Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e39362e302f31392d3234203d3e203532333431.roa
File:                     3138362e3138392e39362e302f31392d3234203d3e203532333431.roa (raw, json)
Hash identifier:          1evDIbQkybIDHC0PuJwyC5s1SkrMULEISiXmjPCNDTo=
Subject key identifier:   B3:50:14:15:D5:32:86:3C:82:EB:15:01:FA:3A:5A:58:4C:22:ED:A8
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       166DBF98E97A28B21E87CAF441AF3EEA8365BF3A
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e39362e302f31392d3234203d3e203532333431.roa
Signing time:             Tue 04 Feb 2025 18:43:29 +0000
ROA not before:           Tue 04 Feb 2025 18:38:29 +0000
ROA not after:            Tue 03 Feb 2026 18:43:29 +0000
asID:                     52341
IP address blocks:        186.189.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6d:bf:98:e9:7a:28:b2:1e:87:ca:f4:41:af:3e:ea:83:65:bf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Feb  4 18:38:29 2025 GMT
            Not After : Feb  3 18:43:29 2026 GMT
        Subject: CN=B3501415D532863C82EB1501FA3A5A584C22EDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:5f:85:e7:d0:89:f4:2e:1b:48:77:92:2c:
                    b3:97:27:06:d9:51:7f:0e:cd:e3:42:e3:fb:47:fd:
                    a2:3a:1b:f4:7d:cd:d9:55:a5:d2:d4:57:5f:95:e3:
                    4e:1f:59:a0:a6:78:96:15:50:16:4b:61:52:9e:b2:
                    02:b7:9e:dc:f0:b2:cd:57:2b:ff:5b:2f:f1:95:cf:
                    97:36:0b:8b:ff:3e:88:d2:0b:a2:a9:c5:db:fa:88:
                    d8:47:c4:4f:6c:fc:f6:51:89:06:1c:50:83:31:8d:
                    67:13:8b:88:c9:ea:99:55:6b:10:23:42:65:1f:fa:
                    0d:45:f3:fb:6c:a0:a0:ef:f0:8a:c6:ec:c9:18:14:
                    20:8e:ca:d2:28:d2:f3:2a:87:cf:df:f0:50:2a:f1:
                    91:8b:fe:8c:7f:ed:44:0a:53:50:6e:58:f6:3d:a4:
                    b5:08:2a:01:63:2d:d4:76:b7:9c:af:a9:ef:32:29:
                    c3:62:8e:be:6a:2c:79:e7:5c:dd:70:51:c9:89:86:
                    a5:07:2d:f4:bc:6b:c3:1a:1b:01:79:21:03:c9:e4:
                    3e:92:c4:c7:00:b7:75:93:19:31:e1:20:b2:27:0c:
                    93:9b:8f:cb:7f:0d:37:93:dc:24:a7:74:9d:fa:5c:
                    37:68:76:83:10:cb:c0:5c:fa:8b:ad:ba:13:ac:7a:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:14:15:D5:32:86:3C:82:EB:15:01:FA:3A:5A:58:4C:22:ED:A8
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e39362e302f31392d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:4c:fe:e3:4f:1a:fc:17:de:71:c4:64:eb:26:c5:06:cb:
         17:09:ce:e1:42:f3:45:c3:a2:9f:8e:26:30:d5:8c:e4:e0:b0:
         2e:fe:15:05:d8:0e:de:ac:f3:3b:ff:aa:ae:61:ba:88:68:7d:
         2b:14:62:39:86:ae:33:2e:27:b3:8d:78:6e:9e:58:e3:51:99:
         f9:0c:69:3d:89:04:e2:69:ff:79:29:bd:c3:bf:d9:a4:42:62:
         3f:90:65:ed:e8:ed:ba:6b:f4:ff:a7:9c:a2:41:84:c8:98:50:
         7e:84:24:04:e7:b2:5c:0f:1d:ad:46:a6:ec:5d:c4:e6:75:4f:
         13:57:d6:b0:9d:dd:6c:d9:9a:e8:c8:3d:53:d1:2d:48:a6:c9:
         fd:e0:a9:34:a6:5c:e8:42:fc:76:a3:a2:c8:da:4c:91:d2:80:
         f0:9e:80:14:6e:db:9f:74:86:fe:68:84:6e:7a:12:87:81:49:
         18:f7:d6:02:66:d2:b7:8c:9e:d4:97:5b:43:cc:56:84:27:69:
         7e:a3:38:d8:6d:44:0f:d0:24:9f:53:19:32:39:a7:ae:c3:bb:
         fc:e2:08:aa:4b:6c:b0:63:87:be:53:a2:a1:68:75:c1:4d:fb:
         cf:4f:29:70:0a:a7:46:b0:5a:55:89:9e:78:82:ff:0b:1c:35:
         a8:16:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----