Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138362e332e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          vFgpsNOPpSex5EjEc9639Li2GhuAQtdvu4HJgNN56b0=
Subject key identifier:   FB:EF:15:41:FC:36:62:5E:7B:73:FE:A8:98:37:C1:F1:A3:55:03:2C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       358D54591E51F76F06996347DACF0878D9002F50
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:22 +0000
ROA not before:           Tue 05 Mar 2024 18:05:22 +0000
ROA not after:            Tue 04 Mar 2025 18:10:22 +0000
asID:                     52257
IP address blocks:        186.3.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8d:54:59:1e:51:f7:6f:06:99:63:47:da:cf:08:78:d9:00:2f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:22 2024 GMT
            Not After : Mar  4 18:10:22 2025 GMT
        Subject: CN=FBEF1541FC36625E7B73FEA89837C1F1A355032C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:be:91:f1:48:92:86:7e:4c:91:7e:b8:27:
                    cc:e9:aa:d2:34:91:05:0e:f9:25:65:99:fa:a7:61:
                    82:92:00:9d:db:25:7c:e0:71:8a:97:34:77:a6:6b:
                    01:6c:d9:58:57:87:9e:e2:bb:e3:07:6a:e1:0d:1f:
                    c2:d1:3b:0e:53:b5:9b:46:da:a2:aa:ef:e2:4a:fd:
                    a4:a7:de:28:e9:3a:8c:4a:24:ec:0a:2d:21:74:32:
                    f8:90:8f:8f:a4:51:34:71:a2:00:79:50:d2:9b:d0:
                    9c:a2:07:cf:c8:f4:6a:f2:99:04:b2:a4:70:cb:a9:
                    c9:58:e3:6c:42:2d:04:84:8a:64:95:cb:27:95:66:
                    b4:e5:74:c9:64:a5:5f:c2:41:f8:b2:4f:3d:f0:38:
                    0e:10:3f:70:7e:aa:03:7f:7f:0d:81:cc:bc:93:48:
                    9d:4d:0e:d9:94:48:02:7c:dd:d7:42:34:d7:08:25:
                    73:f0:3f:1c:ae:d9:02:f7:e7:10:d0:af:19:2e:05:
                    63:68:29:0f:d7:c0:9b:ce:09:ff:bc:91:83:dd:db:
                    d5:e5:41:f2:c6:f4:ec:47:53:34:bb:54:c9:74:8b:
                    ce:d9:6a:5d:cf:b2:66:eb:b2:8c:0f:d1:c0:29:a2:
                    4b:d5:ff:f1:b9:93:87:9c:4e:ca:1d:18:17:2a:33:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EF:15:41:FC:36:62:5E:7B:73:FE:A8:98:37:C1:F1:A3:55:03:2C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:08:c3:02:30:d1:18:d0:d2:5c:89:a1:ea:c9:37:22:ef:36:
         bf:3c:97:44:6b:17:f9:61:e2:d4:e2:e3:59:ee:31:73:a6:e8:
         6e:6f:b7:3f:b0:ca:f4:0d:97:2a:2b:e4:ab:13:c7:58:d1:90:
         a5:1f:a4:f7:db:08:4d:d6:46:57:04:5e:9c:b9:03:06:26:02:
         37:13:4f:f7:fd:7c:4c:e7:81:b1:c0:6a:ba:f9:55:a3:b3:f5:
         86:59:8e:83:6d:d9:dd:37:b9:0a:78:66:c5:4d:a0:eb:74:ed:
         32:d3:70:f2:71:44:e6:ee:51:19:ba:3a:00:6e:72:1e:bf:de:
         cd:18:36:f7:fe:c7:b6:d3:c9:e6:e1:0d:17:a8:9d:fe:8a:3a:
         77:29:97:31:3d:a1:d4:06:11:d6:0e:5d:95:2d:62:02:b3:87:
         84:6b:43:37:cc:f8:6e:08:af:d7:68:4d:57:1c:51:70:3f:df:
         35:f2:8c:b1:da:16:38:c8:70:f2:66:1d:4f:4b:69:ab:b3:fc:
         e7:e5:fb:81:7c:3b:06:09:0a:9c:c3:39:5f:89:69:23:86:cf:
         16:f4:1a:0f:c4:af:58:43:7e:9e:b6:86:56:58:e6:58:54:28:
         df:5a:15:32:53:6f:33:ea:4e:7e:8b:01:a0:4f:15:22:d1:36:
         93:c3:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----