Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e382e302f32322d3234203d3e203438343635.roa
File:                     3230312e3135302e382e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          cjRZZll4H7R0LTVvBBYyqMepn+8QKhWncoS/TvvpZoQ=
Subject key identifier:   9B:DF:EB:28:7D:74:28:3C:6A:48:35:C7:88:B6:8A:24:EC:04:59:C6
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       739BBBC539B35A096CF5A9BB5D10685582026516
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e382e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:01 +0000
ROA not before:           Mon 17 Jun 2024 01:40:01 +0000
ROA not after:            Mon 16 Jun 2025 01:45:01 +0000
asID:                     48465
IP address blocks:        201.150.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9b:bb:c5:39:b3:5a:09:6c:f5:a9:bb:5d:10:68:55:82:02:65:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:01 2024 GMT
            Not After : Jun 16 01:45:01 2025 GMT
        Subject: CN=9BDFEB287D74283C6A4835C788B68A24EC0459C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:ab:e8:66:04:df:a9:1c:44:09:54:fb:a5:
                    7c:8a:a5:35:a1:d4:20:96:05:a9:b8:32:0b:e7:2e:
                    a8:96:60:4c:67:b0:28:d1:ae:b9:e4:e8:f6:c4:2c:
                    eb:0f:bc:45:ff:e7:a2:37:7e:13:c5:a7:e3:f1:bd:
                    1e:6d:0f:cc:3f:e1:44:56:c2:4b:06:0d:77:e2:5b:
                    2e:7e:7e:0f:30:8e:35:62:74:8a:d3:ec:2e:13:1c:
                    63:69:74:47:9d:0a:1c:0a:05:12:5c:39:38:b1:74:
                    1c:61:58:67:94:cd:3b:7e:3d:21:f7:e1:8f:54:c8:
                    67:7f:46:69:f3:11:ea:4e:da:24:a3:f6:8e:6b:96:
                    46:5b:60:a1:8d:8d:7d:90:47:59:33:c6:db:0c:a4:
                    01:75:bb:a1:b5:00:fc:35:7b:a4:67:f0:6d:4c:d2:
                    03:ca:dd:9c:e7:e5:e2:70:f8:4d:31:59:2a:66:cf:
                    45:f1:72:56:3e:de:56:41:89:d0:4a:d2:ed:e1:51:
                    72:f9:f6:6c:31:67:41:c7:a6:a5:59:14:7f:0c:3b:
                    a1:79:5a:11:58:6b:83:1f:bb:72:32:2b:7e:68:e4:
                    23:52:f4:af:20:db:94:5a:9b:51:b0:de:52:aa:3c:
                    79:e0:d8:87:cf:a3:5a:9a:2a:f5:de:fe:dd:eb:d8:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:EB:28:7D:74:28:3C:6A:48:35:C7:88:B6:8A:24:EC:04:59:C6
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e382e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:f0:76:b0:d7:7a:6d:ff:4f:c5:78:b5:e8:d0:9f:39:bd:
         11:92:a5:15:ac:da:7e:5c:b8:76:20:fa:af:5a:fd:09:c5:30:
         d7:4e:f9:b0:c5:3e:93:6f:67:d7:37:2e:c5:a6:5e:18:f2:5b:
         9b:3f:2a:77:84:e4:09:a3:64:85:7c:bc:ca:be:bd:2a:fa:9f:
         32:61:fa:d2:68:8f:c5:74:48:2d:d7:13:4a:f8:e4:26:79:30:
         f4:03:3f:7d:46:2f:98:b9:26:94:46:bc:79:e1:7a:a1:5e:40:
         6e:86:5c:a5:8b:65:c9:f5:34:40:a9:ef:47:fa:3c:16:e0:ea:
         71:2d:7e:c0:61:b3:f0:a0:65:2a:19:92:b1:a5:e2:ef:0c:be:
         a3:c0:9d:fb:f5:05:fd:f3:26:e9:c3:89:2e:26:ed:14:af:97:
         6b:20:78:0f:2e:e1:1d:74:7e:9c:ae:79:08:74:d5:39:60:6f:
         60:ce:df:f1:f6:84:f4:4f:3a:19:0b:65:18:52:98:99:4b:b3:
         b4:66:b2:0c:1b:6f:50:e0:34:70:ea:05:eb:be:e2:dc:e5:63:
         6b:4e:25:4f:07:ff:ee:a2:79:ef:b5:22:72:49:4c:10:e9:ab:
         b6:48:f3:6a:75:87:49:77:f4:ec:75:f1:5b:a5:1f:03:73:1d:
         2c:be:00:60
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUc5u7xTmzWgls9am7XRBoVYICZRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdBMzM2QzU4ODgwMTFGNjU3Mjk4MUQwOEU4Nzc5MUE5
RUJFNTVENzAeFw0yNDA2MTcwMTQwMDFaFw0yNTA2MTYwMTQ1MDFaMDMxMTAvBgNV
BAMTKDlCREZFQjI4N0Q3NDI4M0M2QTQ4MzVDNzg4QjY4QTI0RUMwNDU5QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChlKvoZgTfqRxECVT7pXyKpTWh
1CCWBam4MgvnLqiWYExnsCjRrrnk6PbELOsPvEX/56I3fhPFp+PxvR5tD8w/4URW
wksGDXfiWy5+fg8wjjVidIrT7C4THGNpdEedChwKBRJcOTixdBxhWGeUzTt+PSH3
4Y9UyGd/RmnzEepO2iSj9o5rlkZbYKGNjX2QR1kzxtsMpAF1u6G1APw1e6Rn8G1M
0gPK3Zzn5eJw+E0xWSpmz0XxclY+3lZBidBK0u3hUXL59mwxZ0HHpqVZFH8MO6F5
WhFYa4Mfu3IyK35o5CNS9K8g25Ram1Gw3lKqPHng2IfPo1qaKvXe/t3r2GCVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUm9/rKH10KDxqSDXHiLaKJOwEWcYwHwYDVR0j
BBgwFoAUJ6M2xYiAEfZXKYHQjod5Gp6+VdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzQwRjVDNzAyMTUxODc5NzBCMUY5MDQ1NDk3OUIzNzlC
ODAzMTA4Nzg4NTI2MkE3MDUwQUVFNjdCNEE0QUUyLzAvMjdBMzM2QzU4ODgwMTFG
NjU3Mjk4MUQwOEU4Nzc5MUE5RUJFNTVENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0EzMzZDNTg4ODAxMUY2NTcy
OTgxRDA4RTg3NzkxQTlFQkU1NUQ3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM0MEY1QzcwMjE1MTg3OTcwQjFGOTA0NTQ5NzlCMzc5QjgwMzEwODc4
ODUyNjJBNzA1MEFFRTY3QjRBNEFFMi8wLzMyMzAzMTJlMzEzNTMwMmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJlggwDQYJ
KoZIhvcNAQELBQADggEBAGac8Haw13pt/0/FeLXo0J85vRGSpRWs2n5cuHYg+q9a
/QnFMNdO+bDFPpNvZ9c3LsWmXhjyW5s/KneE5AmjZIV8vMq+vSr6nzJh+tJoj8V0
SC3XE0r45CZ5MPQDP31GL5i5JpRGvHnheqFeQG6GXKWLZcn1NECp70f6PBbg6nEt
fsBhs/CgZSoZkrGl4u8MvqPAnfv1Bf3zJunDiS4m7RSvl2sgeA8u4R10fpyueQh0
1Tlgb2DO3/H2hPRPOhkLZRhSmJlLs7Rmsgwbb1DgNHDqBeu+4tzlY2tOJU8H/+6i
ee+1InJJTBDpq7ZI82p1h0l39Ox18VulHwNzHSy+AGA=
-----END CERTIFICATE-----