Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa
File:                     3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa (raw, json)
Hash identifier:          KGzknAC+1hOln4gOhw7m7Yol63qKBkzeCNQ2Lf/4G1o=
Subject key identifier:   49:03:82:BC:B3:EE:F2:A7:D2:7C:0A:BC:3C:62:0A:32:55:5B:AC:8D
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       34B03BEE55C1C5EC37A993155930AF1CB96543B1
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa
Signing time:             Tue 05 Mar 2024 18:13:36 +0000
ROA not before:           Tue 05 Mar 2024 18:08:36 +0000
ROA not after:            Tue 04 Mar 2025 18:13:36 +0000
asID:                     265761
IP address blocks:        164.163.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b0:3b:ee:55:c1:c5:ec:37:a9:93:15:59:30:af:1c:b9:65:43:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Mar  5 18:08:36 2024 GMT
            Not After : Mar  4 18:13:36 2025 GMT
        Subject: CN=490382BCB3EEF2A7D27C0ABC3C620A32555BAC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:76:f9:45:68:ea:38:f3:1f:d4:c8:07:1c:
                    f9:55:27:a3:7a:68:73:2d:ee:13:d7:25:a4:c2:07:
                    ba:cd:46:a3:28:9a:62:aa:71:a2:0c:1f:1e:30:0e:
                    cf:d7:f2:d2:e4:b7:2d:3b:8e:1a:a4:a1:b9:5d:9f:
                    4b:e4:87:ef:74:f5:fc:19:df:d4:d3:9a:19:89:21:
                    eb:22:35:fc:18:0c:2e:bb:d8:1a:15:fe:9b:4e:98:
                    9c:79:d8:50:b9:00:9b:e6:8a:b3:e0:ba:23:d4:63:
                    e9:c5:5c:5e:3d:44:3b:bb:bf:32:20:cb:71:ea:fa:
                    8d:80:c8:d9:0a:78:28:ee:9f:3d:7d:bf:dc:d2:c1:
                    c0:73:79:b2:40:f8:b5:3c:d9:3e:40:85:79:4c:c3:
                    42:a9:53:35:8d:e8:5e:d8:ef:7f:7b:73:48:4e:02:
                    1a:05:96:98:0a:0c:03:60:01:6a:92:32:01:d7:70:
                    af:1e:cc:2c:af:c4:a5:b5:e9:0c:d1:2d:ee:83:8c:
                    9b:7d:31:79:7c:bd:d4:79:4a:d0:1a:f2:7f:74:fa:
                    e6:d3:43:59:20:4c:48:b1:93:ff:ab:91:29:ed:eb:
                    b5:03:3a:8d:db:65:8d:3c:9c:30:33:f4:c3:37:19:
                    02:f6:14:ce:d7:1c:26:d2:f0:15:16:79:6d:65:0d:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:03:82:BC:B3:EE:F2:A7:D2:7C:0A:BC:3C:62:0A:32:55:5B:AC:8D
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:60:9f:e6:0d:c1:ed:2d:f8:60:4a:32:8c:c1:4c:8f:37:
         29:f3:95:09:7e:eb:ea:b6:fc:eb:f8:b7:11:9d:34:3e:91:72:
         8e:ca:17:92:90:20:1c:75:39:e7:44:75:e8:c3:ec:97:62:08:
         d7:21:ba:a3:46:08:7d:b8:0a:3a:43:2d:cd:d1:d0:04:e3:c5:
         2d:24:4c:3e:49:10:5f:e7:94:ca:f6:34:e9:2e:55:9a:fd:b2:
         3b:aa:17:fe:bd:3e:d2:93:56:53:70:9d:19:a7:07:b2:d6:6b:
         3d:94:55:52:4b:ad:8b:8b:fc:1d:78:c1:0d:40:d0:7a:fc:63:
         d1:18:73:a7:b1:cc:2a:cf:08:8e:56:d6:26:ac:c0:78:2f:b0:
         55:25:fc:ff:87:5c:bf:7d:97:c1:5a:e3:7b:42:48:86:c0:91:
         41:4a:dd:25:9e:d8:1b:6c:db:87:08:60:7a:d0:bb:a9:07:6c:
         1a:05:68:0a:5e:98:8c:0c:2b:0b:43:df:91:7a:3c:d8:88:9b:
         b0:68:24:81:c7:ee:80:09:4e:e9:13:7d:f8:68:10:29:97:c9:
         46:d0:63:84:3d:a5:4e:2c:6d:dc:24:7e:14:3b:b5:71:5f:38:
         7f:b4:5f:82:7c:1e:1c:dd:51:fc:0c:4e:23:fa:35:d2:b6:52:
         d9:b8:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----