Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa
File:                     3138362e3137322e302e302f31342d3136203d3e203237383336.roa (raw, json)
Hash identifier:          We/bkEzxzbIKEj58mPq53lhsUl7S7KrAsqN+5ZjJQx4=
Subject key identifier:   C3:DF:5A:8E:00:2B:8C:20:54:49:67:E6:76:C9:DA:87:D8:28:32:2D
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       5FC5ED447B2F7E8A60E2C6B25D14D5981B3B69A7
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa
Signing time:             Tue 05 Mar 2024 17:47:49 +0000
ROA not before:           Tue 05 Mar 2024 17:42:49 +0000
ROA not after:            Tue 04 Mar 2025 17:47:49 +0000
asID:                     27836
IP address blocks:        186.172.0.0/14 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c5:ed:44:7b:2f:7e:8a:60:e2:c6:b2:5d:14:d5:98:1b:3b:69:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Mar  5 17:42:49 2024 GMT
            Not After : Mar  4 17:47:49 2025 GMT
        Subject: CN=C3DF5A8E002B8C20544967E676C9DA87D828322D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:3a:b6:3b:25:03:66:a9:b9:99:ca:b1:b1:
                    2d:93:a1:3a:f1:f5:5a:31:16:07:7f:58:6e:6e:e2:
                    b4:79:ce:b1:60:e7:92:2a:e4:ff:6c:c3:a1:36:12:
                    9e:36:32:3f:e4:47:0e:60:51:21:99:8a:35:30:86:
                    f4:bc:f5:e7:5a:c3:fe:3c:71:36:27:c5:58:b4:d5:
                    82:b8:bd:0a:86:3a:e1:20:15:e1:e8:d6:f7:41:5e:
                    ba:c3:c5:ef:e9:f3:5c:e2:33:07:6a:4a:27:f0:b7:
                    2f:e6:5e:d6:78:0c:89:53:b1:cb:5b:36:b3:28:dc:
                    a0:ba:94:bb:10:93:2a:1a:1f:cd:51:f1:f0:5c:17:
                    52:11:0b:61:d4:a3:89:f4:1c:2c:91:92:48:c6:33:
                    bc:9f:71:a8:13:5f:94:84:ac:1b:13:00:f4:bf:90:
                    a7:ab:cd:fa:37:c1:68:29:f1:67:26:95:75:7d:fc:
                    3a:e7:9e:5f:d9:ed:8a:6f:70:1b:01:4d:42:0f:bb:
                    5b:5f:f9:ef:2a:4a:e4:f4:35:0c:1a:7b:22:8d:43:
                    09:1c:ed:f6:88:6e:4d:b0:e2:4f:c6:7c:86:1d:29:
                    a7:90:22:a0:2d:86:f7:19:84:1b:9a:4d:80:31:d0:
                    c7:80:69:d9:f1:56:c8:8b:a5:e6:d4:30:3e:27:e7:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:5A:8E:00:2B:8C:20:54:49:67:E6:76:C9:DA:87:D8:28:32:2D
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:a3:0c:de:fb:1c:20:ab:4e:d5:83:67:94:0e:4e:8d:51:
         8d:eb:27:e7:d2:b5:dd:ed:d7:1c:8d:87:12:97:7a:e0:67:e2:
         98:88:4b:12:c7:d7:57:da:6a:65:b1:b4:1b:1f:00:9a:b2:4d:
         81:84:7f:4c:19:1c:1c:41:fd:cb:d1:60:94:10:27:7f:58:3f:
         af:f0:48:8e:b2:67:4b:9a:f1:46:ad:5c:ba:c3:e0:0d:74:90:
         7e:df:97:c3:e6:b2:b7:86:96:8f:e0:30:f3:84:a0:f2:36:4d:
         b9:1c:4c:17:2e:e0:dc:6d:fc:7e:82:ff:31:55:29:5e:a6:0d:
         ec:77:f3:3f:6b:0e:5b:d4:98:01:c7:c0:4c:a4:10:94:07:61:
         49:d8:a4:f0:ba:86:94:13:07:aa:38:4e:98:40:b9:dd:9b:2c:
         96:36:7e:18:38:ef:d4:a4:d1:ce:16:45:38:05:f0:9c:e7:92:
         69:00:68:95:4f:cd:9d:3d:61:0a:35:ab:93:62:8a:8a:c9:10:
         cf:03:fe:01:95:1b:d0:5d:93:fb:87:a3:be:57:1f:33:a0:0b:
         6a:df:df:30:44:a4:af:98:a3:2e:b4:a5:f3:bd:f5:33:f3:ed:
         a5:89:9d:a2:56:e0:cf:8e:38:4b:9a:cd:71:7f:29:60:aa:91:
         98:d7:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----