Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa
File:                     3137392e34322e3137362e302f32302d3230203d3e203532333639.roa (raw, json)
Hash identifier:          bcvTLLn1lYhPUk1r5USxr9MAvwcztvwih0QYhUiSUmY=
Subject key identifier:   30:0D:34:F2:F5:10:3C:52:45:78:06:DD:6E:6F:70:44:29:60:C6:0B
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       71ABDFBDAF8B78CF3FB358DD97D445BACE756142
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:04 +0000
ROA not before:           Sun 31 Mar 2024 03:20:04 +0000
ROA not after:            Sun 30 Mar 2025 03:25:04 +0000
asID:                     52369
IP address blocks:        179.42.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ab:df:bd:af:8b:78:cf:3f:b3:58:dd:97:d4:45:ba:ce:75:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:04 2024 GMT
            Not After : Mar 30 03:25:04 2025 GMT
        Subject: CN=300D34F2F5103C52457806DD6E6F70442960C60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:88:f5:bb:c7:cf:9c:10:f7:42:b0:d1:fe:
                    b8:e1:6c:1e:80:29:91:b6:63:3f:e5:7c:df:2f:dc:
                    a0:22:15:2a:85:80:d4:6a:08:91:21:08:c3:e9:9a:
                    cd:b3:5c:ac:64:8e:98:49:9c:3d:cb:36:08:7e:2b:
                    76:9e:98:f0:a6:63:6b:c1:9d:90:2a:57:1d:e3:15:
                    48:79:74:a9:a1:48:eb:34:6c:1b:07:2c:29:16:ed:
                    74:e2:4b:f6:54:79:ef:f5:75:1d:8d:b0:8d:a0:30:
                    bd:9d:82:30:91:f4:f4:b0:46:8c:b5:b7:19:31:7c:
                    7f:2c:37:42:55:6d:98:14:0c:af:f7:21:21:21:ad:
                    58:b6:55:a9:b9:89:a8:a3:46:ee:39:78:be:c0:b2:
                    11:fa:df:db:9b:5d:45:ff:2a:10:5a:d9:34:af:5b:
                    93:97:3c:8a:b7:46:18:7e:32:5e:63:90:32:e4:8a:
                    11:13:23:45:ad:ff:71:e7:cc:4a:7b:be:c7:12:d7:
                    20:28:91:5c:06:3b:f8:74:82:1c:dd:4f:ae:b5:6e:
                    c1:8b:db:09:fd:a6:01:91:29:75:38:bd:de:6c:87:
                    b6:58:02:fd:5e:bd:da:da:a1:20:66:28:f5:bb:e5:
                    22:b2:9d:91:bc:83:dc:6e:7f:fc:98:18:22:1c:8d:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:34:F2:F5:10:3C:52:45:78:06:DD:6E:6F:70:44:29:60:C6:0B
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137362e302f32302d3230203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:be:27:bc:89:7e:b9:60:ad:75:20:5e:ca:94:6b:2b:c2:
         aa:8f:c0:1a:b8:c1:44:10:cf:da:67:05:e7:0a:45:05:3d:31:
         82:e1:c7:d7:25:54:65:43:ad:fc:ea:13:5a:96:f6:d9:4c:44:
         69:41:b0:a6:05:e2:f6:fb:05:f3:46:39:ac:4e:cf:2b:e9:7b:
         5a:8d:63:0d:27:ab:1a:fb:13:a5:14:69:12:25:8a:3a:6c:4f:
         70:6e:a1:97:77:3c:58:3e:b7:a4:56:b1:76:a1:4a:af:b7:55:
         bf:b8:07:64:2b:50:e8:f8:2e:dc:9a:99:4c:aa:a8:8c:38:bb:
         9e:6c:a1:4e:ba:1c:c8:73:3c:c0:9d:2b:d4:62:17:dd:76:34:
         ca:63:54:d2:b1:a8:7e:59:2f:53:32:a3:cb:43:96:7d:ed:b0:
         3d:57:ae:3d:cc:cd:dc:d6:04:d2:1a:70:45:16:62:57:94:86:
         ff:69:da:07:dd:26:7e:fa:cc:01:03:a5:0f:f3:5a:68:22:cf:
         3f:3b:58:6b:83:a4:d4:22:0c:92:11:f1:e4:84:3e:5c:55:4e:
         5a:f1:72:08:d4:6b:24:06:01:b7:8a:fa:c0:22:c2:0f:79:ba:
         1a:fc:92:cd:56:42:cf:59:53:08:78:d1:bb:bc:bf:58:83:39:
         b3:54:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----