Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e302e302f31372d3234203d3e203237393437.roa
File:                     3138362e352e302e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          4reqYEgJF8n3mmju8Z1ELThafs0qFffxRSxZoA8qZIk=
Subject key identifier:   BF:DA:0E:92:86:EE:B6:7D:65:D4:AB:8C:CF:0E:E8:A4:9E:E9:73:D2
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       033D2EC9E357387923769D8D9EB1B38C72275AC2
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e302e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:27 +0000
ROA not before:           Tue 05 Mar 2024 18:05:27 +0000
ROA not after:            Tue 04 Mar 2025 18:10:27 +0000
asID:                     27947
IP address blocks:        186.5.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3d:2e:c9:e3:57:38:79:23:76:9d:8d:9e:b1:b3:8c:72:27:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:27 2024 GMT
            Not After : Mar  4 18:10:27 2025 GMT
        Subject: CN=BFDA0E9286EEB67D65D4AB8CCF0EE8A49EE973D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:8b:40:47:4d:8c:fe:50:92:94:fe:42:fb:
                    77:58:cd:ea:1a:b8:2b:df:0f:46:d4:87:4c:f3:09:
                    20:56:f8:63:65:5f:2b:37:e1:ea:9c:ca:d5:82:38:
                    56:49:4e:0f:0e:f2:1f:a7:62:c8:4b:3e:6f:70:e5:
                    78:e7:f3:64:25:2d:80:73:10:d7:a3:6a:a1:be:86:
                    fc:f5:3c:79:19:5c:d2:05:c1:bd:d0:ec:88:be:8c:
                    4a:b9:6c:7d:25:bc:2c:a6:61:f0:80:00:d9:db:c2:
                    e0:73:6e:0f:a5:55:f1:af:f5:61:5e:3b:ef:4f:a5:
                    07:15:06:be:a5:1b:a5:6b:86:fa:89:84:e7:c1:ec:
                    14:f5:6b:7f:26:70:6e:d0:df:cb:35:34:da:79:6e:
                    1a:a4:23:67:87:6d:b1:73:e9:8e:7f:69:70:78:00:
                    48:cc:be:d5:ec:33:33:23:9e:8a:35:4f:1d:3f:97:
                    3b:e7:cd:69:28:fe:69:76:b9:53:cc:3a:be:0d:ad:
                    4c:9a:c1:bf:01:a9:e9:36:39:90:43:49:7f:c4:a1:
                    87:d0:bc:07:22:96:d2:6c:13:8c:65:e1:73:75:73:
                    c6:ef:9e:88:2d:39:95:27:cf:40:34:22:31:b4:55:
                    5d:f1:31:78:5b:81:06:57:8f:d4:03:31:10:b9:3d:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DA:0E:92:86:EE:B6:7D:65:D4:AB:8C:CF:0E:E8:A4:9E:E9:73:D2
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e352e302e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:45:67:39:b4:d0:d5:6d:6e:37:88:a6:0d:10:51:b7:bb:cc:
         08:95:24:9a:85:ed:1e:87:ae:63:92:b2:a7:91:b6:8f:2e:59:
         59:e4:c2:ce:c4:e0:9f:90:b3:13:a7:40:f5:44:e8:49:88:68:
         c0:35:aa:34:46:b2:7e:6a:03:8c:75:15:92:1d:94:13:cb:29:
         be:b0:85:bd:90:44:1b:b7:78:d8:c7:63:f5:db:ed:eb:33:d4:
         ac:c3:72:89:18:53:80:af:48:66:cd:5e:0c:c5:da:72:2c:75:
         5d:02:c1:34:7d:cd:33:29:3c:c0:56:78:49:98:21:ff:8c:a1:
         94:37:88:65:c7:4f:a3:43:5b:83:26:64:77:ff:c4:ca:a2:65:
         92:b0:39:a7:d2:76:ce:f4:c7:7e:9e:db:c9:ee:66:83:41:8d:
         4e:ba:24:47:35:e4:26:64:6d:6f:5a:4a:8b:25:45:3e:ae:11:
         db:33:77:97:6a:b3:f3:43:d7:bb:e5:10:fd:34:de:e8:15:8d:
         5b:f8:cf:33:49:35:d4:df:33:0b:f9:46:10:73:78:f3:72:73:
         0c:a7:3d:7e:f9:2d:c1:c7:63:a8:3c:42:21:07:53:8c:d9:1d:
         8b:e4:e9:75:ef:21:9d:3f:88:ce:e9:ad:f3:6e:9b:97:73:e0:
         71:82:e9:ba
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUAz0uyeNXOHkjdp2NnrGzjHInWsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MjdaFw0yNTAzMDQxODEwMjdaMDMxMTAvBgNV
BAMTKEJGREEwRTkyODZFRUI2N0Q2NUQ0QUI4Q0NGMEVFOEE0OUVFOTczRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkItAR02M/lCSlP5C+3dYzeoa
uCvfD0bUh0zzCSBW+GNlXys34eqcytWCOFZJTg8O8h+nYshLPm9w5Xjn82QlLYBz
ENejaqG+hvz1PHkZXNIFwb3Q7Ii+jEq5bH0lvCymYfCAANnbwuBzbg+lVfGv9WFe
O+9PpQcVBr6lG6VrhvqJhOfB7BT1a38mcG7Q38s1NNp5bhqkI2eHbbFz6Y5/aXB4
AEjMvtXsMzMjnoo1Tx0/lzvnzWko/ml2uVPMOr4NrUyawb8Bqek2OZBDSX/EoYfQ
vAciltJsE4xl4XN1c8bvnogtOZUnz0A0IjG0VV3xMXhbgQZXj9QDMRC5PRI7AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUv9oOkobutn1l1KuMzw7opJ7pc9IwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzUyZTMwMmUzMDJmMzEz
NzJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7oFADANBgkqhkiG
9w0BAQsFAAOCAQEANEVnObTQ1W1uN4imDRBRt7vMCJUkmoXtHoeuY5Kyp5G2jy5Z
WeTCzsTgn5CzE6dA9UToSYhowDWqNEayfmoDjHUVkh2UE8spvrCFvZBEG7d42Mdj
9dvt6zPUrMNyiRhTgK9IZs1eDMXacix1XQLBNH3NMyk8wFZ4SZgh/4yhlDeIZcdP
o0NbgyZkd//EyqJlkrA5p9J2zvTHfp7bye5mg0GNTrokRzXkJmRtb1pKiyVFPq4R
2zN3l2qz80PXu+UQ/TTe6BWNW/jPM0k11N8zC/lGEHN483JzDKc9fvktwcdjqDxC
IQdTjNkdi+Tpde8hnT+Izumt826bl3PgcYLpug==
-----END CERTIFICATE-----