Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32342d3234203d3e20323635363332.roa
File:                     3133312e3139362e31302e302f32342d3234203d3e20323635363332.roa (raw, json)
Hash identifier:          qI31hG0zzYrwfRmZbbioMhrZBKta58ILOKCUpVs8/Bs=
Subject key identifier:   44:0D:DA:D4:3B:0A:88:4A:3D:32:29:FE:12:9C:68:44:AD:20:63:2D
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       7A80B84006A99D52B07D18E4DD58211A01DB5F04
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32342d3234203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:25 +0000
ROA not before:           Tue 05 Mar 2024 17:51:25 +0000
ROA not after:            Tue 04 Mar 2025 17:56:25 +0000
asID:                     265632
IP address blocks:        131.196.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:80:b8:40:06:a9:9d:52:b0:7d:18:e4:dd:58:21:1a:01:db:5f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:25 2024 GMT
            Not After : Mar  4 17:56:25 2025 GMT
        Subject: CN=440DDAD43B0A884A3D3229FE129C6844AD20632D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:68:7d:5d:9b:81:fd:a1:dd:ed:63:22:a7:
                    46:73:05:5d:5e:67:99:ff:89:a3:36:4f:9c:2b:15:
                    3c:9e:28:22:10:72:a0:9b:c2:9a:86:58:8b:f1:e7:
                    7c:c7:88:c4:d4:13:db:45:84:60:dd:1a:71:6b:4d:
                    01:15:b3:1f:b6:c0:3d:df:be:89:7b:d1:54:96:73:
                    7b:47:81:e3:e5:2b:50:65:0e:23:c9:c4:64:e8:dc:
                    9d:ec:ee:76:2d:22:f9:d0:a7:72:f5:01:aa:a8:c0:
                    25:a9:02:65:db:60:ee:fb:2f:0e:39:14:2b:e2:e3:
                    12:a4:48:6b:69:3a:c7:58:d0:6e:40:15:b2:d1:2b:
                    67:02:6c:70:10:62:38:30:db:c5:3e:6e:78:49:8a:
                    c2:e5:02:a2:8c:f8:f5:79:1a:72:67:1e:ae:b1:9c:
                    e3:c7:e7:75:f1:45:d0:cc:be:00:82:17:5d:dc:c9:
                    55:54:49:96:be:d5:9b:2e:15:5f:5c:2f:2b:c4:f8:
                    a5:b5:8d:6e:66:55:4e:81:19:07:30:94:68:3a:a1:
                    bb:69:c6:ce:52:3d:3f:46:52:31:7e:cd:c5:bc:36:
                    79:01:fc:cf:18:12:fd:bd:a0:f8:e3:d5:7b:b6:a6:
                    27:d7:48:ff:6d:4e:14:21:0b:b0:5e:05:5e:c1:59:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0D:DA:D4:3B:0A:88:4A:3D:32:29:FE:12:9C:68:44:AD:20:63:2D
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32342d3234203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:2b:67:14:b7:aa:23:04:04:21:43:ea:fe:3b:15:8e:5f:
         f7:0c:27:82:1c:44:c3:36:26:a8:da:c0:d5:7c:9f:39:4c:5b:
         53:e2:a5:78:97:fb:82:69:61:21:d1:56:99:25:20:ab:33:5b:
         f7:e3:a5:29:7e:7b:ea:25:d1:ce:62:3d:81:07:dc:9d:9e:0a:
         1e:f7:e5:28:a8:69:93:b0:38:9b:99:43:ee:9f:91:3e:2a:cd:
         0a:35:a2:f3:80:40:28:db:20:73:3d:81:f6:ec:e3:9e:93:93:
         28:22:54:1c:8a:b8:7b:81:05:35:2a:df:15:93:ff:8e:f8:93:
         9c:6d:6b:03:55:07:59:ec:b1:e8:17:6f:f4:f8:5f:28:3f:46:
         02:46:89:c0:11:27:16:dc:5b:a6:f7:9e:22:86:b2:b8:08:87:
         77:80:1d:29:a0:45:49:f2:0d:54:da:c8:d6:94:74:ae:18:d5:
         25:e4:31:53:3a:6f:01:6f:1f:df:0f:6c:7f:22:eb:6c:1e:1f:
         31:60:d8:87:b2:6b:2f:06:95:fe:cf:67:ac:40:cf:84:09:e7:
         e9:63:97:eb:5b:a1:38:e1:2a:0e:c8:e5:c4:c9:7d:79:7d:56:
         3e:25:6e:76:bd:a8:97:41:60:5b:40:37:9e:9f:92:a8:b1:e8:
         61:b8:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----