Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa
File:                     3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          KU4kEbXMOvPpzg62jJ3NGID2RT9nDd9IyCjsoV2lrow=
Subject key identifier:   12:59:C3:BA:0A:47:DB:05:98:FD:51:E5:84:3E:DA:D9:A7:E6:CF:F3
Certificate issuer:       /CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
Certificate serial:       234F63B127030B4B65307FF0E4E2B93EA0F0B05B
Authority key identifier: DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa
Signing time:             Thu 06 Jun 2024 01:15:00 +0000
ROA not before:           Thu 06 Jun 2024 01:10:00 +0000
ROA not after:            Thu 05 Jun 2025 01:15:00 +0000
asID:                     266771
IP address blocks:        160.19.202.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4f:63:b1:27:03:0b:4b:65:30:7f:f0:e4:e2:b9:3e:a0:f0:b0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC24274E5C8E92342E101D071FFDFA45EB73464D
        Validity
            Not Before: Jun  6 01:10:00 2024 GMT
            Not After : Jun  5 01:15:00 2025 GMT
        Subject: CN=1259C3BA0A47DB0598FD51E5843EDAD9A7E6CFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:02:32:6c:c3:60:df:fa:24:6d:8a:09:ab:
                    1a:7e:2e:38:99:6c:23:49:10:3d:e9:c2:f2:e0:a1:
                    07:48:00:4e:61:c7:a5:74:91:32:fe:66:00:66:d7:
                    8e:23:68:6f:b7:af:02:c1:09:73:08:83:3f:77:59:
                    ad:4c:6c:0d:84:bf:a5:46:c5:15:5f:97:48:1d:35:
                    bf:f5:20:16:3c:38:4c:e6:8e:ac:f0:4c:2c:11:8e:
                    1f:40:a7:10:9a:29:74:3e:e9:90:28:e2:ee:08:1e:
                    49:ed:4b:86:1d:48:81:c7:bc:22:23:59:30:33:2b:
                    e9:52:b8:bf:cb:f2:41:72:fb:be:d4:88:87:a3:45:
                    66:69:89:e8:88:9f:59:ae:c6:67:88:52:41:67:59:
                    23:4c:c9:bc:d3:1f:c9:50:1c:28:fd:fc:42:6b:12:
                    25:64:f9:87:4f:53:db:a8:8e:48:65:99:00:ef:19:
                    c0:2f:c6:49:7f:32:b2:09:9b:57:39:0b:cf:22:81:
                    07:e6:e4:1e:96:8c:e8:51:de:fc:a1:7d:8d:56:a3:
                    47:cb:4e:67:5a:a1:da:76:00:d3:5e:c2:f6:70:44:
                    f6:14:5f:c9:7a:9e:1b:48:1d:32:05:69:42:26:68:
                    bd:74:86:9a:4b:33:4c:59:3e:59:63:f2:ab:5b:e0:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:C3:BA:0A:47:DB:05:98:FD:51:E5:84:3E:DA:D9:A7:E6:CF:F3
            X509v3 Authority Key Identifier:
                keyid:DC:24:27:4E:5C:8E:92:34:2E:10:1D:07:1F:FD:FA:45:EB:73:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC24274E5C8E92342E101D071FFDFA45EB73464D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87E5152B40CF394122FAABC707601C426819C7183D5E425B4E92E928388E952A/0/3136302e31392e3230322e302f32332d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:26:ae:5a:60:71:3e:bb:96:71:5c:14:ad:db:c6:46:b1:06:
         19:0f:13:b3:80:a9:07:4f:91:45:f5:8f:85:d5:8a:4f:66:52:
         11:88:20:df:e2:d1:64:61:66:a7:b8:e5:ce:55:5a:0c:41:9a:
         5a:22:da:d3:6a:9d:85:f4:b5:38:35:fa:df:78:d9:24:f0:60:
         66:00:9a:11:f6:80:77:99:c4:dc:e6:12:67:f5:62:7a:72:23:
         b4:a3:3f:97:d0:36:7c:15:ce:3b:e2:ff:ca:5c:e9:1b:73:a0:
         7a:87:0b:d6:e4:b8:13:c5:0b:09:45:7c:94:51:b8:30:cd:c2:
         9d:e1:a0:ba:a2:bb:21:f7:e2:3b:c9:c8:6a:1f:6e:ee:53:10:
         9d:3f:76:c5:14:bb:ef:36:9e:b2:e5:29:74:8c:02:b9:6e:c2:
         79:c5:cc:68:e5:75:30:19:ed:84:bb:59:90:b9:c6:10:24:72:
         27:dd:fc:a2:7a:42:17:93:d4:a6:6c:9e:72:2f:4d:4c:70:f7:
         7b:ab:d4:e9:4f:a8:41:9c:f8:b5:bc:d9:8b:0f:b5:3b:f7:bf:
         70:19:74:a6:db:6e:c9:d2:94:ed:c9:c0:99:a2:a2:e0:93:f6:
         87:cb:88:12:25:99:5c:9e:47:8b:a1:b7:ea:b7:c8:65:7a:27:
         2b:5b:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----