Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/3136382e3139372e3231362e302f32322d3234203d3e20323634373834.roa
File:                     3136382e3139372e3231362e302f32322d3234203d3e20323634373834.roa (raw, json)
Hash identifier:          OmJzcC9Rc8zKHuf7CxcYyHM0n9eESebGLLYcnWc1wAA=
Subject key identifier:   74:EF:86:75:45:B9:21:08:02:39:A9:8C:76:32:E9:03:66:CC:24:94
Certificate issuer:       /CN=A063A2EC6361BB1225A3DE1AEB30237C01F81570
Certificate serial:       3F9BA6AB730641A6AA7F99914FE132301513F163
Authority key identifier: A0:63:A2:EC:63:61:BB:12:25:A3:DE:1A:EB:30:23:7C:01:F8:15:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/3136382e3139372e3231362e302f32322d3234203d3e20323634373834.roa
Signing time:             Tue 05 Mar 2024 17:51:51 +0000
ROA not before:           Tue 05 Mar 2024 17:46:51 +0000
ROA not after:            Tue 04 Mar 2025 17:51:51 +0000
asID:                     264784
IP address blocks:        168.197.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9b:a6:ab:73:06:41:a6:aa:7f:99:91:4f:e1:32:30:15:13:f1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A063A2EC6361BB1225A3DE1AEB30237C01F81570
        Validity
            Not Before: Mar  5 17:46:51 2024 GMT
            Not After : Mar  4 17:51:51 2025 GMT
        Subject: CN=74EF867545B921080239A98C7632E90366CC2494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:72:c1:7f:ff:37:76:0e:f8:e8:61:ec:b9:
                    3c:68:34:30:3d:55:76:ee:d1:6c:41:32:12:8f:18:
                    6a:4a:f6:9d:ba:a8:a4:f8:b1:81:4b:8c:7d:32:48:
                    7a:22:27:c2:33:a0:e4:16:15:00:ad:53:05:18:d5:
                    11:33:7e:59:2a:7f:4d:ca:57:4c:12:1e:d0:20:5a:
                    02:fa:47:41:e1:fe:34:8d:67:c7:77:50:e9:20:71:
                    32:bb:d7:13:4d:dd:35:69:88:40:d5:93:11:f6:bd:
                    85:c2:76:bc:92:9e:3e:7f:f0:72:9d:ab:7e:2d:02:
                    b8:b6:da:bc:53:2c:ff:26:09:ae:ef:45:8e:e9:2b:
                    8e:8f:52:65:05:c8:bb:6b:ec:27:91:89:9a:53:2f:
                    11:10:52:3d:df:46:e7:ed:6d:1c:de:66:60:8e:55:
                    a5:3a:b7:96:41:9c:89:e5:98:a9:28:7f:a3:73:54:
                    d7:b2:75:87:9d:af:92:cd:89:d4:cf:e8:d9:d8:b5:
                    1e:ef:c6:e9:64:f8:9b:53:b3:fd:1b:45:1f:a6:44:
                    5e:92:ed:ac:07:42:14:eb:2e:e1:67:90:4f:d0:c0:
                    d4:f1:bc:42:e7:f9:a0:54:2f:3b:f8:4a:f6:f4:c9:
                    b4:7a:2d:8d:35:e2:9b:52:57:31:6c:48:f2:b4:3b:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:86:75:45:B9:21:08:02:39:A9:8C:76:32:E9:03:66:CC:24:94
            X509v3 Authority Key Identifier:
                keyid:A0:63:A2:EC:63:61:BB:12:25:A3:DE:1A:EB:30:23:7C:01:F8:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A063A2EC6361BB1225A3DE1AEB30237C01F81570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60AFE8BC3EC13EE2D206C28045F40ED7986A4B6BB21F0DA51886B067F8F711F6/0/3136382e3139372e3231362e302f32322d3234203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:73:68:6c:35:34:bc:5d:06:a5:b8:0c:54:1c:7a:f0:06:25:
         4f:de:2d:34:8f:72:a3:fc:a7:a8:80:74:9c:ac:5b:c6:b5:77:
         92:07:19:2b:bf:6a:c3:37:d8:40:73:57:e1:b0:51:a9:42:9c:
         81:40:cd:eb:a7:92:03:7a:70:12:a8:bb:15:53:fe:32:06:bf:
         02:28:0f:d0:e0:d3:02:37:db:09:b3:90:9e:85:0d:12:dd:e2:
         00:0f:ad:f2:25:82:c5:c6:3d:ce:59:31:17:01:54:26:9e:64:
         d7:e4:a5:8b:81:8a:55:0b:b5:2d:d5:f1:a7:a3:8b:7e:8a:63:
         58:8c:b6:26:05:57:c5:6c:39:41:46:d9:37:e0:f7:d4:ef:84:
         59:26:75:a9:e6:41:54:78:15:1d:27:8f:69:84:52:e4:84:f1:
         5c:53:e1:96:e6:28:04:0e:af:b7:f1:b0:db:ab:e1:a7:18:99:
         83:55:b0:7d:95:44:b9:e7:9b:ad:e8:01:e3:8f:1e:75:e3:0e:
         ba:6a:8c:22:69:30:a4:8d:33:63:ef:d0:11:be:07:a6:25:e1:
         16:0d:3f:f6:78:cc:01:77:21:5f:8e:2f:62:57:57:4f:17:07:
         5a:13:fb:1c:71:72:66:87:f6:f8:8a:17:1b:77:d0:d6:dc:71:
         b6:7b:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----