Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234342e302f32332d3233203d3e2033383136.roa
File:                     3138362e3138332e3234342e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          aD/6x0wHhiN43YsqFexaDD+DSU0BrZ6VTlA6Q74n7HQ=
Subject key identifier:   96:10:C4:3E:91:99:8B:70:D8:88:5C:17:EE:40:75:0A:52:A9:E5:4D
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       156E218764F594E1B8542404B412098C7B303F5A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234342e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:05:53 +0000
ROA not before:           Tue 05 Mar 2024 18:00:53 +0000
ROA not after:            Tue 04 Mar 2025 18:05:53 +0000
asID:                     3816
IP address blocks:        186.183.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6e:21:87:64:f5:94:e1:b8:54:24:04:b4:12:09:8c:7b:30:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:53 2024 GMT
            Not After : Mar  4 18:05:53 2025 GMT
        Subject: CN=9610C43E91998B70D8885C17EE40750A52A9E54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:3f:ab:52:de:01:59:09:d7:60:70:ef:41:
                    4a:5d:ae:57:01:a1:15:9b:f2:9d:91:be:f5:c1:aa:
                    cb:3d:cf:37:ba:c4:10:bf:55:23:37:9b:2d:4d:6d:
                    86:e8:35:ad:c7:81:88:65:bb:2c:7e:16:d7:fa:1c:
                    0b:72:4c:d8:32:62:e6:14:71:de:c7:67:a5:d3:72:
                    9e:8a:e1:bf:e9:76:d2:0b:54:51:3b:3a:2f:1e:67:
                    fa:bc:cc:cf:ec:53:57:64:10:79:ae:2d:1f:f3:62:
                    08:d4:91:f7:37:9b:ba:73:fc:70:cb:48:50:42:dd:
                    49:fc:d9:e5:fe:65:8e:8a:a3:f0:e3:a4:3f:a8:12:
                    65:f5:2d:f4:a9:81:3b:a9:70:ce:d1:78:bb:6e:6e:
                    2e:a0:e7:db:d6:c0:33:29:a3:c5:c5:41:e8:1d:52:
                    ad:f1:7d:2a:ee:96:42:23:63:a7:44:7d:f8:a1:20:
                    16:a2:3c:9f:17:4c:47:dc:2e:de:a5:e6:de:f8:76:
                    ca:8d:4c:c1:15:d0:cf:56:37:3c:f5:5d:ec:05:76:
                    3b:17:6f:33:e7:fe:08:cb:19:cc:f2:0d:c3:4f:b5:
                    5a:d3:bc:4d:90:0d:8c:d8:26:50:a6:6d:33:3c:d6:
                    46:cc:6e:6c:a7:ce:ee:46:97:0f:06:23:9e:1e:92:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:C4:3E:91:99:8B:70:D8:88:5C:17:EE:40:75:0A:52:A9:E5:4D
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234342e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:2e:2f:88:c2:57:50:b7:0a:78:e5:4c:a8:88:5b:55:2c:
         e0:be:27:c6:4b:ba:59:67:1b:c7:4f:84:ce:13:86:e2:d0:8d:
         cb:9b:77:de:6c:61:cc:68:f4:3c:39:a8:87:c6:7a:49:5f:30:
         18:52:37:17:c8:1f:1e:5c:24:34:cf:47:c8:a7:8a:18:d2:f4:
         33:e4:9d:fd:08:3e:10:97:f3:61:30:65:66:ea:a3:09:72:2c:
         cc:1d:54:ca:be:d0:8a:20:af:85:67:9c:29:a3:bf:64:d7:c8:
         4e:7a:7d:14:26:7a:4d:f1:c1:82:d2:b6:a0:dc:df:6b:1d:ed:
         e6:ad:5e:0f:c6:f0:bc:c7:02:28:c8:2e:28:76:8d:23:a5:b9:
         17:73:a5:fd:8f:7a:0f:6b:25:5e:83:2f:0b:12:c3:81:c1:66:
         e6:bb:dd:ba:df:8d:82:bf:71:b7:41:c5:25:75:a0:1b:dd:f8:
         0f:ee:ed:00:f2:9e:55:03:0e:9f:69:b4:d0:6b:36:6b:cf:20:
         c0:1d:4c:a0:ba:c3:53:4a:8d:54:fc:67:4a:ac:ec:b0:c4:05:
         e3:b8:0e:ae:10:1e:72:4c:e3:69:36:22:d0:e2:7d:3d:4a:d7:
         10:16:fe:29:f9:2e:da:cd:8b:da:bb:09:fa:65:03:4b:7b:56:
         60:38:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----