Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa
File:                     3138362e352e3231382e302f32332d3234203d3e20323730303739.roa (raw, json)
Hash identifier:          EQG7HvYZ5/FHLBbSJE0LSNgqABoA3Z0M0PhIhc+/yd4=
Subject key identifier:   EA:86:E8:72:71:BA:67:01:B4:9C:38:2F:33:AA:3C:B0:DE:59:D6:1E
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       654D5B790B225CA43C1A436A06AFBC7793167D1B
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa
Signing time:             Fri 27 Dec 2024 13:40:00 +0000
ROA not before:           Fri 27 Dec 2024 13:35:00 +0000
ROA not after:            Fri 26 Dec 2025 13:40:00 +0000
asID:                     270079
IP address blocks:        186.5.218.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4d:5b:79:0b:22:5c:a4:3c:1a:43:6a:06:af:bc:77:93:16:7d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Dec 27 13:35:00 2024 GMT
            Not After : Dec 26 13:40:00 2025 GMT
        Subject: CN=EA86E87271BA6701B49C382F33AA3CB0DE59D61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:1f:ce:04:18:94:64:db:79:81:81:05:cd:
                    67:8e:28:3b:aa:13:24:99:23:c2:c6:06:f9:ce:d2:
                    c4:5e:63:59:70:44:b4:14:b6:f1:68:00:d8:1b:23:
                    29:b1:b0:33:27:77:21:b2:ab:27:c6:43:84:59:43:
                    ec:91:0a:73:ac:3e:31:ca:62:5c:b2:86:4d:24:1c:
                    c0:7e:0e:ee:5e:c6:43:ff:bd:5c:5f:4e:a2:f2:99:
                    80:19:9a:b0:0b:c8:be:57:33:5f:b2:4a:d5:1c:32:
                    a1:52:36:84:9a:52:e7:75:ef:4e:f4:32:a0:22:4e:
                    8e:30:ce:89:e0:2d:ff:83:e9:5d:0b:a9:f0:81:ed:
                    ea:d1:cc:a1:0f:1c:b3:ec:b1:1b:62:9c:0f:6d:39:
                    74:26:63:4a:77:08:15:bc:ee:58:e2:28:45:7d:f9:
                    83:db:84:ed:c3:79:c6:93:10:cd:69:3c:4b:5b:5f:
                    8b:14:19:27:4a:cc:29:d5:30:51:c0:ea:58:34:68:
                    2e:4c:b3:5c:bf:6c:5a:34:c7:28:0b:df:13:45:de:
                    ac:5f:3e:0d:57:95:1e:c2:37:fd:ac:af:5d:96:76:
                    24:98:29:36:c3:77:c1:fe:da:8a:e3:bc:a1:7a:17:
                    b4:89:41:d1:e7:cb:b9:48:59:73:86:ab:fb:6d:24:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:E8:72:71:BA:67:01:B4:9C:38:2F:33:AA:3C:B0:DE:59:D6:1E
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:43:91:e4:19:d1:ba:aa:aa:3a:9b:57:f7:8c:db:e5:75:a8:
         23:68:8d:48:bb:a4:58:bc:67:e1:3b:d5:60:a1:bf:f8:d4:e1:
         cf:c5:39:8c:9e:b4:7a:42:8c:da:03:70:bf:8f:5a:12:dd:f3:
         60:38:28:ce:96:f2:1c:7a:8e:f8:ea:72:63:83:23:5e:71:27:
         d3:11:55:85:d5:81:57:dc:b0:be:dc:95:8b:c1:1f:ef:1d:ae:
         f1:00:6f:a5:99:0c:ad:fc:ab:9b:7d:fc:d1:45:40:7b:ee:44:
         a2:b8:8b:26:03:ad:ac:89:98:01:18:1d:84:e2:79:b7:22:33:
         3a:92:26:a0:6c:21:f2:76:63:ac:3f:bc:7d:b3:c1:4f:45:5b:
         fb:dc:da:a2:0d:78:12:df:38:76:40:ed:a2:6c:11:f7:ca:c4:
         6f:00:c5:7a:ad:53:a8:f3:eb:87:39:9f:b7:1f:a7:3a:9b:1a:
         09:a0:24:62:c9:f2:0e:c8:1b:32:ef:f5:a8:b3:be:77:aa:80:
         a2:89:8a:57:aa:c0:a2:49:fb:7d:b9:3e:bc:04:e6:82:da:5a:
         68:f8:0b:31:03:9a:70:f7:14:19:c8:d1:c0:ae:5f:bd:ee:68:
         72:68:32:2a:81:b6:37:53:37:da:49:90:f5:4e:2c:09:3e:ac:
         9f:4b:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----