Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa
File:                     3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa (raw, json)
Hash identifier:          ZXOklE3quTn701z2pOS7vytpcnqo7UQFzpDpagK1X18=
Subject key identifier:   CA:59:4C:1B:3E:FC:A9:26:13:43:4E:98:F3:A1:2E:65:E6:AD:29:FC
Certificate issuer:       /CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
Certificate serial:       0386D14AE6A6968419A7F5EFA8C329316CFA21E5
Authority key identifier: 96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa
Signing time:             Thu 23 May 2024 00:50:00 +0000
ROA not before:           Thu 23 May 2024 00:45:00 +0000
ROA not after:            Thu 22 May 2025 00:50:00 +0000
asID:                     269918
IP address blocks:        131.72.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:86:d1:4a:e6:a6:96:84:19:a7:f5:ef:a8:c3:29:31:6c:fa:21:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
        Validity
            Not Before: May 23 00:45:00 2024 GMT
            Not After : May 22 00:50:00 2025 GMT
        Subject: CN=CA594C1B3EFCA92613434E98F3A12E65E6AD29FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:77:b8:ac:70:c7:78:4b:cd:b0:c6:ab:fc:
                    8b:90:ac:79:da:c9:69:09:96:d9:5d:c5:35:07:af:
                    24:b1:61:fb:cf:59:a9:cd:29:bf:7a:d1:b6:f9:28:
                    ec:ee:0c:44:ae:74:8f:c4:ad:04:d7:de:7b:a8:55:
                    90:45:e7:be:54:90:30:1f:2e:43:dd:91:6a:d8:71:
                    c1:98:23:6d:97:6c:d3:35:32:c2:9e:f9:3c:af:05:
                    2d:eb:b5:38:5b:eb:74:4c:ec:61:7e:e0:48:90:4a:
                    1f:b5:81:80:2d:82:d5:fb:a0:62:c0:eb:bb:03:9d:
                    40:de:bb:ad:0b:40:c9:51:a8:5a:44:06:53:44:2e:
                    7a:3f:31:61:24:a2:34:ae:a5:a0:b0:b5:84:6f:77:
                    98:9a:79:3c:93:54:ef:7d:a7:0d:8b:7e:d3:dd:f3:
                    55:2f:e5:0a:49:f7:a1:10:4b:fc:bd:10:d5:4c:95:
                    7c:c7:c8:26:f7:de:95:34:aa:e6:b8:17:42:8e:44:
                    ef:5c:12:92:18:1d:b6:9f:aa:a9:d3:96:c0:6f:74:
                    ef:bb:b6:26:45:1e:77:f7:d3:34:17:1f:94:21:5b:
                    55:36:38:87:24:4a:7b:b6:d0:07:7f:30:3f:20:1f:
                    dc:99:f7:68:ea:b7:25:68:b8:46:19:38:a0:06:75:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:4C:1B:3E:FC:A9:26:13:43:4E:98:F3:A1:2E:65:E6:AD:29:FC
            X509v3 Authority Key Identifier:
                keyid:96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:73:b4:a8:6f:67:8a:c2:98:f3:8c:b5:2e:fc:c3:af:47:
         0f:92:6a:0f:51:40:e2:d6:a7:0e:61:e9:7f:f5:ed:25:61:ed:
         a9:db:75:78:77:59:eb:f3:a9:54:b8:05:5d:15:51:08:d1:13:
         58:fb:88:44:f2:b3:4f:a8:fb:06:6b:7c:1f:a4:4f:14:5d:a5:
         b9:04:f3:a7:fa:ee:1c:a3:80:66:15:67:f1:39:08:35:66:15:
         c6:69:98:c5:b5:76:ad:85:65:c4:ec:ea:ac:45:0a:4d:a4:fa:
         ab:92:ca:b6:89:70:16:70:9b:d0:c1:7a:03:c0:82:1d:f3:17:
         21:cb:24:58:ee:a8:99:27:62:50:aa:ce:f7:a8:61:ab:54:b3:
         ac:99:59:89:fd:10:10:05:7c:01:6c:dc:52:fc:55:ed:c3:a0:
         ac:c9:3a:82:85:f5:f0:af:b9:0f:1f:fa:26:d4:0c:e4:14:21:
         4e:e3:f3:63:2d:4b:0b:e6:08:01:1b:de:6a:d4:44:d2:eb:e1:
         7e:bf:88:8b:25:6c:28:1c:7f:2b:85:94:9b:f9:65:68:e5:3f:
         8f:91:d7:87:dd:93:62:2f:6d:3e:da:d2:f9:ad:4a:40:f4:bf:
         e6:1c:84:fd:71:b7:ba:95:23:0d:9e:ca:c3:b6:10:29:bc:32:
         e1:ae:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----