Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203438343635.roa
File:                     3230312e3135392e39362e302f32312d3234203d3e203438343635.roa (raw, json)
Hash identifier:          elp5+eWz2Va1qp2/WWE4DI1K6R3jyAC4daRmue9caIc=
Subject key identifier:   11:C9:03:79:F9:C1:02:AA:08:01:2C:92:1A:89:62:D8:E0:AD:0A:68
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       701CF9D7CA796FF0F85441F06DA4D53B88D64B67
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:02 +0000
ROA not before:           Mon 17 Jun 2024 01:40:02 +0000
ROA not after:            Mon 16 Jun 2025 01:45:02 +0000
asID:                     48465
IP address blocks:        201.159.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1c:f9:d7:ca:79:6f:f0:f8:54:41:f0:6d:a4:d5:3b:88:d6:4b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:02 2024 GMT
            Not After : Jun 16 01:45:02 2025 GMT
        Subject: CN=11C90379F9C102AA08012C921A8962D8E0AD0A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:16:3b:60:58:6e:ef:8e:eb:fd:b0:05:ec:
                    7a:6d:cb:09:ca:43:a3:e7:fe:ab:17:14:45:c2:be:
                    0f:63:44:67:dc:41:56:2b:9b:fb:9e:2a:ff:13:78:
                    e6:31:bc:20:db:7f:25:9e:2c:a8:39:43:e9:94:49:
                    b4:e5:6f:ea:3d:50:5c:82:3a:68:a4:6a:99:73:af:
                    c5:ec:17:8e:ff:62:95:a0:9e:26:7b:ee:f1:06:68:
                    80:43:77:c6:ac:a4:b6:79:c2:e4:9c:20:41:83:49:
                    ee:14:fb:48:4f:5f:62:53:cb:3b:f2:39:76:4f:a8:
                    07:10:9c:d9:cc:d3:80:0d:3b:b3:d3:ca:0c:db:cc:
                    e9:2c:87:6e:2b:89:ff:82:c4:20:6c:4c:7f:b3:a0:
                    6b:cc:f6:5e:7d:e7:7c:86:26:fd:9b:73:11:66:cf:
                    b4:36:60:e7:bd:c4:5b:14:e8:c9:30:5f:ed:5d:e9:
                    0c:34:98:bd:82:20:dd:db:0c:e5:13:09:40:5d:9f:
                    e3:41:94:0b:74:42:fa:30:a8:4d:44:1d:f6:56:c2:
                    c0:a4:8a:19:d7:0b:41:70:2c:69:e8:72:d3:ab:7e:
                    ca:e1:82:ab:f1:80:e5:d8:5a:07:09:c5:63:41:8d:
                    f7:45:a1:a1:4d:d3:d5:da:d5:30:e5:2a:02:5e:ab:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:03:79:F9:C1:02:AA:08:01:2C:92:1A:89:62:D8:E0:AD:0A:68
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e39362e302f32312d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:77:bd:59:7f:da:1f:6d:60:4a:44:7f:33:82:97:59:5c:ae:
         ac:00:db:0f:81:d6:96:bf:69:ae:c8:a2:04:d7:14:f1:27:dc:
         73:e3:65:28:95:3e:8d:34:a7:2c:bb:34:6b:6c:0e:e3:a7:20:
         56:4c:12:d9:80:b2:fc:c7:94:06:23:4a:12:2f:46:d6:91:f7:
         3d:d1:e4:9f:f8:16:4d:ce:40:eb:dc:b6:2e:53:4d:d5:b2:10:
         b7:60:57:39:f6:45:09:16:01:b3:85:01:b1:8b:cf:c9:45:aa:
         9f:fa:89:20:bf:18:ea:74:9e:0f:2e:d6:95:c0:7d:28:52:f3:
         25:47:4d:e3:63:7c:bc:6d:25:11:ef:c1:0e:f1:12:ad:c8:25:
         5b:1b:74:a0:e6:89:f5:83:1a:8c:75:94:a6:eb:d6:99:95:da:
         42:63:01:6a:f8:33:d5:f6:61:eb:61:cf:80:3a:b0:ff:e7:18:
         32:4b:91:57:1a:6b:b0:f4:bd:f4:d6:b7:fc:0e:2d:cf:8b:26:
         c4:22:52:06:91:dd:5b:f8:be:d1:10:81:f4:39:de:37:50:3d:
         62:0a:60:53:4b:43:78:f7:12:e6:e5:0a:31:76:4f:69:21:10:
         7b:74:c6:32:08:1a:c0:06:0a:67:dc:9c:02:c3:c1:26:35:51:
         43:29:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----