Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
File:                     3135382e39372e36342e302f31392d3233203d3e2033363430.roa (raw, json)
Hash identifier:          QquXyQm14zJvKct8erHC9mcxiIg6vIhCaqCVDZYIFuU=
Subject key identifier:   00:B3:CF:95:9E:1E:D4:26:A3:D5:87:73:A5:DC:84:F3:5A:09:9C:75
Certificate issuer:       /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial:       1C5909D24379A37D14FA1E2F13AE4CC0A7150545
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa
Signing time:             Tue 05 Mar 2024 18:23:29 +0000
ROA not before:           Tue 05 Mar 2024 18:18:29 +0000
ROA not after:            Tue 04 Mar 2025 18:23:29 +0000
asID:                     3640
IP address blocks:        158.97.64.0/19 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:59:09:d2:43:79:a3:7d:14:fa:1e:2f:13:ae:4c:c0:a7:15:05:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
        Validity
            Not Before: Mar  5 18:18:29 2024 GMT
            Not After : Mar  4 18:23:29 2025 GMT
        Subject: CN=00B3CF959E1ED426A3D58773A5DC84F35A099C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:6a:d2:50:aa:40:38:68:9c:eb:e4:77:d4:
                    f9:cd:13:c7:bf:8e:cb:96:60:29:69:c1:66:0d:85:
                    73:55:a7:15:88:df:93:da:56:e2:b5:44:e7:9d:36:
                    b3:8c:4a:0a:1e:90:8f:08:ac:2a:42:9f:4e:7e:32:
                    33:99:d3:c1:c1:67:14:32:72:99:67:88:29:74:3a:
                    8c:7f:2b:28:b3:4f:0a:78:a6:41:e3:b9:6c:ce:69:
                    4e:8b:da:54:04:8c:f2:d7:49:27:66:39:8f:2f:19:
                    2c:5e:5d:b6:ad:ff:6d:54:d6:33:13:51:35:17:4d:
                    ea:ed:67:7a:a6:16:c2:b7:4b:5e:7e:9c:3b:83:4f:
                    2c:ad:f5:44:cf:01:f3:b8:74:ca:ac:c8:b6:ec:85:
                    ca:07:31:40:db:54:ae:92:91:65:5a:d1:2a:64:df:
                    f4:74:4d:cd:03:76:b6:75:12:0d:3e:37:f4:4f:22:
                    bf:6d:42:48:ec:ab:3f:f9:eb:f0:31:24:28:78:bc:
                    38:c9:b6:a2:56:a4:a6:f7:16:3a:a4:c7:bf:ef:06:
                    45:b0:1c:f3:22:8d:59:41:25:2b:87:a0:19:e6:68:
                    89:b0:6b:11:93:67:19:0c:d9:f1:37:87:3e:67:26:
                    8f:7d:a8:20:6c:b8:0b:db:5c:99:69:5c:71:41:4c:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B3:CF:95:9E:1E:D4:26:A3:D5:87:73:A5:DC:84:F3:5A:09:9C:75
            X509v3 Authority Key Identifier:
                keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e36342e302f31392d3233203d3e2033363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:9e:d8:37:91:83:2d:83:15:6e:73:b7:68:ef:5d:2b:ed:
         7e:86:78:e9:13:23:78:c9:4f:84:31:f9:a1:cc:65:b8:12:b4:
         af:ae:61:82:ab:6a:6c:78:e9:3d:76:bc:f6:c7:4b:3e:c9:e7:
         6d:c7:0a:07:ee:c9:1d:de:00:94:59:dc:a0:9b:da:cb:24:d9:
         f8:c5:ad:7a:ce:9a:2b:07:84:8c:da:6c:80:62:0a:93:97:64:
         6b:b7:39:ea:3d:f5:b8:f5:e7:7d:7d:aa:ba:59:60:fd:b7:83:
         f2:cb:c8:61:28:50:45:23:ee:cd:64:6b:51:a1:85:ea:c6:e9:
         9b:b1:cf:4e:20:20:4a:3c:d7:44:f5:50:59:da:b7:d0:6c:e6:
         86:fa:13:a6:b2:4e:3b:e7:88:a0:88:f0:9b:5d:d2:d7:d5:2a:
         e2:aa:4b:84:0a:38:d8:5a:39:ad:ad:16:c3:8d:e8:95:30:8e:
         2a:4c:ba:ce:0a:40:6f:a9:af:53:a9:4f:f2:e4:bd:86:83:e6:
         c9:30:01:c4:56:43:5c:32:9a:e9:38:03:91:cc:ba:21:2a:8f:
         a3:b8:24:15:62:fe:d2:6e:9d:ed:2b:78:0c:1c:ec:fc:34:c0:
         2c:0d:ab:5f:9b:ef:34:66:a3:16:e5:92:ba:04:ac:9a:3e:ba:
         69:e7:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----