Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203438343635.roa
File:                     3138372e3132302e3137322e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          Wnj4cJBNSHCLyHrQrer0DwB+MKwaIsMwfrKMptLnbiI=
Subject key identifier:   05:00:7E:AA:65:FB:64:80:22:EC:14:9B:20:F1:3A:F5:09:93:27:99
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       07FF7787CB5C6E384FF804677B41C4AC18828351
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:02 +0000
ROA not before:           Mon 17 Jun 2024 01:40:02 +0000
ROA not after:            Mon 16 Jun 2025 01:45:02 +0000
asID:                     48465
IP address blocks:        187.120.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ff:77:87:cb:5c:6e:38:4f:f8:04:67:7b:41:c4:ac:18:82:83:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:02 2024 GMT
            Not After : Jun 16 01:45:02 2025 GMT
        Subject: CN=05007EAA65FB648022EC149B20F13AF509932799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:98:a0:0a:a1:9d:42:74:3e:dd:e7:21:85:
                    e7:5b:a4:6e:f6:52:84:bb:f2:08:28:86:d1:18:66:
                    02:4d:5b:8d:75:6b:b6:39:94:a5:c4:c2:83:8c:ce:
                    c9:f7:9b:eb:42:fb:5a:df:aa:08:7d:26:a7:39:8a:
                    41:f7:0d:b2:77:08:6e:40:0c:ac:3b:27:64:1d:a5:
                    d5:1a:d9:d8:2d:a9:91:6a:01:4e:93:e6:5d:3f:73:
                    20:a2:08:98:59:be:93:a7:a1:d6:df:b0:f2:ee:ee:
                    9e:12:ae:99:3b:2a:48:b3:4e:35:87:a1:1b:f7:ee:
                    4b:9d:73:45:1b:e9:2f:fa:76:32:1a:ed:7e:c7:bc:
                    27:cd:40:28:89:7c:15:9b:2c:4e:22:7b:ba:28:c7:
                    d5:12:45:15:f2:16:ea:09:56:62:af:c7:0e:a5:d4:
                    a8:cd:d7:23:02:d7:53:d0:e3:1f:5c:b0:1b:0d:b8:
                    62:62:9a:c9:93:a4:a4:22:88:a4:e6:4a:83:e5:e2:
                    d1:0b:01:3e:28:b1:bd:9d:d9:4e:cb:0e:70:7b:92:
                    cc:62:d8:67:9d:b2:ed:f9:7d:bf:21:5f:43:ef:28:
                    13:87:0f:cb:9a:c2:33:bd:6e:d0:f4:38:37:fb:9a:
                    9e:7c:7e:cf:9c:e6:bb:91:bc:da:24:f1:d3:f4:d6:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:00:7E:AA:65:FB:64:80:22:EC:14:9B:20:F1:3A:F5:09:93:27:99
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:c2:d9:1d:0d:e2:e0:52:5a:62:02:e9:48:39:4f:ca:4b:
         a3:1d:bd:9a:aa:fc:b1:05:31:7b:a5:b3:bb:23:4f:22:d6:14:
         3e:c4:82:c0:8c:63:3d:ee:2c:77:a5:a9:03:2c:55:f1:a2:de:
         e7:f1:63:93:32:28:f9:1d:f7:b0:7d:4c:a7:d9:51:65:11:8a:
         cf:bf:8a:d2:5d:70:47:3c:55:1c:bf:80:b4:4e:5f:b6:7e:c4:
         62:08:9b:af:84:55:7e:72:39:b4:9c:f3:7f:f4:69:34:25:08:
         58:5f:50:aa:ff:f3:5c:b6:0d:86:37:ee:c2:2d:46:be:22:ce:
         c4:c3:33:b7:36:07:cd:22:7f:ea:74:15:e9:cf:73:30:b9:c9:
         54:18:47:be:37:55:82:94:f2:d7:fa:21:e3:a9:ee:2c:70:53:
         8f:94:b1:a4:a7:3d:6a:cb:32:ba:b6:a0:57:6f:54:ec:31:36:
         ed:29:8b:e1:fb:43:39:b5:a3:70:34:01:92:83:26:91:fc:65:
         a9:62:b4:67:96:68:a9:ad:78:2c:75:4e:18:76:26:91:60:9b:
         a4:f9:70:4c:72:e2:55:34:64:37:82:4c:2b:a7:b0:63:53:58:
         a2:11:74:8e:9f:0c:01:77:90:57:fd:4e:86:d4:59:9b:ce:75:
         59:37:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----