Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa
File:                     3138362e3130312e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          u4PRsYcPo60UFvQ80+5tMlIyWsKZ2UmfwARS1uYwhKU=
Subject key identifier:   13:CA:6F:18:95:EB:13:5D:76:CF:A0:BD:58:CA:24:E5:7B:88:FD:EE
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       3068A27ED0849C253122089F443980EDEA7BBDB7
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:27 +0000
ROA not before:           Tue 05 Mar 2024 18:05:27 +0000
ROA not after:            Tue 04 Mar 2025 18:10:27 +0000
asID:                     19169
IP address blocks:        186.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:68:a2:7e:d0:84:9c:25:31:22:08:9f:44:39:80:ed:ea:7b:bd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:27 2024 GMT
            Not After : Mar  4 18:10:27 2025 GMT
        Subject: CN=13CA6F1895EB135D76CFA0BD58CA24E57B88FDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:91:b2:89:d4:d1:a7:bf:4e:7b:ed:e4:4e:
                    ea:04:be:f3:6b:c9:f6:b0:f9:05:89:64:d0:d1:53:
                    b7:bc:03:54:86:e8:a2:ff:0a:a7:2c:b9:f1:84:40:
                    9f:e7:1e:99:a8:09:3a:ca:d6:81:39:fc:df:fd:d7:
                    13:b3:82:52:f2:1a:42:7f:a9:fe:e1:c2:25:7e:46:
                    2b:b6:06:f3:2b:1a:29:99:d6:f6:6b:6c:83:b0:85:
                    92:03:ae:9e:44:8f:83:b0:d8:10:19:51:f0:52:c9:
                    c0:44:f6:69:71:4a:bd:b1:d4:4d:17:3f:aa:95:b8:
                    2a:29:60:17:50:90:08:b6:93:dc:5c:19:c4:c3:bd:
                    5c:7f:a6:0a:d7:96:3d:1f:08:af:cd:c6:79:f2:8b:
                    f4:f5:f4:5d:d8:6c:ce:40:cf:69:6e:f5:d5:df:df:
                    1e:d8:5b:45:f0:3b:00:f2:c2:fc:69:93:c2:33:88:
                    fd:f3:aa:bc:1f:49:c7:60:5e:b6:47:96:13:b1:1f:
                    43:66:fe:b6:ff:34:3d:98:7d:0b:15:ae:49:0f:0c:
                    02:cc:e2:31:2d:9f:e4:5b:78:e8:70:15:ca:44:88:
                    01:43:38:d1:73:e8:e9:9f:bf:16:9d:cf:03:74:6f:
                    24:3a:91:01:64:b6:b1:3c:b7:ca:5a:87:de:a3:60:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:6F:18:95:EB:13:5D:76:CF:A0:BD:58:CA:24:E5:7B:88:FD:EE
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:48:c2:a5:d4:a1:f7:99:9d:ea:03:80:d0:3a:e9:81:45:
         87:f9:90:e1:1f:b3:7d:d9:33:16:3e:a6:a1:02:b0:60:be:60:
         6e:87:a7:fc:ba:4e:ca:1e:ab:bc:73:c5:b2:fa:20:18:fa:79:
         94:01:60:df:1f:90:31:e7:f1:20:54:b9:92:d6:3f:8b:22:5c:
         d3:d8:5e:be:34:10:c4:51:1c:dc:40:d4:3d:5c:5e:f9:af:58:
         45:3e:fc:5e:e9:70:53:f0:1b:d7:e8:c3:d5:88:21:df:dd:8d:
         97:a6:17:86:bb:8e:77:56:8f:d0:56:15:a6:7f:cf:e0:23:26:
         f7:c9:0d:07:25:58:34:f5:2b:28:d3:03:54:a2:0b:eb:69:c7:
         5f:07:ed:1e:e3:c5:a2:a3:ab:33:51:81:77:e6:83:61:1d:cf:
         70:53:2a:50:86:4f:b0:55:f1:df:06:6a:44:06:9d:2f:c3:15:
         84:2d:27:04:0c:e7:a3:2b:b1:85:f0:cf:e0:fa:ee:94:9d:ea:
         6f:4e:6e:7e:57:08:d8:9e:35:e8:03:b9:67:51:27:c2:c9:07:
         3f:66:4d:5e:74:6b:c7:70:dd:c2:b1:48:ab:fc:3b:a8:8b:5e:
         fc:e8:01:b6:3a:79:7f:02:98:e1:12:d2:13:6d:f2:92:95:d0:
         32:05:32:7a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMGiiftCEnCUxIgifRDmA7ep7vbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MjdaFw0yNTAzMDQxODEwMjdaMDMxMTAvBgNV
BAMTKDEzQ0E2RjE4OTVFQjEzNUQ3NkNGQTBCRDU4Q0EyNEU1N0I4OEZERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3ZGyidTRp79Oe+3kTuoEvvNr
yfaw+QWJZNDRU7e8A1SG6KL/CqcsufGEQJ/nHpmoCTrK1oE5/N/91xOzglLyGkJ/
qf7hwiV+Riu2BvMrGimZ1vZrbIOwhZIDrp5Ej4Ow2BAZUfBSycBE9mlxSr2x1E0X
P6qVuCopYBdQkAi2k9xcGcTDvVx/pgrXlj0fCK/Nxnnyi/T19F3YbM5Az2lu9dXf
3x7YW0XwOwDywvxpk8IziP3zqrwfScdgXrZHlhOxH0Nm/rb/ND2YfQsVrkkPDALM
4jEtn+RbeOhwFcpEiAFDONFz6OmfvxadzwN0byQ6kQFktrE8t8pah96jYJa1AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUE8pvGJXrE112z6C9WMok5XuI/e4wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzEzMDMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzkzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC6ZTANBgkq
hkiG9w0BAQsFAAOCAQEAbTpIwqXUofeZneoDgNA66YFFh/mQ4R+zfdkzFj6moQKw
YL5gboen/LpOyh6rvHPFsvogGPp5lAFg3x+QMefxIFS5ktY/iyJc09hevjQQxFEc
3EDUPVxe+a9YRT78XulwU/Ab1+jD1Ygh392Nl6YXhruOd1aP0FYVpn/P4CMm98kN
ByVYNPUrKNMDVKIL62nHXwftHuPFoqOrM1GBd+aDYR3PcFMqUIZPsFXx3wZqRAad
L8MVhC0nBAznoyuxhfDP4PrulJ3qb05uflcI2J416AO5Z1EnwskHP2ZNXnRrx3Dd
wrFIq/w7qIte/OgBtjp5fwKY4RLSE23ykpXQMgUyeg==
-----END CERTIFICATE-----