 GMT
        Subject: CN=6FF7BA6FC0BA5971CF06ED75B9229642C33334C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:42:60:2a:77:b0:a8:75:e1:8a:59:ba:29:
                    53:f0:3d:79:60:2c:9a:ee:43:8d:83:0c:0d:98:d7:
                    68:e9:30:8a:0a:f5:b5:c2:35:36:a9:90:47:18:57:
                    4b:33:45:c1:0c:1f:97:17:c2:aa:21:3e:b5:86:dd:
                    d1:bc:23:4d:7b:58:18:7f:99:77:a3:ea:e3:0a:3c:
                    a2:8f:b2:1c:77:47:be:5d:2b:bf:50:96:46:06:81:
                    53:30:5f:f0:b0:e5:b6:f9:c7:54:fa:e4:be:54:5b:
                    eb:4d:9c:b0:a5:f9:ec:49:d8:90:79:51:6a:7c:76:
                    9c:1c:a8:e3:a2:b2:10:9b:4d:44:9c:95:65:3e:2d:
                    21:f9:0f:c6:7b:de:3e:b7:94:8f:6c:ff:09:83:9c:
                    82:9e:a7:13:b1:ab:1b:63:4b:b8:cd:20:22:57:45:
                    03:db:e3:df:fe:47:45:f2:17:ca:c5:27:60:75:78:
                    58:f2:64:d5:f6:78:02:24:85:fd:00:35:fe:ed:55:
                    da:6c:81:4a:5c:23:63:2a:de:21:af:61:c4:45:42:
                    97:4c:5e:f1:b2:0e:34:25:79:d9:d4:52:26:8b:71:
                    17:2e:b9:91:89:37:60:02:f1:69:4b:fc:e8:2f:c6:
                    f8:e6:de:f1:5e:b4:16:dd:60:d9:cf:cd:f5:86:6e:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:BA:6F:C0:BA:59:71:CF:06:ED:75:B9:22:96:42:C3:33:34:C0
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:4e:91:b0:f0:11:10:4a:60:f8:b7:51:97:20:15:ae:8e:
         2d:b4:c9:a5:6c:3b:da:9c:ac:84:96:90:c2:4b:61:eb:7e:b3:
         1b:23:5d:f7:43:d4:c7:f3:36:24:28:d4:f0:05:4f:6e:bf:fb:
         16:20:da:13:94:d5:a8:b9:a9:75:e1:48:c0:54:8f:95:26:3c:
         d7:42:6b:34:19:92:4f:05:0e:16:cb:4d:75:cd:d0:fc:01:4c:
         fb:77:97:cd:5b:72:82:cc:6d:ab:8c:c3:7e:eb:4e:93:fc:c2:
         ae:ac:53:5a:12:9e:4e:08:22:10:f8:12:55:a2:07:7f:5b:21:
         1d:55:72:fe:9e:97:e7:e3:ca:2b:0a:ff:0e:46:4d:9d:c6:0c:
         46:28:28:f8:d9:a0:7d:c4:2c:07:c0:87:1a:7d:64:45:87:c1:
         d2:00:5d:90:45:15:84:de:4b:81:42:cc:06:5e:e1:e1:f4:66:
         e9:31:09:f6:88:11:be:84:dc:79:ad:f2:c1:ae:57:5a:b4:49:
         2a:1c:70:bf:0c:20:78:0a:d6:17:b1:72:16:c4:61:5d:a9:b2:
         0f:2f:c8:0e:82:09:9f:c9:82:e7:9e:05:4d:d0:13:0c:a3:4a:
         c6:63:a3:a3:46:16:6e:ae:1a:02:4e:39:09:c5:58:da:51:fe:
         f6:86:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----