Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3132342e302f32322d3234203d3e203438343635.roa
File:                     3230312e3135392e3132342e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          U/bAboRFhYfYrd+RQjsASYmgjMo4yv4/YQZycuiVL+Y=
Subject key identifier:   84:16:8A:DF:D4:5A:F2:53:F9:C5:50:17:FF:07:77:51:AE:FA:1C:AC
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       7BE290AB4B932F723C08686389006B944E09528B
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3132342e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:00 +0000
ROA not before:           Mon 17 Jun 2024 01:40:00 +0000
ROA not after:            Mon 16 Jun 2025 01:45:00 +0000
asID:                     48465
IP address blocks:        201.159.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e2:90:ab:4b:93:2f:72:3c:08:68:63:89:00:6b:94:4e:09:52:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:00 2024 GMT
            Not After : Jun 16 01:45:00 2025 GMT
        Subject: CN=84168ADFD45AF253F9C55017FF077751AEFA1CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:d5:20:86:d2:e3:c6:b2:b4:9c:08:c7:31:
                    e6:61:6a:19:10:fd:89:14:51:6b:2a:cb:6a:98:f3:
                    67:ee:b8:f0:d8:f1:c5:ff:26:3e:d4:6f:12:9a:22:
                    23:e2:1e:6a:86:f1:4c:bb:f7:47:3b:8f:53:d0:68:
                    e0:9e:6e:f6:ce:24:ba:10:e2:0b:32:2d:56:9c:80:
                    e1:f4:c2:32:b9:7d:0f:0f:fd:d0:70:23:a1:17:1d:
                    52:25:e7:ce:3b:ab:a7:2b:55:10:be:29:86:b7:38:
                    63:19:0a:bf:5b:61:74:4d:74:0e:f5:b3:5c:90:26:
                    4c:01:34:17:19:4b:e4:49:ad:80:63:e4:69:17:ea:
                    13:a1:c1:f5:fa:0e:b1:45:ff:f2:3a:40:5e:2f:d2:
                    32:b2:58:95:8e:af:c5:29:c6:ab:d8:9c:de:9a:69:
                    86:ed:3c:b6:e8:4f:14:c7:94:af:5c:10:71:20:26:
                    0b:c9:a5:c0:e9:eb:27:54:66:da:8d:50:50:fc:b4:
                    00:e3:d9:16:c4:8c:67:6b:f7:4e:cb:a9:8c:d3:cd:
                    51:b4:37:a5:38:e3:ef:a1:85:2b:1e:a3:69:c7:ad:
                    e8:82:2a:7c:7e:bd:4d:d7:58:1e:e7:c0:89:3a:4f:
                    31:ba:16:53:43:5e:30:b7:33:dd:d4:ef:c5:02:03:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:8A:DF:D4:5A:F2:53:F9:C5:50:17:FF:07:77:51:AE:FA:1C:AC
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3132342e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:ca:cc:7e:8a:56:5f:3b:ad:e2:02:90:36:31:9e:f8:8f:
         83:ec:f6:4b:d0:59:34:9e:08:2c:4f:c3:a2:36:b8:37:51:83:
         04:e3:3a:ff:e2:4d:1e:43:fa:55:0f:c8:f8:08:1b:5e:d9:c9:
         79:7c:f5:bd:89:69:4a:7b:10:d5:1f:c3:6a:ce:66:fc:0a:18:
         f0:50:72:0c:19:0d:f7:e7:81:ec:05:05:ac:a1:23:a0:6e:f0:
         37:f2:85:1e:3c:70:d7:15:c7:7a:06:75:07:6a:ac:43:96:52:
         0d:25:2b:58:ca:bd:bd:0f:f0:33:69:79:59:55:af:80:5c:b6:
         85:c5:ce:9b:f6:a1:b7:2c:c0:78:76:37:fd:63:e7:38:f3:35:
         2c:74:de:05:87:60:75:b3:84:a9:a9:ae:88:62:c2:3b:a1:5b:
         5a:a0:3a:a7:95:1c:4e:09:23:98:7b:f7:4d:b2:7c:5d:8e:93:
         a5:e0:7e:f8:0e:ff:31:ec:4f:b8:15:d6:57:0c:6c:14:ec:24:
         00:d9:d1:9c:a2:a1:2c:60:d3:e7:8e:02:90:f5:e6:08:fc:a6:
         00:09:15:32:09:d6:1d:fb:45:fa:42:09:be:2a:9e:97:f8:53:
         dd:6b:8d:de:8e:45:18:7e:d8:4b:8e:44:75:fb:60:e2:37:07:
         f0:e8:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----