Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa
File:                     3137392e332e36342e302f31382d3233203d3e203237383336.roa (raw, json)
Hash identifier:          sE0r/bn+rbkJO3k/QAyiPOKR3saNxnBpvVcmU/OlSqw=
Subject key identifier:   FA:CC:F1:E7:76:37:77:BF:77:E5:72:80:6E:D1:AC:EE:FB:93:6C:D8
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       64DF99D2096F0A92E0ABEB69EBC80EA568568AB4
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa
Signing time:             Tue 05 Mar 2024 17:47:52 +0000
ROA not before:           Tue 05 Mar 2024 17:42:52 +0000
ROA not after:            Tue 04 Mar 2025 17:47:52 +0000
asID:                     27836
IP address blocks:        179.3.64.0/18 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:df:99:d2:09:6f:0a:92:e0:ab:eb:69:eb:c8:0e:a5:68:56:8a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:52 2024 GMT
            Not After : Mar  4 17:47:52 2025 GMT
        Subject: CN=FACCF1E7763777BF77E572806ED1ACEEFB936CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:c8:55:3b:b9:46:bc:8f:55:8e:cc:84:c8:
                    82:65:90:9e:76:f3:1a:95:5f:71:57:80:d1:b5:c7:
                    56:97:38:93:cf:3a:fe:bb:09:e8:d5:5d:19:bd:c0:
                    c8:3f:0c:de:29:0b:34:d9:a2:4f:24:c1:21:ad:06:
                    79:7d:c8:55:79:e2:15:3c:fc:2e:0e:ad:c5:64:a9:
                    4a:64:4e:32:72:92:9e:15:84:44:7e:0b:ab:d3:69:
                    5f:a1:11:24:c7:e3:bd:14:18:6f:9e:d9:e5:72:74:
                    27:e9:fc:4c:45:7a:eb:6f:d1:f8:06:8f:7d:dd:30:
                    24:19:cf:cf:d1:8f:03:9c:73:b5:f2:1e:cc:26:d1:
                    75:f7:a8:31:a5:02:03:0b:65:1a:9f:c0:ac:bb:45:
                    a9:43:26:d9:a1:f6:33:3f:fd:cb:98:81:d7:e1:38:
                    54:c7:66:65:26:a8:c7:ad:a9:ff:ba:3e:1e:f3:ec:
                    a2:20:a6:15:7c:c6:34:dc:54:a1:96:a1:9e:40:b6:
                    da:5c:04:f2:cf:ff:0f:78:2c:c0:a3:b7:db:6d:c7:
                    65:04:f7:50:26:0b:05:09:d9:6f:4e:bf:fb:90:ec:
                    15:e8:98:cf:ba:f4:b8:0d:56:89:fb:ab:63:44:9a:
                    dc:be:9b:6e:57:a7:fe:68:7d:78:08:66:3c:48:55:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:F1:E7:76:37:77:BF:77:E5:72:80:6E:D1:AC:EE:FB:93:6C:D8
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:5e:77:61:16:fd:c1:20:ab:44:08:b9:04:86:ac:22:b0:8c:
         dd:17:4d:6f:36:33:cb:85:da:45:98:3b:56:ca:24:bb:f2:6c:
         77:f2:dd:bf:bd:88:fe:4e:ed:7a:e1:e4:1e:51:dc:96:2a:2b:
         5b:6c:4d:0b:76:0a:14:70:b9:db:ef:45:f3:a4:46:c3:c7:5a:
         35:b5:77:77:19:c1:37:82:9a:ad:e7:60:aa:99:f3:00:97:74:
         f4:6e:20:e5:af:3f:9f:6b:71:34:97:a0:7e:8e:21:eb:ba:15:
         40:43:01:00:b4:76:74:20:cc:7e:3b:77:3a:8e:54:d3:9b:b1:
         54:2a:64:db:27:a6:31:ef:72:67:38:0b:a8:a4:a5:7d:bd:c2:
         83:6b:1b:40:0f:b7:b1:11:06:2a:97:3f:d9:d4:1f:a1:5f:f9:
         99:ae:78:0e:3e:e2:a3:f9:50:cd:bd:23:2b:16:45:4b:8b:11:
         db:92:f6:5c:4d:57:97:94:b1:18:e3:13:fa:e5:67:a6:1c:11:
         43:ab:a8:48:4b:b4:10:ad:b8:86:7c:a5:18:e7:ea:11:e9:2e:
         51:9a:e7:45:fd:46:13:62:ed:c6:4b:da:94:04:cd:0f:59:bc:
         38:8b:c2:ff:d6:57:00:9c:2a:7d:8a:46:fb:66:4a:a8:02:a5:
         97:1d:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----