Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa
File:                     3138362e382e3139322e302f31392d3234203d3e203139343232.roa (raw, json)
Hash identifier:          WXAEIXjLempE+3oM0C5b8e64veZZa3VPEt8sV9vA+uU=
Subject key identifier:   83:F8:14:A3:AF:F5:1B:C2:8E:89:00:A4:0E:63:0C:ED:27:1B:48:E1
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       3EEC4CB00377A7151A04698BC59A8713A1426D39
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa
Signing time:             Wed 08 Jan 2025 07:45:00 +0000
ROA not before:           Wed 08 Jan 2025 07:40:00 +0000
ROA not after:            Wed 07 Jan 2026 07:45:00 +0000
asID:                     19422
IP address blocks:        186.8.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:4c:b0:03:77:a7:15:1a:04:69:8b:c5:9a:87:13:a1:42:6d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Jan  8 07:40:00 2025 GMT
            Not After : Jan  7 07:45:00 2026 GMT
        Subject: CN=83F814A3AFF51BC28E8900A40E630CED271B48E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:4b:97:82:c8:18:f8:10:16:ed:36:2f:d0:
                    ee:63:92:bf:d3:ad:0b:23:16:00:11:21:1e:99:3b:
                    fc:e2:2d:b5:dc:0d:b4:48:d2:46:ab:51:ef:61:c1:
                    20:46:4e:66:e6:86:52:8b:db:b2:64:03:7e:f8:8e:
                    86:30:5d:99:ad:6d:35:ed:cd:f7:c2:b1:ad:18:9b:
                    06:74:52:74:a7:41:74:9d:bc:10:f4:ee:22:28:fb:
                    91:5f:7b:dc:ed:55:e6:16:3e:8f:ea:bb:32:95:01:
                    d9:d8:53:fb:26:78:52:6a:95:a0:c9:e0:b6:8f:ce:
                    02:34:ab:ff:8f:00:4d:77:78:1d:5e:a3:c5:a9:40:
                    6b:f5:54:f5:b3:d5:76:bd:f3:79:46:e7:83:4d:7d:
                    c8:c0:81:92:75:90:62:c0:f7:86:48:8a:8b:23:dd:
                    9f:c8:4a:28:14:d3:4f:a9:d7:e5:dd:13:d0:ab:eb:
                    c2:b3:22:34:4c:22:97:6a:c3:c6:3d:5d:42:cf:8a:
                    a6:ca:ed:89:dd:98:23:20:ba:3f:49:d9:a5:c7:58:
                    1c:f0:3d:9c:37:36:11:5a:2d:64:69:90:66:91:ac:
                    16:74:97:47:d3:42:05:bf:49:a4:14:58:7b:52:21:
                    0d:ac:70:3f:91:9a:d7:07:8e:1c:a2:e9:92:71:40:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:14:A3:AF:F5:1B:C2:8E:89:00:A4:0E:63:0C:ED:27:1B:48:E1
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:df:66:20:f4:5a:01:a9:38:79:d9:84:fe:a5:00:e7:b7:
         4e:57:4c:34:57:53:84:39:f7:3f:8d:36:d7:64:d5:46:a7:70:
         3a:1f:93:d6:35:95:3c:12:44:8f:10:10:fc:45:c7:22:6f:b6:
         45:cc:cb:ac:4f:c3:97:b6:58:b4:29:29:50:16:a1:73:25:ce:
         7d:17:dd:e6:6b:59:a9:74:17:4c:f5:ce:d3:f1:f6:cb:a9:76:
         b5:50:4a:b3:66:a5:89:e6:d3:12:67:8a:e1:02:bb:77:e8:e1:
         be:f2:e0:8b:f3:3f:5d:71:5a:6e:20:96:75:3d:58:a9:03:8d:
         df:93:f2:b7:f0:55:64:7e:4f:cb:d3:d6:f0:1e:19:a8:03:e4:
         e5:32:7f:83:69:45:42:c6:78:f5:cc:44:44:06:76:9a:ab:3d:
         66:39:e6:06:1e:56:0a:1e:cc:ec:9b:2a:ae:fa:74:3a:0c:a4:
         ff:03:8f:80:6e:0e:73:b2:26:6a:27:72:77:45:ba:fa:b0:48:
         5d:70:db:e9:0c:f9:b4:d1:ac:f3:5b:72:0a:ff:1a:d7:28:af:
         9b:8b:d7:40:ae:7a:78:8f:8f:53:30:d3:e5:a8:d0:34:f1:a1:
         6a:c8:2f:b7:1f:b6:f9:98:7c:30:b2:06:92:08:32:00:18:b1:
         4c:55:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----