Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
File:                     3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          O9prgLIiBmoQyhHrczzXZWSmXR/Q5TemuM1+zidLKvA=
Subject key identifier:   45:6C:59:D1:94:5C:08:B4:C1:F2:CE:D3:C5:86:48:E1:EA:DB:41:17
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       5BE8CCFB66CA81E51D646390949D5DAD2CA994B2
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     395161
IP address blocks:        138.186.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:cc:fb:66:ca:81:e5:1d:64:63:90:94:9d:5d:ad:2c:a9:94:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=456C59D1945C08B4C1F2CED3C58648E1EADB4117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:04:d4:51:61:bf:15:6d:23:8e:97:de:7d:
                    18:18:f4:6e:3c:51:e4:91:7a:29:c0:3b:71:cb:e4:
                    d5:42:f8:d4:fd:ba:58:a0:cb:94:c2:4c:5d:1b:59:
                    98:ff:0a:03:49:e6:98:78:1a:86:37:fa:80:c1:8b:
                    a9:70:f9:7e:03:14:a3:14:2f:9a:d6:6d:1b:70:65:
                    bb:45:63:35:40:4f:e7:69:85:ec:d4:12:47:d2:3e:
                    64:f4:04:5c:39:5c:91:59:23:e6:03:64:d1:03:49:
                    bb:b1:3a:7a:da:e0:65:aa:76:4d:e5:e0:82:fb:27:
                    2b:e5:fb:f5:63:0b:16:1d:36:3c:f6:10:bf:6e:93:
                    de:57:8a:a7:bd:29:3d:65:1e:1f:e0:6e:5f:df:15:
                    00:8d:04:f3:c2:43:06:56:ef:37:07:92:73:66:cb:
                    d2:6a:5d:af:78:92:9e:dd:0f:20:2f:c1:74:7d:56:
                    1a:80:e6:09:30:38:69:9d:12:e0:19:27:5a:29:b1:
                    db:7a:d4:40:cc:85:24:44:c0:ba:be:67:76:df:a2:
                    76:f0:0e:24:91:a7:9c:aa:1f:23:06:b6:61:93:25:
                    b1:b3:d2:74:06:18:21:03:56:3e:72:3d:40:a6:a0:
                    84:18:e5:95:c5:ea:93:f6:da:f1:fe:d8:e7:88:ab:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6C:59:D1:94:5C:08:B4:C1:F2:CE:D3:C5:86:48:E1:EA:DB:41:17
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:8d:04:5c:20:e8:e1:0e:7c:e1:02:14:9b:b9:3d:79:be:
         93:7e:c5:65:09:b8:c9:c8:03:5e:27:b7:54:ee:a7:a8:f1:6a:
         57:cf:c9:92:2a:c7:ec:16:f7:d2:50:1a:6c:0d:b5:1a:7d:e1:
         a1:74:c9:98:ac:2a:36:f9:46:42:d4:cb:cf:a7:71:59:53:b6:
         da:e6:71:ce:31:ca:e2:f1:25:f9:2b:60:4f:b1:25:27:53:50:
         18:bb:6d:e8:b6:ab:aa:d1:e2:15:c5:eb:b7:fc:3e:0d:7a:ef:
         0b:66:bf:d8:c3:4f:fe:ad:00:7d:ee:16:b3:a6:5a:ed:ec:4f:
         56:38:e2:86:b9:b1:8d:43:aa:33:36:d5:e7:fd:a3:25:cd:73:
         36:f0:aa:3c:8b:5d:68:82:9c:c0:93:f7:18:cb:d7:14:3b:ed:
         97:df:9f:92:22:8b:ca:25:47:9c:23:24:00:19:b1:b7:64:2b:
         05:ee:08:21:30:dc:df:5f:1f:30:37:28:ff:15:7d:60:a6:69:
         7e:39:cc:01:3c:4f:63:25:57:67:c7:a3:76:ed:a5:6c:fb:d2:
         e5:78:01:8e:f7:41:d0:e8:4a:e5:74:b6:be:5a:4f:12:5d:76:
         cc:9d:23:0a:3c:28:5d:2e:e4:d9:c7:1b:88:96:90:e3:88:10:
         63:84:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----