Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203237383936.roa
File:                     3139302e382e33322e302f32302d3234203d3e203237383936.roa (raw, json)
Hash identifier:          KZ/Syy2JLafHDQFeGIRPwoU6Ju8O8CSMGbRy8Ja7WXU=
Subject key identifier:   71:63:54:36:F2:AE:18:80:8B:FB:26:08:72:0D:EE:68:A9:4B:2F:B1
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       0CA284BDB66966ABCAF836DC5389A6FBA6211C7F
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203237383936.roa
Signing time:             Tue 05 Mar 2024 18:12:51 +0000
ROA not before:           Tue 05 Mar 2024 18:07:51 +0000
ROA not after:            Tue 04 Mar 2025 18:12:51 +0000
asID:                     27896
IP address blocks:        190.8.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a2:84:bd:b6:69:66:ab:ca:f8:36:dc:53:89:a6:fb:a6:21:1c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Mar  5 18:07:51 2024 GMT
            Not After : Mar  4 18:12:51 2025 GMT
        Subject: CN=71635436F2AE18808BFB2608720DEE68A94B2FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:46:6b:9b:eb:e2:84:ae:9f:70:2f:5c:e7:
                    95:e8:4f:e8:69:1b:98:7a:08:09:01:c8:18:87:4e:
                    81:56:d8:28:74:f3:33:d3:49:41:61:85:5c:99:cf:
                    4b:e5:29:a2:eb:ef:8d:55:8a:a9:2a:a2:74:2c:66:
                    68:e7:db:2f:05:c1:43:0a:41:67:9a:5f:f4:2f:cd:
                    a2:3a:26:b5:c9:4c:bf:7f:86:37:1a:08:b6:6f:99:
                    13:1d:7b:f6:7d:3a:71:37:75:1b:b4:d2:93:49:93:
                    ec:f1:24:e1:0a:8a:cf:da:b0:69:c8:ec:92:53:fa:
                    e3:0c:0d:4b:5b:b2:6d:c0:dd:45:8b:7c:47:92:63:
                    c8:5c:d2:1b:a7:fe:1c:76:db:92:fd:36:98:5a:fd:
                    e9:9b:af:51:10:03:9a:8d:66:0e:64:c9:e4:24:62:
                    74:be:f3:8e:99:f8:55:c1:47:f4:55:54:1a:3d:22:
                    6e:63:84:09:87:da:3d:f3:29:30:59:ba:50:1b:83:
                    92:98:a8:ff:c2:28:ad:a4:32:ae:09:68:81:d8:fb:
                    a7:42:08:a9:b2:25:f4:67:79:35:3c:19:c8:cb:67:
                    57:94:8f:34:0b:57:5b:af:a7:7d:91:a9:81:93:f8:
                    25:9e:10:c0:0d:bd:b7:83:aa:99:31:5e:ce:f2:09:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:63:54:36:F2:AE:18:80:8B:FB:26:08:72:0D:EE:68:A9:4B:2F:B1
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:ba:2e:5c:04:f8:b3:17:49:f9:39:07:9f:aa:34:13:ee:d4:
         7e:b6:25:23:1a:42:1b:e6:ad:74:96:1a:48:c3:d6:74:b8:ef:
         95:60:99:2b:3b:2f:3f:e4:16:c4:0a:1a:10:ba:ce:64:9e:95:
         d2:ac:57:2c:60:89:16:25:eb:41:54:20:cc:e4:50:5e:d3:c4:
         c3:98:e9:42:00:69:c9:e9:43:67:e4:aa:1c:07:0c:ce:cb:5e:
         2f:8a:56:15:c2:05:37:dd:0d:ef:64:9b:fa:78:5f:9e:d0:fa:
         27:61:7c:7e:44:05:ff:11:44:41:3b:d1:83:f0:25:a1:04:31:
         1f:9f:a1:08:d7:26:63:78:e2:3f:08:95:f4:05:5b:64:6f:2f:
         58:87:51:8f:dd:a8:f9:b9:1e:8f:6f:7a:61:71:b3:7e:4c:f2:
         9c:9d:ab:03:26:35:b7:60:43:d3:02:75:49:ad:54:ba:92:41:
         fc:56:33:01:16:d0:c8:c6:21:73:ac:44:67:25:19:1a:c4:5e:
         bb:b2:da:14:4d:66:82:31:e3:41:81:1c:89:35:54:c0:0f:0f:
         81:a2:4c:a1:10:0f:4e:60:ca:98:3e:1a:b0:67:92:01:63:8c:
         44:6a:0e:5f:7b:91:d1:7e:8d:e2:43:0d:38:02:c8:d1:91:7b:
         68:de:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----