Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa
File:                     3137392e31322e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          upsD7sCCDoZ1MJ/Dj+fc7yKbJrA61HdC1m2E885KM0o=
Subject key identifier:   3C:10:10:16:C9:BF:73:69:B1:3E:26:6E:68:92:FB:7D:A3:2B:70:68
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       381D982DAF5304AE675B720ED8FE86F0EDECCA7F
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 05 Mar 2024 18:15:40 +0000
ROA not before:           Tue 05 Mar 2024 18:10:40 +0000
ROA not after:            Tue 04 Mar 2025 18:15:40 +0000
asID:                     27831
IP address blocks:        179.12.0.0/14 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1d:98:2d:af:53:04:ae:67:5b:72:0e:d8:fe:86:f0:ed:ec:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:40 2024 GMT
            Not After : Mar  4 18:15:40 2025 GMT
        Subject: CN=3C101016C9BF7369B13E266E6892FB7DA32B7068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:a1:d3:13:9e:b3:32:00:8c:f2:11:b7:ed:
                    5b:87:49:af:c1:af:eb:bb:12:ac:bc:a6:36:c3:a3:
                    af:6b:4c:eb:e3:d8:4b:c8:50:40:04:d2:f2:14:a5:
                    91:ae:32:6f:17:66:09:67:77:13:96:15:a8:f9:a3:
                    ed:de:30:fc:3c:bd:c3:0c:6c:ce:13:ae:53:3f:fa:
                    a4:97:9f:83:0a:91:b9:cf:36:9c:cc:38:4d:3c:6b:
                    63:50:f9:2b:02:b3:0a:28:f6:b7:09:4d:0d:f5:78:
                    b0:37:bb:a5:45:89:4a:bb:0b:19:b9:b6:a2:00:df:
                    9f:4e:d2:1d:e1:2b:c0:04:32:e6:e9:3e:51:b7:f6:
                    e1:2a:73:ee:a7:b4:6c:56:af:98:2f:11:32:0e:c0:
                    de:97:27:1b:49:2f:c8:83:43:65:0f:ed:b6:c2:d5:
                    c5:f9:e7:9c:20:08:de:d0:ca:55:8d:72:dd:ee:d5:
                    b7:0e:cf:aa:db:34:38:15:fe:fd:5e:f1:10:0d:74:
                    91:c0:da:97:c4:04:5e:c7:bd:5e:8d:50:63:73:52:
                    65:42:49:0b:7f:81:a7:33:7c:c8:17:62:ed:86:d1:
                    7c:ba:d3:be:74:53:81:a6:9e:cb:95:c9:9d:d2:60:
                    50:ea:16:38:a3:a2:ed:9b:97:11:91:b1:61:3b:d5:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:10:16:C9:BF:73:69:B1:3E:26:6E:68:92:FB:7D:A3:2B:70:68
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3137392e31322e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.12.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c4:bc:a2:18:a9:36:ca:b3:51:d8:e7:74:db:d3:98:4d:20:a4:
         3c:d8:56:6b:64:c1:da:c6:e0:76:b6:88:f3:81:99:2f:b0:01:
         ab:fb:5a:36:bf:c7:17:5a:8e:04:db:09:14:74:62:c2:5b:19:
         17:09:1d:49:d7:94:48:9b:52:0b:fd:c8:e9:48:30:14:79:72:
         c5:9a:ed:8d:c1:51:58:02:64:3c:9b:eb:4f:d1:1e:00:a1:18:
         d8:a8:fe:8a:88:d1:2c:70:21:5b:66:23:81:50:65:a0:4a:83:
         b2:90:26:bc:fa:77:02:69:e0:39:e2:fd:01:a7:6b:9f:de:db:
         22:02:e6:d5:9c:b4:74:64:a4:a8:f5:0a:d0:98:2f:c3:0f:7c:
         51:8e:8e:84:f2:fd:1b:f6:c9:d0:3e:00:05:b8:67:50:aa:3b:
         ea:cd:48:5f:44:52:23:4e:31:d7:3d:65:20:24:c4:56:6f:ef:
         6c:87:79:e6:ff:dd:b9:df:95:10:01:a2:7b:47:75:2e:e2:e6:
         e4:0f:8c:ce:fa:f5:d0:0f:6c:17:9b:14:33:f3:31:39:89:67:
         14:fc:aa:f5:10:16:05:cb:b2:c9:38:be:e6:21:46:17:93:95:
         43:34:9d:68:f7:60:d6:81:d9:28:e4:9e:1b:bc:0f:29:32:19:
         35:18:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----