Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa
File:                     3137392e302e31322e302f32332d3234203d3e20323733383431.roa (raw, json)
Hash identifier:          UD1EpPIWOApSStGW9g5/PG0VGaYRctMwIBbBcyTBnGA=
Subject key identifier:   49:35:8E:A0:D8:B6:98:7B:13:F7:9D:56:BD:A2:BC:5F:6D:A2:51:ED
Certificate issuer:       /CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
Certificate serial:       7F6787F23CDDCCD67495D7884691213C7A5079CB
Authority key identifier: 92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa
Signing time:             Thu 22 Aug 2024 21:50:00 +0000
ROA not before:           Thu 22 Aug 2024 21:45:00 +0000
ROA not after:            Thu 21 Aug 2025 21:50:00 +0000
asID:                     273841
IP address blocks:        179.0.12.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:87:f2:3c:dd:cc:d6:74:95:d7:88:46:91:21:3c:7a:50:79:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
        Validity
            Not Before: Aug 22 21:45:00 2024 GMT
            Not After : Aug 21 21:50:00 2025 GMT
        Subject: CN=49358EA0D8B6987B13F79D56BDA2BC5F6DA251ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:7e:67:85:c1:d8:73:10:3f:6a:22:f0:76:
                    e9:03:3e:fe:3b:72:0b:f0:78:71:e1:ca:a6:85:87:
                    0f:9f:8a:1e:9f:fb:39:18:c0:e4:12:c7:c3:f8:9b:
                    60:a5:63:a3:34:81:62:72:cc:04:f8:f6:f4:f9:bf:
                    ab:68:3e:a9:da:ff:21:d2:b1:7c:e0:2e:61:6f:0b:
                    8f:c6:20:21:af:e3:9e:79:86:10:f2:f7:f9:fe:ce:
                    56:33:a7:dd:cf:29:a1:65:4e:36:cc:f8:ed:f5:96:
                    a8:a6:ca:5d:cb:84:0e:99:3a:0c:bb:2c:28:9a:3f:
                    33:db:00:33:3b:82:b4:50:5a:26:79:77:49:2a:ae:
                    95:1e:c4:b8:7a:cf:4f:8f:23:b5:ef:ea:6a:56:52:
                    ec:7c:36:75:50:3a:56:5f:03:c1:b9:25:43:4b:bd:
                    a4:4d:bb:c9:21:d9:ed:7b:65:9e:94:ec:bd:a5:9f:
                    ec:de:b0:76:1c:8f:07:72:cc:3d:c2:5b:aa:92:3c:
                    8e:6c:d2:f8:e5:0d:c4:15:f6:97:05:e4:be:80:b1:
                    cc:44:15:8c:e7:ed:e6:77:65:59:19:c7:b2:3c:62:
                    ef:e3:71:eb:50:96:15:c8:a1:ff:20:c4:59:74:3a:
                    eb:cb:36:fc:80:f9:0a:43:18:df:1b:52:70:58:8c:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:35:8E:A0:D8:B6:98:7B:13:F7:9D:56:BD:A2:BC:5F:6D:A2:51:ED
            X509v3 Authority Key Identifier:
                keyid:92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3234203d3e20323733383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:7a:91:41:e3:ec:32:2a:18:9e:23:15:3f:41:47:be:aa:e9:
         51:76:62:43:ad:de:28:67:c5:21:7a:aa:ab:3f:53:76:c2:e8:
         96:cb:54:01:fb:9a:56:c3:d0:2f:4e:d7:e4:cd:7b:c3:d4:0a:
         3c:b0:88:0e:48:fa:70:ed:08:42:42:7f:75:6f:4e:62:5b:0b:
         4c:92:47:3d:cd:84:6c:e8:fd:92:18:a4:44:1b:49:58:43:b9:
         a6:0d:ed:c3:0d:fe:27:e8:0f:fe:38:87:1a:df:03:75:1c:98:
         d1:58:4b:ca:28:31:f0:85:e1:64:dd:8e:0e:b3:e9:78:5b:0f:
         c0:5f:4f:7e:fc:b4:3e:84:06:fd:a3:c5:4d:30:51:6a:b9:4a:
         04:11:59:4d:0e:58:c5:ab:68:82:c5:af:88:9b:62:d4:d9:62:
         d4:90:e8:88:dd:57:13:49:b7:7a:b1:e9:bb:77:1d:61:50:5a:
         2e:ed:dd:e7:18:93:cb:ca:a3:62:cf:98:37:28:73:24:d1:7c:
         0b:1b:5f:af:a1:e4:73:94:28:e7:a0:95:cd:13:91:51:95:b7:
         9e:8e:ff:35:50:6f:93:1d:e7:2a:a7:13:42:21:6d:d8:6d:4a:
         a7:25:42:10:41:15:72:5c:7f:95:d9:5c:14:4f:47:68:57:ca:
         e7:5d:ee:ca
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUf2eH8jzdzNZ0ldeIRpEhPHpQecswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1MjREMzJBMjZFN0U4QkVGRTBEQUExODM4RjA2RjAx
OEM2NzgzQjAeFw0yNDA4MjIyMTQ1MDBaFw0yNTA4MjEyMTUwMDBaMDMxMTAvBgNV
BAMTKDQ5MzU4RUEwRDhCNjk4N0IxM0Y3OUQ1NkJEQTJCQzVGNkRBMjUxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTmX5nhcHYcxA/aiLwdukDPv47
cgvweHHhyqaFhw+fih6f+zkYwOQSx8P4m2ClY6M0gWJyzAT49vT5v6toPqna/yHS
sXzgLmFvC4/GICGv4555hhDy9/n+zlYzp93PKaFlTjbM+O31lqimyl3LhA6ZOgy7
LCiaPzPbADM7grRQWiZ5d0kqrpUexLh6z0+PI7Xv6mpWUux8NnVQOlZfA8G5JUNL
vaRNu8kh2e17ZZ6U7L2ln+zesHYcjwdyzD3CW6qSPI5s0vjlDcQV9pcF5L6AscxE
FYzn7eZ3ZVkZx7I8Yu/jcetQlhXIof8gxFl0OuvLNvyA+QpDGN8bUnBYjCpBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSTWOoNi2mHsT951WvaK8X22iUe0wHwYDVR0j
BBgwFoAUklJNMqJufovv4Nqhg48G8BjGeDswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUFDNjlBNDE5NTZBNDM5QTI1NTgyQkREMDk5OUYzMzc2
RjYyRjVDMEMzRjBEQ0U1MjZBQjFFRUYzOTFDMkU0LzAvOTI1MjREMzJBMjZFN0U4
QkVGRTBEQUExODM4RjA2RjAxOEM2NzgzQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjUyNEQzMkEyNkU3RThCRUZF
MERBQTE4MzhGMDZGMDE4QzY3ODNCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFBQzY5QTQxOTU2QTQzOUEyNTU4MkJERDA5OTlGMzM3NkY2MkY1QzBD
M0YwRENFNTI2QUIxRUVGMzkxQzJFNC8wLzMxMzczOTJlMzAyZTMxMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzMzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGzAAwwDQYJ
KoZIhvcNAQELBQADggEBAA16kUHj7DIqGJ4jFT9BR76q6VF2YkOt3ihnxSF6qqs/
U3bC6JbLVAH7mlbD0C9O1+TNe8PUCjywiA5I+nDtCEJCf3VvTmJbC0ySRz3NhGzo
/ZIYpEQbSVhDuaYN7cMN/ifoD/44hxrfA3UcmNFYS8ooMfCF4WTdjg6z6XhbD8Bf
T378tD6EBv2jxU0wUWq5SgQRWU0OWMWraILFr4ibYtTZYtSQ6IjdVxNJt3qx6bt3
HWFQWi7t3ecYk8vKo2LPmDcocyTRfAsbX6+h5HOUKOeglc0TkVGVt56O/zVQb5Md
5yqnE0IhbdhtSqclQhBBFXJcf5XZXBRPR2hXyudd7so=
-----END CERTIFICATE-----