Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa
File:                     3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa (raw, json)
Hash identifier:          khj4rdrRZtmn6LiyZhvfldWdTc6UFTWjO/6nTIxikLs=
Subject key identifier:   D7:C2:7F:16:50:D7:2A:81:57:89:AD:B1:0A:48:C2:2A:4E:66:72:6D
Certificate issuer:       /CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
Certificate serial:       5C0407F3EFA287A0A11A96D615A264549B733E3C
Authority key identifier: FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa
Signing time:             Tue 05 Mar 2024 17:45:57 +0000
ROA not before:           Tue 05 Mar 2024 17:40:57 +0000
ROA not after:            Tue 04 Mar 2025 17:45:57 +0000
asID:                     264651
IP address blocks:        138.186.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:04:07:f3:ef:a2:87:a0:a1:1a:96:d6:15:a2:64:54:9b:73:3e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
        Validity
            Not Before: Mar  5 17:40:57 2024 GMT
            Not After : Mar  4 17:45:57 2025 GMT
        Subject: CN=D7C27F1650D72A815789ADB10A48C22A4E66726D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:39:53:96:a5:c5:ff:69:cc:19:1b:32:17:
                    58:12:35:8b:a9:42:a0:d9:4e:44:8a:9f:7b:0a:cc:
                    cd:1e:98:fc:21:5f:20:76:e4:09:6f:54:8e:70:a5:
                    fd:26:2f:02:ff:66:30:6f:6a:bd:92:05:1d:6a:bc:
                    fc:e5:66:52:51:2a:f6:ff:77:78:5c:67:f5:4f:e3:
                    85:9a:b7:42:97:d6:b5:6a:fa:be:92:13:84:04:2f:
                    b9:93:7e:c2:3f:5a:c4:cb:40:fc:e9:17:d9:eb:e4:
                    94:94:74:5c:da:c9:5a:76:82:45:73:34:af:aa:c0:
                    73:72:ee:7f:bf:f5:b2:70:2f:6f:10:ba:4e:e7:d7:
                    fb:c3:59:ea:8e:74:3c:de:af:64:a4:3d:73:b5:41:
                    dd:e2:13:ee:7a:5b:e3:dc:f5:53:a1:62:76:7d:92:
                    9c:25:92:b8:bf:46:2e:b7:14:d4:b0:5e:f7:09:db:
                    1a:c6:3c:61:74:9d:09:f8:b2:b0:b4:95:f4:15:52:
                    ef:71:e5:1b:b3:c7:3e:6f:00:26:ac:be:e6:6a:c2:
                    cf:a9:05:bb:df:d2:47:b5:e3:8b:69:99:e2:81:b0:
                    06:d8:75:6c:c0:08:54:b9:ac:11:af:c2:0b:8c:54:
                    7d:2f:4d:d4:e7:19:0d:78:0d:c7:5f:96:fc:1f:d1:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:7F:16:50:D7:2A:81:57:89:AD:B1:0A:48:C2:2A:4E:66:72:6D
            X509v3 Authority Key Identifier:
                keyid:FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:98:8f:25:d9:43:31:0c:43:39:e6:68:3f:fd:0f:d5:79:ad:
         69:11:f5:7b:52:b1:b6:ef:55:61:8f:aa:0c:9c:8b:48:18:99:
         7d:49:70:90:cd:b9:4f:3e:15:2b:56:62:29:45:f9:db:93:74:
         89:3a:ff:4e:e9:dd:03:82:0e:ea:9a:26:69:03:c5:50:e5:18:
         5d:10:91:67:db:47:54:24:1c:a3:b3:89:14:a8:c0:8b:dc:6a:
         0f:d9:14:53:4c:48:0e:99:07:71:ee:fd:de:6e:34:86:2a:11:
         3d:54:ec:ac:e4:4a:bb:72:38:05:f4:c1:c5:e2:b9:c8:21:45:
         32:5f:a2:41:12:b5:71:00:0b:64:70:51:c9:8f:10:0e:31:63:
         1d:91:85:df:40:56:43:2f:e8:04:37:45:41:5a:d9:43:68:6b:
         90:2c:89:c3:3f:0f:55:f7:d6:3a:44:fa:bd:b0:ea:68:99:67:
         12:d3:76:d2:da:e6:bc:2e:ec:35:0e:ed:94:5f:4a:16:47:cf:
         7e:6f:6b:01:27:4b:cb:e2:69:17:84:93:b8:45:8f:a5:c5:85:
         8c:9e:13:9a:7c:88:a9:db:f9:44:26:d7:6c:de:5c:73:8b:fd:
         b2:f7:37:0a:8b:4d:02:ec:e0:f5:4c:98:ee:e8:8e:51:9c:ea:
         5f:17:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----