Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3133362e302f32322d3233203d3e203237383336.roa
File:                     3137392e332e3133362e302f32322d3233203d3e203237383336.roa (raw, json)
Hash identifier:          XVjGUvIz5O0PAOoERVgmicKqTXXbJuGE0s1ELvsJWTY=
Subject key identifier:   31:6B:14:06:B2:E9:7B:79:C3:50:35:F2:57:77:28:44:22:38:4C:6D
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       29760BE5FE919308213F0A744131F26135280C4C
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3133362e302f32322d3233203d3e203237383336.roa
Signing time:             Tue 05 Mar 2024 17:47:48 +0000
ROA not before:           Tue 05 Mar 2024 17:42:48 +0000
ROA not after:            Tue 04 Mar 2025 17:47:48 +0000
asID:                     27836
IP address blocks:        179.3.136.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:0b:e5:fe:91:93:08:21:3f:0a:74:41:31:f2:61:35:28:0c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:48 2024 GMT
            Not After : Mar  4 17:47:48 2025 GMT
        Subject: CN=316B1406B2E97B79C35035F25777284422384C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:bd:e8:0b:75:21:4e:27:9f:53:fe:b1:d2:
                    13:66:65:0b:5e:84:57:21:a6:38:0e:71:c4:f6:99:
                    e6:fd:d3:fc:77:2d:82:02:6d:2c:31:0a:d0:a2:ad:
                    c4:7a:14:9a:be:39:23:d8:35:6e:7d:6e:e2:b0:99:
                    b3:2c:24:61:65:9f:c4:fe:cc:65:b9:54:c6:bc:79:
                    6d:0d:37:e9:b9:90:22:51:a4:b1:af:bd:c6:11:ab:
                    da:03:70:64:6e:97:0a:c5:bc:2f:e9:bd:c2:c9:0f:
                    ee:11:1d:00:a2:00:31:4b:4f:ce:c8:75:20:58:ce:
                    04:d1:46:75:6b:83:db:ff:a2:d5:b7:ff:bc:71:52:
                    f2:b9:2a:42:b7:0e:bf:4e:69:08:1c:bb:6a:83:78:
                    d9:26:b3:82:9c:30:29:c3:99:a0:3d:4b:b2:71:68:
                    9c:3b:3b:92:2e:c3:f9:52:d9:d3:0d:85:28:04:a1:
                    0a:74:bf:df:62:bd:86:45:ad:d4:66:10:54:8d:25:
                    39:f1:bb:32:34:09:ae:9f:4f:37:f0:2f:55:7d:d5:
                    ea:9c:ff:b3:6d:61:81:a9:d2:6b:ae:8b:bf:4c:9c:
                    b2:04:cc:29:20:59:f0:7a:b9:fc:2d:ad:18:af:7d:
                    0e:99:71:ad:43:cc:97:2b:f2:19:f8:db:67:88:8b:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:14:06:B2:E9:7B:79:C3:50:35:F2:57:77:28:44:22:38:4C:6D
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3133362e302f32322d3233203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:79:d4:ed:35:b7:1e:8f:b7:ac:02:96:a8:51:7f:d0:ee:48:
         69:4b:ab:b4:74:df:f4:ec:d7:81:df:44:f0:b1:40:1e:03:0f:
         c0:34:2d:ad:55:d3:4a:fe:18:a0:bb:19:27:b4:46:c0:e6:a5:
         a8:2f:ef:a6:52:f6:d2:60:37:70:41:1e:25:db:ef:74:7d:1d:
         a4:31:47:a9:3f:b9:dd:c8:50:c0:e8:c0:10:0f:5a:8e:97:fc:
         f9:a4:0b:fa:ea:bb:cd:5f:40:0c:85:63:92:85:50:94:30:e6:
         9d:f3:10:1c:c0:50:b1:00:91:d2:af:f9:92:ee:f3:3e:03:5d:
         7b:66:17:23:f2:27:dd:90:ac:1a:44:35:bc:8e:8f:3e:1a:4b:
         db:bd:0d:8a:59:9e:6a:03:74:2a:4a:71:35:14:7e:cb:22:06:
         48:2e:93:ad:5d:30:28:2e:85:e2:de:c8:31:a9:44:89:ed:a8:
         b3:a1:54:c2:af:45:01:07:30:96:70:40:15:e7:c2:6b:05:f5:
         02:20:2e:15:87:d8:ab:f1:0e:8e:29:c3:72:60:3f:e6:64:ad:
         6d:6d:a3:24:67:4e:f3:8e:d9:24:3b:bb:50:e0:4b:9a:2f:77:
         c8:cc:a3:10:e8:2e:e7:c9:19:19:9f:ce:1a:c6:f1:86:4d:aa:
         1d:18:2a:81
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKXYL5f6RkwghPwp0QTHyYTUoDEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE2QTBCQUVGMTNGNjQ2QzYxRTNBQjAzODQ2REJGQUQ3
OEREN0U5OTAeFw0yNDAzMDUxNzQyNDhaFw0yNTAzMDQxNzQ3NDhaMDMxMTAvBgNV
BAMTKDMxNkIxNDA2QjJFOTdCNzlDMzUwMzVGMjU3NzcyODQ0MjIzODRDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKr3oC3UhTiefU/6x0hNmZQte
hFchpjgOccT2meb90/x3LYICbSwxCtCircR6FJq+OSPYNW59buKwmbMsJGFln8T+
zGW5VMa8eW0NN+m5kCJRpLGvvcYRq9oDcGRulwrFvC/pvcLJD+4RHQCiADFLT87I
dSBYzgTRRnVrg9v/otW3/7xxUvK5KkK3Dr9OaQgcu2qDeNkms4KcMCnDmaA9S7Jx
aJw7O5Iuw/lS2dMNhSgEoQp0v99ivYZFrdRmEFSNJTnxuzI0Ca6fTzfwL1V91eqc
/7NtYYGp0muui79MnLIEzCkgWfB6ufwtrRivfQ6Zca1DzJcr8hn422eIi5ZPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMWsUBrLpe3nDUDXyV3coRCI4TG0wHwYDVR0j
BBgwFoAUUWoLrvE/ZGxh46sDhG2/rXjdfpkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOURCNzM0NEI4MkMzOEFEMzUxMTREMTkwNjU3OEVBQkU3
NDg0QkMyNDk3RkMwOUYxQURCQjBDOUU1MTQ3NEFCLzAvNTE2QTBCQUVGMTNGNjQ2
QzYxRTNBQjAzODQ2REJGQUQ3OEREN0U5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTZBMEJBRUYxM0Y2NDZDNjFF
M0FCMDM4NDZEQkZBRDc4REQ3RTk5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlEQjczNDRCODJDMzhBRDM1MTE0RDE5MDY1NzhFQUJFNzQ4NEJDMjQ5
N0ZDMDlGMUFEQkIwQzlFNTE0NzRBQi8wLzMxMzczOTJlMzMyZTMxMzMzNjJlMzAy
ZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzczODMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKzA4gwDQYJ
KoZIhvcNAQELBQADggEBAJB51O01tx6Pt6wClqhRf9DuSGlLq7R03/Ts14HfRPCx
QB4DD8A0La1V00r+GKC7GSe0RsDmpagv76ZS9tJgN3BBHiXb73R9HaQxR6k/ud3I
UMDowBAPWo6X/PmkC/rqu81fQAyFY5KFUJQw5p3zEBzAULEAkdKv+ZLu8z4DXXtm
FyPyJ92QrBpENbyOjz4aS9u9DYpZnmoDdCpKcTUUfssiBkguk61dMCguheLeyDGp
RIntqLOhVMKvRQEHMJZwQBXnwmsF9QIgLhWH2KvxDo4pw3JgP+ZkrW1toyRnTvOO
2SQ7u1DgS5ovd8jMoxDoLufJGRmfzhrG8YZNqh0YKoE=
-----END CERTIFICATE-----