Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C99B05FB6BBFE69CAB00601A8A88B2DAB5230E1FCF6D990C4190027D2F0DEEE/0/3134382e3231352e302e302f31362d3234203d3e203238353236.roa
File:                     3134382e3231352e302e302f31362d3234203d3e203238353236.roa (raw, json)
Hash identifier:          EYwa+ryC5wbVE5nFyVzKIdS7LlC+TttRQU1UCWSnNiU=
Subject key identifier:   EA:C0:19:BF:29:5A:30:96:2B:AD:46:95:42:F5:4C:83:98:56:83:AF
Certificate issuer:       /CN=E0055674F33D1DA955C79EAF675C432DB47486FD
Certificate serial:       2FA6C49200EB46D2ABC25A41CA8B202A70994359
Authority key identifier: E0:05:56:74:F3:3D:1D:A9:55:C7:9E:AF:67:5C:43:2D:B4:74:86:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0055674F33D1DA955C79EAF675C432DB47486FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C99B05FB6BBFE69CAB00601A8A88B2DAB5230E1FCF6D990C4190027D2F0DEEE/0/3134382e3231352e302e302f31362d3234203d3e203238353236.roa
Signing time:             Thu 13 Jun 2024 19:10:00 +0000
ROA not before:           Thu 13 Jun 2024 19:05:00 +0000
ROA not after:            Thu 12 Jun 2025 19:10:00 +0000
asID:                     28526
IP address blocks:        148.215.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a6:c4:92:00:eb:46:d2:ab:c2:5a:41:ca:8b:20:2a:70:99:43:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0055674F33D1DA955C79EAF675C432DB47486FD
        Validity
            Not Before: Jun 13 19:05:00 2024 GMT
            Not After : Jun 12 19:10:00 2025 GMT
        Subject: CN=EAC019BF295A30962BAD469542F54C83985683AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:e1:7d:5a:db:8c:34:40:5a:f8:73:ed:14:
                    d5:ed:ee:f7:8f:7d:33:e9:cd:f6:75:2b:b2:df:2b:
                    cd:ef:d5:68:df:02:b1:2b:6e:e6:c5:3f:e2:11:22:
                    d7:e8:01:f3:70:42:51:cd:0a:4d:ef:af:d5:8c:6b:
                    16:6a:3f:70:e9:34:20:f5:20:76:c8:18:f2:a2:ac:
                    1e:1e:b7:e7:ff:20:cb:8a:22:10:79:19:c4:f3:91:
                    b4:f7:84:ee:1f:be:f3:64:5c:76:a7:89:8a:af:e8:
                    05:f6:c8:c2:81:a4:ff:b3:88:c2:f3:68:7d:95:41:
                    67:bd:8b:a2:8e:d7:b9:7c:d6:c7:21:6a:fa:e8:ce:
                    f9:5f:f1:03:41:ca:19:5a:35:d4:a5:ed:8c:eb:b2:
                    73:45:0b:08:b6:55:88:c3:d4:5d:81:bf:22:70:58:
                    a7:fd:09:ca:02:d2:69:e5:15:2f:75:19:fc:02:ab:
                    2f:f5:55:6c:d1:0c:cc:93:1d:9c:a4:a3:7c:50:76:
                    22:46:58:50:df:8c:e1:36:8d:a3:42:f8:f1:85:e7:
                    37:ff:e0:8c:1c:b7:d2:b6:53:76:45:6d:58:9b:cc:
                    b3:89:a7:fa:82:cd:06:be:c8:f4:12:7a:5e:ff:75:
                    52:f2:a5:6b:f9:7c:78:ee:23:03:b1:2d:6b:6a:91:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C0:19:BF:29:5A:30:96:2B:AD:46:95:42:F5:4C:83:98:56:83:AF
            X509v3 Authority Key Identifier:
                keyid:E0:05:56:74:F3:3D:1D:A9:55:C7:9E:AF:67:5C:43:2D:B4:74:86:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C99B05FB6BBFE69CAB00601A8A88B2DAB5230E1FCF6D990C4190027D2F0DEEE/0/E0055674F33D1DA955C79EAF675C432DB47486FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0055674F33D1DA955C79EAF675C432DB47486FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C99B05FB6BBFE69CAB00601A8A88B2DAB5230E1FCF6D990C4190027D2F0DEEE/0/3134382e3231352e302e302f31362d3234203d3e203238353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.215.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:a8:4b:01:63:a0:2a:0e:17:4c:89:e5:79:5d:70:47:a9:
         b5:96:43:df:12:7e:c5:68:87:57:bc:3c:8c:21:e4:40:05:01:
         b6:4e:0a:de:83:d9:4c:ad:2f:64:82:7e:f8:2e:05:02:2d:bd:
         d4:f5:59:93:e4:7e:61:1f:db:9e:79:65:40:71:03:05:cd:06:
         05:77:c7:8b:aa:e0:12:bb:f5:88:ba:f2:3c:e4:cd:f3:4e:8a:
         99:da:ac:92:64:7a:72:8e:55:e2:8b:f9:d5:2a:4e:50:0b:20:
         0c:9c:ab:b1:19:d0:2f:6e:03:2a:d6:28:5d:6f:43:ca:20:2b:
         b6:99:61:33:80:d1:53:17:fa:d8:0a:e6:90:e1:ca:a3:3f:c8:
         92:75:52:82:c5:e8:bf:01:16:f8:15:46:2f:14:45:c4:3a:23:
         9d:07:31:6d:11:f1:8e:cc:05:3e:de:2e:7d:d1:8b:61:a3:ac:
         2e:8d:89:7a:b2:b9:7c:38:4b:ed:04:d8:52:70:03:ed:ec:b9:
         84:9a:73:be:54:43:6c:8a:b6:57:92:37:ea:6f:ac:03:c3:5b:
         69:50:83:1e:31:59:d3:f4:e3:3a:b9:39:86:72:25:bb:1c:5c:
         ef:5b:63:89:80:9d:ac:41:7e:66:5f:9a:a8:8e:ff:e4:6a:a2:
         8d:aa:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----