Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa
File:                     3136342e3136332e382e302f32332d3233203d3e20323635373631.roa (raw, json)
Hash identifier:          A2TypNnM4OhEUPyHzL3w2GUOsmeJnSGhCZc/1xhvCz0=
Subject key identifier:   11:29:CF:BA:FB:27:EB:13:25:5F:45:C4:F8:81:EA:25:46:62:AA:DC
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       424AB5812CAF2FF522DBA9E1A7E5ACA478D771A2
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa
Signing time:             Tue 05 Mar 2024 18:13:36 +0000
ROA not before:           Tue 05 Mar 2024 18:08:36 +0000
ROA not after:            Tue 04 Mar 2025 18:13:36 +0000
asID:                     265761
IP address blocks:        164.163.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4a:b5:81:2c:af:2f:f5:22:db:a9:e1:a7:e5:ac:a4:78:d7:71:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Mar  5 18:08:36 2024 GMT
            Not After : Mar  4 18:13:36 2025 GMT
        Subject: CN=1129CFBAFB27EB13255F45C4F881EA254662AADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:c7:5e:12:a4:c1:16:a5:95:58:12:74:33:
                    ba:1e:f3:9c:66:ff:7c:51:9f:0c:49:8f:52:f8:21:
                    25:c3:e5:fd:77:b3:23:14:6d:44:69:e1:a2:68:a2:
                    62:43:47:3e:a5:e0:25:d1:76:71:2c:a2:64:22:eb:
                    da:31:cf:f7:75:74:7f:08:1b:d8:79:0f:6c:7f:58:
                    85:95:6b:1d:b8:78:4a:60:05:e4:49:b8:72:58:d1:
                    cf:d3:83:ea:48:71:1f:fa:3b:9c:c4:e0:0f:77:cb:
                    58:0c:95:fc:d6:47:73:2c:6a:cb:a1:22:2b:dd:f1:
                    01:26:65:06:5b:4c:f7:2e:ed:54:72:00:97:cd:25:
                    91:dc:a9:07:37:fc:14:4e:77:34:14:1b:f6:b6:0c:
                    34:72:a6:12:c0:42:95:61:d2:cd:6a:a2:f9:a7:55:
                    0f:4a:54:95:a3:71:fa:67:d3:30:73:c4:2e:14:90:
                    64:fc:72:ce:dc:0a:05:e8:8e:ed:82:f3:6d:0b:33:
                    6c:0c:03:b1:6e:d0:b9:00:3b:ae:df:f7:86:b7:ca:
                    6b:ac:94:b9:10:90:ec:43:a8:11:ef:66:6f:88:4d:
                    26:ef:15:7c:01:45:b9:6d:7c:32:55:97:00:37:d7:
                    4c:13:e0:d5:22:b0:58:41:66:47:dd:77:66:6e:a1:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:29:CF:BA:FB:27:EB:13:25:5F:45:C4:F8:81:EA:25:46:62:AA:DC
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32332d3233203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:fb:ff:c0:56:38:3a:d9:63:4b:de:e0:63:c6:bd:b9:5c:
         4a:df:87:71:ac:fe:f8:a4:cb:63:93:b4:e7:07:10:7b:aa:0f:
         5c:98:c2:94:d2:5c:d0:04:f8:df:c5:6c:08:a6:3d:a7:55:3d:
         ab:02:00:84:d2:6f:8e:05:8e:62:8d:cd:c2:72:b2:41:d1:d3:
         fa:7a:19:b7:1c:ef:60:c8:85:65:73:96:51:3d:d7:9a:27:79:
         72:9b:4f:56:11:e0:c0:61:48:79:44:c3:1a:fc:33:50:e9:8f:
         1d:53:23:cb:0e:d0:f9:b7:fc:5c:45:9d:bd:92:cd:11:d7:22:
         cb:47:21:46:d7:8c:a8:d7:08:02:a4:96:71:39:f4:15:38:2a:
         ee:ad:1c:6f:04:63:7d:78:d3:ad:56:19:49:e0:71:2b:99:3b:
         2d:58:e2:48:15:5e:50:75:c4:a3:89:f4:1e:7a:8f:dc:4c:4f:
         dd:57:ad:7b:ed:76:b3:87:91:76:dd:9f:87:09:c1:7d:1a:82:
         c8:b2:1a:91:4d:75:d3:7d:0f:20:00:57:d8:8c:f1:de:d9:74:
         7c:88:31:e6:3e:db:13:25:86:18:5b:97:8b:97:ca:80:61:b5:
         46:8c:e7:63:3b:16:56:22:db:95:0c:cf:6b:4c:ce:87:4d:d0:
         6b:30:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----