Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa
File:                     3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa (raw, json)
Hash identifier:          5c8C/uHYoIpCtFRz01PY8+mcC8zV8u8u8dOG7gfx6ws=
Subject key identifier:   75:96:6E:4F:E7:D5:F3:32:44:67:43:2E:13:10:84:34:4C:49:51:30
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       033C2FB4C6B89F6ED2E76FE5F035CCF03A1CBF5E
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:03 +0000
ROA not before:           Sun 26 May 2024 03:50:03 +0000
ROA not after:            Sun 25 May 2025 03:55:03 +0000
asID:                     272026
IP address blocks:        167.250.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:2f:b4:c6:b8:9f:6e:d2:e7:6f:e5:f0:35:cc:f0:3a:1c:bf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:03 2024 GMT
            Not After : May 25 03:55:03 2025 GMT
        Subject: CN=75966E4FE7D5F3324467432E131084344C495130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:38:15:f8:43:0d:7d:36:87:ec:81:cc:11:
                    0d:78:d1:4d:36:a2:d0:8e:07:59:d5:e9:2c:da:02:
                    3f:bd:6d:5b:78:f2:1b:98:4e:da:07:1e:70:ae:5a:
                    20:72:71:63:39:a6:0c:8f:21:a4:7e:87:57:76:e5:
                    5f:fb:7e:da:ee:0c:cf:e7:3b:7d:db:d6:03:26:d5:
                    cd:20:00:db:39:97:d8:e9:72:3e:2f:bc:5f:8d:bb:
                    6e:b5:5a:65:86:13:10:f2:2b:6a:5a:e4:db:a5:69:
                    ed:5e:96:0c:f4:39:a4:04:ee:ec:82:e9:6d:00:6f:
                    e8:0e:78:2a:c4:3d:7a:2f:29:65:58:66:03:2d:3c:
                    88:b6:01:73:e7:e8:6d:91:d6:46:c8:af:66:7a:88:
                    9c:0f:44:09:56:21:9e:ff:da:3c:67:64:be:38:2e:
                    ac:03:c6:ef:c7:48:82:57:fe:85:d6:16:7b:b7:50:
                    8a:8b:b0:52:43:17:c6:ec:88:db:03:fe:4a:6c:c6:
                    b4:69:c3:d6:53:3d:b5:d6:8e:87:a0:4e:10:9e:87:
                    09:3e:5b:a6:1b:f5:ee:08:98:e5:f3:f7:ae:86:35:
                    28:b1:8d:c6:bf:b7:c6:35:ce:25:06:7d:40:8b:c3:
                    0e:02:68:09:85:8e:d0:65:85:31:c5:26:bf:b3:df:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:6E:4F:E7:D5:F3:32:44:67:43:2E:13:10:84:34:4C:49:51:30
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32332d3233203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:92:25:a4:53:1a:4a:9d:55:32:52:b8:24:a2:97:c5:87:53:
         1f:29:9a:29:71:4a:31:6f:0f:b1:34:40:0d:d6:48:b9:b1:2f:
         7b:2a:b4:3b:4f:8c:e7:4f:e9:82:04:03:58:9f:c7:69:0a:af:
         01:aa:69:15:c9:5e:80:c1:d2:7e:25:c4:ae:12:c3:76:76:14:
         da:ea:72:d3:01:6f:fe:9b:f4:9e:64:f6:54:46:03:5d:b6:09:
         71:86:e5:bc:f1:c1:89:0b:fd:0b:aa:b8:a6:6b:e9:4d:57:bb:
         4a:26:3e:b9:22:27:fd:2c:cf:33:16:a9:e5:58:08:ac:46:c5:
         c1:09:b4:da:bb:49:d2:bc:4a:f7:44:8c:1a:b8:87:b0:8b:85:
         6b:53:fa:d8:1c:9a:dd:21:5c:e6:02:15:1f:f6:31:47:68:55:
         a0:7b:b7:47:be:01:20:55:53:ee:b1:ae:c6:2d:61:de:22:ab:
         34:52:90:03:2f:c7:78:41:6f:c8:ac:66:b0:ff:1f:50:98:38:
         08:d5:5c:6c:86:42:6d:dc:e6:86:dc:df:18:39:1e:72:31:5b:
         20:98:d4:1a:35:a2:2a:75:42:2b:b9:8f:8d:fb:24:b0:fe:78:
         31:53:23:3f:65:f7:cb:31:90:76:0d:39:55:05:fe:31:58:2a:
         6a:c3:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----