Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3232342e302f32312d3234203d3e20323635353534.roa
File:                     3230312e3135392e3232342e302f32312d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          eHI7pBxPZ8+QIpN7c6BkljGk52/JoG4TO8MRpKwPpVA=
Subject key identifier:   54:C5:6F:9B:30:41:B8:86:17:0D:9B:75:7A:10:A8:EC:7A:4C:7F:19
Certificate issuer:       /CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
Certificate serial:       476373FCA4023A9ED414EE7D1E8A2831AA5E2E2B
Authority key identifier: DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3232342e302f32312d3234203d3e20323635353534.roa
Signing time:             Wed 03 Jul 2024 14:35:00 +0000
ROA not before:           Wed 03 Jul 2024 14:30:00 +0000
ROA not after:            Wed 02 Jul 2025 14:35:00 +0000
asID:                     265554
IP address blocks:        201.159.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:73:fc:a4:02:3a:9e:d4:14:ee:7d:1e:8a:28:31:aa:5e:2e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
        Validity
            Not Before: Jul  3 14:30:00 2024 GMT
            Not After : Jul  2 14:35:00 2025 GMT
        Subject: CN=54C56F9B3041B886170D9B757A10A8EC7A4C7F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:8e:60:21:d8:2a:93:aa:4e:eb:44:04:63:
                    78:8b:74:b5:57:35:6b:04:45:37:96:f2:7e:53:22:
                    0a:7a:e7:15:77:40:ce:8c:9a:4b:1c:18:e0:97:10:
                    d3:52:4a:d0:e2:86:11:dd:6e:5d:88:dd:f2:36:06:
                    c4:9a:96:82:f3:c0:4e:12:c0:9f:ba:d5:af:d4:af:
                    b8:d1:2e:74:57:e5:34:84:69:90:23:ed:56:28:5f:
                    4d:eb:db:e2:50:4e:dc:83:85:93:6f:d2:62:ae:47:
                    d2:6c:da:d9:e2:e1:51:ce:4a:5a:b1:de:03:63:a6:
                    1b:25:24:29:76:24:4d:4b:fe:53:80:65:a7:03:e8:
                    a7:11:77:81:fe:03:c0:3a:80:9a:66:c8:ec:7a:46:
                    17:5c:29:63:31:aa:d9:d4:51:40:7d:67:b5:ff:12:
                    be:0f:08:ba:2e:5c:34:48:7a:03:a4:49:93:c6:cc:
                    2d:e4:49:b3:26:9d:0a:e5:7e:06:dd:b9:d7:0d:40:
                    f5:32:90:ee:88:44:3b:c5:25:dc:05:35:df:b1:18:
                    90:cd:12:1d:2b:29:a5:ab:6b:b8:1e:e5:85:10:72:
                    ee:66:ff:30:44:c0:e2:8d:41:82:c0:7c:2f:68:c2:
                    c8:e1:33:29:f2:ab:79:99:39:bb:b2:e3:2b:20:b2:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C5:6F:9B:30:41:B8:86:17:0D:9B:75:7A:10:A8:EC:7A:4C:7F:19
            X509v3 Authority Key Identifier:
                keyid:DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3232342e302f32312d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:62:7a:03:97:f2:ea:08:41:e7:48:37:bf:fc:56:e3:05:49:
         8e:e3:91:63:22:5a:45:46:a8:c9:1a:94:e3:5d:88:81:44:14:
         9a:6e:6f:9f:04:bc:eb:68:36:7f:f0:df:18:5e:62:a2:21:63:
         05:c9:35:f2:94:83:e3:8f:8c:b3:b9:d3:8e:83:1b:14:b6:a2:
         f1:4b:45:9f:f1:5c:40:f0:74:cf:e4:1e:83:df:d6:0f:5e:5c:
         0a:2c:85:fe:9e:71:19:3c:fd:f8:61:fc:15:c4:e2:60:bf:13:
         04:46:1a:93:56:88:56:cb:41:a3:81:71:d7:46:84:ff:97:a8:
         d4:e3:8f:74:6a:46:33:b0:14:d9:bc:5c:be:39:eb:ee:71:72:
         57:17:7f:1f:70:56:50:e0:ea:57:a0:94:0a:9d:3d:c0:11:f4:
         2f:a0:0f:88:9e:10:70:8d:ae:4e:aa:17:38:94:e9:ea:63:32:
         7c:8e:48:a1:3d:cd:c5:9e:56:dc:0f:16:2a:73:18:c2:db:fa:
         9a:13:44:ed:e4:12:49:16:72:49:53:c4:9d:25:47:a6:31:62:
         a8:08:03:86:be:c1:7a:a7:5a:f2:64:f4:04:42:bc:31:d4:54:
         9d:73:2b:2b:28:7e:9b:f4:37:1d:38:a2:1b:99:8c:99:93:92:
         7d:0e:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----