Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203438343635.roa
File:                     3133382e3138362e3230302e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          noP10rCsdN6ihjcplsgfMh+YxVSz9tHNhnYoyPXvA30=
Subject key identifier:   BD:43:C0:F7:E1:4F:C2:74:84:02:35:33:5C:16:6A:72:E5:EC:06:35
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       1558334F9DB54FF442713FA00025E3F6B7EDEAD1
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:01 +0000
ROA not before:           Mon 17 Jun 2024 01:40:01 +0000
ROA not after:            Mon 16 Jun 2025 01:45:01 +0000
asID:                     48465
IP address blocks:        138.186.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:33:4f:9d:b5:4f:f4:42:71:3f:a0:00:25:e3:f6:b7:ed:ea:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:01 2024 GMT
            Not After : Jun 16 01:45:01 2025 GMT
        Subject: CN=BD43C0F7E14FC274840235335C166A72E5EC0635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:30:e6:79:95:3c:d0:be:b9:35:e6:24:7e:
                    96:00:f5:55:6f:d2:e3:0d:04:d7:a0:f7:18:28:4a:
                    4e:ce:20:6a:d6:97:68:e5:3c:93:7b:d3:2f:78:f3:
                    6d:7b:ff:65:a3:f6:ba:c8:31:51:92:34:be:78:77:
                    b2:02:7a:50:a5:47:8d:00:10:c8:2a:69:33:2a:a0:
                    dd:f7:a8:e2:b4:4d:71:5c:77:4e:21:33:e8:3c:af:
                    56:f5:76:ad:53:90:e5:41:97:14:6a:0b:d5:78:dd:
                    ba:f1:f1:2e:20:a5:7c:ae:af:b6:b6:1e:c6:ac:57:
                    2b:5f:3d:d7:1f:5f:28:22:7f:cf:64:4a:02:a2:cf:
                    0f:96:a2:f4:bd:b7:af:4b:15:3a:4c:b0:f0:d8:37:
                    ed:86:32:05:63:7c:c9:83:67:46:e3:b4:03:77:07:
                    ce:6e:47:76:a6:7a:7b:3f:a0:30:01:e1:af:64:c5:
                    48:e7:cc:e3:53:ba:a2:2c:07:c2:6d:ce:4e:ea:59:
                    e2:d8:d5:16:b1:51:5d:23:59:7c:25:60:94:63:f5:
                    59:2a:93:82:5f:e4:82:00:43:b4:0d:99:b1:a3:e8:
                    1f:39:41:be:42:1c:10:f4:60:00:c5:b7:83:15:f0:
                    42:bb:f9:1b:79:79:76:a9:78:94:47:cf:67:53:53:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:C0:F7:E1:4F:C2:74:84:02:35:33:5C:16:6A:72:E5:EC:06:35
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3133382e3138362e3230302e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:79:d0:a4:54:27:20:db:b7:d6:c4:59:3d:01:8d:4e:da:
         ad:7a:64:9a:03:da:f1:1f:78:63:bd:b3:1d:06:0e:6a:d5:d2:
         7f:10:74:fe:14:0d:0c:87:80:96:cf:71:f9:82:67:d9:59:1f:
         23:dc:f1:9e:dc:5c:d9:7d:f2:e0:4b:3f:3c:84:49:68:4a:99:
         06:ad:a4:c8:8d:d8:b2:32:08:da:63:78:88:a7:94:5b:d0:37:
         38:7f:16:f1:59:47:ae:2c:b1:d0:69:e5:13:3e:5e:1e:82:65:
         0d:d3:bd:55:74:4f:f1:d2:4e:ea:21:11:44:eb:fb:62:ab:4e:
         89:75:42:d9:bb:69:f5:be:6a:0e:33:19:09:9f:da:05:72:6f:
         d1:99:6d:f9:62:a7:c7:5d:f7:99:61:3d:7f:02:5d:f9:83:fa:
         6c:db:b9:49:2a:ce:23:34:6b:81:2a:55:69:d5:32:43:9f:4d:
         8f:98:57:97:63:c3:4d:08:f0:06:1f:d5:98:55:5a:9a:fb:9b:
         ee:24:fb:34:c0:e6:08:06:d5:8a:df:08:7e:fa:52:70:d2:b4:
         68:f4:5e:83:92:5b:55:82:a4:bc:f7:82:cf:f5:ff:34:9f:72:
         f1:bc:fb:60:dc:cd:bb:94:fe:46:3b:e2:9e:ad:25:4f:7b:ad:
         d2:5e:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----