Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
File:                     3138362e3130312e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          DZh6d/pv4zfhXQPF0/IAa4h9vsqPturoT3GfQqk9DZ4=
Subject key identifier:   C7:36:AE:26:4B:05:A3:E8:DA:B4:BB:9B:57:C5:BB:42:4B:8C:7F:12
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       634F8CCF845921AAA17B5779372E81D7D878C264
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:26 +0000
ROA not before:           Tue 05 Mar 2024 18:05:26 +0000
ROA not after:            Tue 04 Mar 2025 18:10:26 +0000
asID:                     27947
IP address blocks:        186.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4f:8c:cf:84:59:21:aa:a1:7b:57:79:37:2e:81:d7:d8:78:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:26 2024 GMT
            Not After : Mar  4 18:10:26 2025 GMT
        Subject: CN=C736AE264B05A3E8DAB4BB9B57C5BB424B8C7F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:d6:77:b8:f4:49:38:93:3e:da:12:c0:96:
                    6d:67:83:76:0a:90:74:36:00:9a:eb:64:d6:e0:dd:
                    8f:88:a3:a5:74:49:d7:a0:05:3f:f8:a8:cd:1e:fb:
                    d1:61:f9:29:f5:ac:68:72:1b:07:fe:65:70:43:c0:
                    ad:4a:91:8e:2d:48:19:42:53:e0:43:24:5c:aa:2a:
                    43:4b:6a:38:b6:eb:5d:c6:fb:f6:7b:d5:65:ba:bc:
                    0a:95:bd:6a:c7:ef:33:b3:3d:69:ea:b8:03:20:38:
                    79:9e:be:43:fb:b8:96:12:94:a2:20:97:28:6f:02:
                    c5:ea:57:db:6d:b4:0e:0e:33:70:8e:51:26:2a:4f:
                    e8:60:39:d1:a9:e9:91:de:2f:04:0f:1e:81:d4:93:
                    76:28:7f:f6:63:c9:49:cc:fd:35:62:ed:33:05:fd:
                    9d:6a:5b:bf:25:ed:69:ae:13:94:ff:c8:ea:46:da:
                    8c:d0:bb:db:ee:66:57:44:0e:b9:92:60:0b:d9:95:
                    80:ae:5c:f4:0e:d7:81:5b:1d:4f:8e:ef:6b:b9:07:
                    01:21:11:7e:e5:8c:83:cf:4f:ab:a9:c9:9f:ee:3a:
                    ae:5f:a8:ff:31:18:9b:62:de:53:33:6b:aa:fa:72:
                    ed:cb:a6:05:5a:57:06:2e:6c:11:64:41:91:aa:55:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:36:AE:26:4B:05:A3:E8:DA:B4:BB:9B:57:C5:BB:42:4B:8C:7F:12
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:44:9f:50:68:e6:53:26:67:b0:e9:53:e7:d7:aa:d8:ea:
         9f:fe:42:d9:42:cf:08:dd:92:ff:d1:c9:81:96:46:32:4c:d7:
         ab:0c:f5:a4:60:75:e8:45:c4:a7:6c:2f:45:bc:a5:25:2d:e6:
         4c:2a:f9:54:64:c6:54:55:ce:dc:c3:74:fa:fe:01:43:6a:c7:
         aa:d0:dc:99:ae:2c:73:e9:98:64:ca:e6:d1:c6:dd:db:0a:18:
         81:05:68:f4:38:6e:16:1b:32:f2:88:9c:b5:6a:3e:5f:6d:d6:
         d4:4f:f8:d5:0c:75:7f:24:c8:df:54:67:9c:de:d1:81:0f:d6:
         12:13:4a:39:5f:2e:fc:cc:ce:b3:8e:93:b3:59:ca:be:f6:7e:
         8f:e4:a9:21:96:4a:13:79:cf:58:a9:1c:5b:45:a0:8f:e4:f1:
         fe:7e:5c:54:ce:2c:14:6c:56:6e:30:8c:f5:42:48:17:77:f5:
         c7:05:38:18:e6:46:c9:74:5c:84:6e:00:e9:b7:19:2d:6c:8a:
         22:11:04:57:98:c5:17:03:c8:ca:43:a2:ed:2d:e8:d2:94:62:
         19:b6:9e:a1:1a:e9:3c:78:f8:20:27:bb:95:f0:5a:e5:7c:c8:
         9a:ff:0a:ff:42:88:92:1e:6d:f7:b9:7a:48:11:69:a9:51:15:
         bb:ba:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----