Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203139313639.roa
File:                     3138362e332e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          py2OLoClvpQmsN25Rvs/Fgx/DVaCIFH9qr2C9v9WSYs=
Subject key identifier:   F6:0D:2F:4B:70:B6:00:12:06:7A:62:C5:99:63:9E:40:83:CB:AA:AE
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       3267B79C1CA67CE4455A2A671373BE26FB2CBB93
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:27 +0000
ROA not before:           Tue 05 Mar 2024 18:05:27 +0000
ROA not after:            Tue 04 Mar 2025 18:10:27 +0000
asID:                     19169
IP address blocks:        186.3.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:67:b7:9c:1c:a6:7c:e4:45:5a:2a:67:13:73:be:26:fb:2c:bb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:27 2024 GMT
            Not After : Mar  4 18:10:27 2025 GMT
        Subject: CN=F60D2F4B70B60012067A62C599639E4083CBAAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:59:07:53:da:03:e0:54:f0:b7:e3:7a:b6:
                    39:e1:36:c9:a5:a6:65:e5:6f:f8:97:9d:65:07:be:
                    ed:19:92:df:bf:61:b3:88:04:34:64:d5:7e:25:51:
                    8c:5a:b6:e1:04:98:de:2e:b8:a2:74:6c:0f:cd:97:
                    32:64:9e:3c:1a:20:a9:29:fb:ff:3f:3f:7b:10:ba:
                    b7:79:68:54:73:0f:83:b9:56:85:7a:78:a0:b5:b6:
                    df:de:15:7d:2f:70:79:d7:5a:37:a0:85:4f:45:8a:
                    5a:8a:dc:88:e4:73:97:0e:de:34:e9:f5:af:9a:ed:
                    2b:40:d1:9b:6a:19:1a:70:d1:44:d5:6a:0a:a8:13:
                    f8:88:d3:8f:82:7d:ab:56:3e:2b:61:39:0a:72:68:
                    5b:f8:91:31:2e:ed:05:c9:83:0f:a7:37:06:b7:7c:
                    07:4c:cf:79:1a:59:4c:3f:ca:56:15:86:92:f7:f9:
                    a6:8a:f5:ff:bd:ec:a1:25:35:be:5d:aa:58:79:73:
                    8a:d3:34:4c:e1:a2:a9:cc:71:b8:49:50:b0:86:fc:
                    ee:69:4f:1d:61:d5:9a:40:5c:d5:14:c0:e0:27:7d:
                    f2:0d:20:7c:26:b5:17:65:d5:0c:97:08:04:60:19:
                    1d:7c:ec:b7:eb:fa:b7:12:98:d2:8a:3c:13:1d:ad:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:2F:4B:70:B6:00:12:06:7A:62:C5:99:63:9E:40:83:CB:AA:AE
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:5b:a4:04:ca:c3:d1:67:e1:aa:83:ac:9b:5f:01:f5:46:
         b3:78:67:45:d3:d7:60:70:0f:9a:ab:65:fa:7c:86:c9:14:6d:
         fd:ae:a7:14:1b:25:84:d5:2f:05:f6:25:b1:79:26:59:4c:65:
         8e:a7:61:89:7d:a4:9b:27:7d:73:4e:df:77:74:50:da:af:15:
         40:06:75:0a:72:f2:99:43:1b:05:2d:af:79:00:0f:48:6b:5e:
         b5:ca:f6:12:a1:47:22:6a:18:99:b8:c7:c9:80:bb:ab:93:2c:
         82:a6:e8:ed:89:d5:67:a9:f7:4f:7b:b4:dc:d5:df:ef:61:bf:
         3a:91:61:f1:f3:a4:1c:6d:28:e7:f8:84:d0:57:6a:59:44:75:
         03:66:9a:85:c6:b5:27:3d:6d:80:ac:83:1a:c0:5c:71:e6:ed:
         b0:fd:96:2a:fd:56:b0:10:0f:4d:aa:b1:4d:cc:1f:f7:f7:93:
         95:22:9c:4c:43:2d:cf:ca:12:34:34:d8:6c:24:c7:27:e6:d5:
         da:5f:09:00:46:9a:14:21:f3:04:b4:f1:41:36:78:16:bd:df:
         ab:9b:df:a0:5a:0f:65:a9:66:54:cf:cc:e0:4f:b2:ff:63:ba:
         e2:4c:ac:2c:80:2e:6d:76:e7:55:1c:25:e8:a7:f0:26:16:7d:
         62:8a:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----