Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31312e302f32342d3234203d3e20323635363332.roa
File:                     3133312e3139362e31312e302f32342d3234203d3e20323635363332.roa (raw, json)
Hash identifier:          UBhMQV3huB/vWTqs5VuP/rFE+/dx+cMmq0pn3aJ3VBM=
Subject key identifier:   C2:6F:AB:A5:62:92:EE:DF:EE:73:9A:16:B3:4B:E5:56:DE:C1:AE:4C
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       4BD175B3DABE4BDBEAFFF4696E0C7DFF82CADAC0
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31312e302f32342d3234203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:26 +0000
ROA not before:           Tue 05 Mar 2024 17:51:26 +0000
ROA not after:            Tue 04 Mar 2025 17:56:26 +0000
asID:                     265632
IP address blocks:        131.196.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d1:75:b3:da:be:4b:db:ea:ff:f4:69:6e:0c:7d:ff:82:ca:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:26 2024 GMT
            Not After : Mar  4 17:56:26 2025 GMT
        Subject: CN=C26FABA56292EEDFEE739A16B34BE556DEC1AE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:05:5e:13:ee:3a:39:2b:98:01:db:92:8c:
                    cb:af:8f:d9:ce:c7:eb:7f:15:cd:2a:f7:4e:68:c0:
                    86:f9:a4:f8:4b:8c:d3:d9:8b:2d:09:f6:5a:31:76:
                    ad:e9:76:a3:ca:7a:24:ce:82:6c:39:b7:fc:45:7d:
                    1b:32:39:8d:5e:0a:40:de:ca:75:b0:0e:c2:57:3d:
                    07:c7:d8:ec:d3:41:3a:c8:42:e4:c9:bd:0b:60:79:
                    37:d0:3b:dd:db:da:45:2e:83:4f:29:ad:47:0d:79:
                    da:33:df:15:8e:0c:3a:fe:d8:bf:cf:d1:90:6b:ba:
                    48:c3:63:82:88:32:38:96:33:f3:d4:fe:fb:d4:6b:
                    be:a4:83:e6:c2:bc:da:09:7c:3d:3b:28:34:90:39:
                    aa:19:bc:0b:0d:45:05:75:c8:43:90:93:ed:6b:d9:
                    37:9b:7d:0a:67:64:8f:8f:9d:ed:ee:2b:35:58:5d:
                    81:69:b8:4c:6e:af:f6:ba:89:9d:19:ca:eb:5a:1a:
                    cd:ad:24:c5:21:ed:70:c7:6c:1a:4e:48:f3:6c:d4:
                    5a:86:62:36:bc:33:a9:c1:ad:a5:0c:17:88:0c:f8:
                    8b:14:c5:10:af:43:73:56:89:5f:a0:ae:b8:6f:a7:
                    88:8c:b0:da:3b:12:58:87:67:c9:b4:9f:30:84:09:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:AB:A5:62:92:EE:DF:EE:73:9A:16:B3:4B:E5:56:DE:C1:AE:4C
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31312e302f32342d3234203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:77:5e:d1:1a:d3:20:b1:a0:2e:db:dd:7f:b5:a2:a8:9c:15:
         f6:cc:e5:dc:9f:4c:1a:23:f1:3d:c5:50:f3:d8:7b:c5:3d:b0:
         45:83:1a:f9:78:91:22:2d:98:8a:a3:f5:89:44:da:57:16:30:
         b1:e1:19:ad:eb:4b:ca:8c:7e:6c:77:7b:2a:45:8e:6a:0a:07:
         22:91:31:4d:f9:81:a8:37:3e:73:f6:62:ba:01:69:04:b6:b9:
         1a:86:3e:6d:c4:b4:66:9e:e7:37:3c:39:8a:1b:43:ee:93:16:
         12:fa:97:c0:0d:8a:ab:6e:6a:8a:d7:a3:e4:f8:ab:f0:38:5a:
         03:83:64:04:19:f3:6c:28:ad:7e:b6:e7:12:0f:09:15:ea:ba:
         2d:08:e9:ff:cb:bd:a1:66:c4:41:8e:df:29:a3:e5:72:0e:da:
         08:da:80:e8:9b:b7:c7:bf:56:b3:52:dd:65:00:de:b8:0f:da:
         e5:e1:dc:2d:3f:c7:ed:f3:75:c5:5d:60:59:a0:c6:32:40:eb:
         66:4f:2b:57:01:06:2a:a0:f5:a1:30:38:0b:2b:8b:ff:f7:8e:
         31:b8:58:58:5b:96:5f:9b:f6:47:c5:a7:db:ca:75:e8:99:ad:
         ff:b2:5d:61:55:8d:6c:fe:c6:cf:79:6b:93:73:db:a8:69:59:
         80:75:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----