Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa
File:                     3137392e35302e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier:          SvW9kue37PkKRpnX7jOQVFYCtOS0Ff8qOEJZuw9tUQ0=
Subject key identifier:   C8:35:E6:95:22:7D:CF:63:56:83:04:43:97:92:E6:8E:5F:C0:3E:2A
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       2D922B60B179472D087EFD3D173E5061BE74D705
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     52228
IP address blocks:        179.50.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:92:2b:60:b1:79:47:2d:08:7e:fd:3d:17:3e:50:61:be:74:d7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=C835E695227DCF63568304439792E68E5FC03E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:f7:8c:89:1f:5f:4c:cf:19:3f:3b:8f:6a:
                    d1:88:94:bf:c4:b3:64:d5:8e:fb:27:e1:14:a8:76:
                    d8:eb:94:fb:b8:a3:3a:24:76:5d:49:e1:1d:2b:fd:
                    71:16:81:42:04:04:84:a1:28:b6:73:9a:19:10:c5:
                    f1:a8:a3:e1:e6:e2:cc:7f:56:a4:54:ea:50:6e:25:
                    22:02:b0:42:0b:f7:59:c2:8b:e3:17:7a:19:e8:b6:
                    31:ba:12:75:13:8f:6b:95:f1:27:7b:bf:81:ea:ec:
                    d9:4a:e4:7b:70:2c:5a:4f:11:ab:19:1e:6b:cd:f5:
                    ef:72:f2:32:17:e3:b9:34:fe:d9:1e:5a:a2:4e:09:
                    1c:bb:0d:6e:a7:2c:cf:54:0f:f8:3a:6b:e9:c1:23:
                    58:0c:44:b4:56:1a:b5:42:19:5a:25:b1:47:9b:1f:
                    56:9d:b4:3a:59:35:37:cc:3b:18:ed:f5:e8:47:d2:
                    9f:8c:a4:3a:d4:54:08:88:dc:a9:58:10:aa:3e:5c:
                    ba:40:5d:1b:85:02:d7:38:06:f9:d5:59:d7:4e:cb:
                    2e:0d:b5:05:ae:f9:56:6d:05:7c:cf:6d:9b:20:ea:
                    7e:80:e7:90:3c:8a:73:65:14:4f:97:ec:e2:3b:bc:
                    75:f7:c9:eb:78:a2:03:a8:30:8c:f5:3e:f1:a6:60:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:E6:95:22:7D:CF:63:56:83:04:43:97:92:E6:8E:5F:C0:3E:2A
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3137392e35302e3132382e302f31372d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:06:93:79:8e:a2:6e:25:85:68:85:f7:53:a6:ae:dc:a4:
         06:13:05:79:bf:ca:50:56:57:08:b9:00:90:30:5c:15:ae:1b:
         a7:d6:a1:e0:50:d4:2d:21:7c:97:dc:7b:84:fb:1c:c5:b3:db:
         ea:41:da:ae:9a:35:13:93:bb:23:71:5b:fe:16:ac:2b:42:3b:
         38:b2:20:75:06:41:f4:ed:4e:d7:97:f9:2c:c2:17:5c:2b:79:
         b1:e6:d9:f8:7b:c5:e2:18:94:69:5d:76:c9:8b:1a:12:09:1b:
         54:07:d6:ea:ad:75:66:c6:2c:d4:2b:4a:ab:06:55:00:bd:c8:
         6d:96:d9:78:f4:17:54:4c:96:cf:d0:de:a5:af:5c:72:dc:20:
         c7:24:6e:ae:3f:69:ba:4c:5c:99:b5:c7:2f:16:40:a6:e1:d8:
         6a:a6:30:e7:db:3a:e9:46:4d:60:46:fb:40:be:5b:0d:b6:c2:
         51:d3:cb:40:fd:5c:6b:1e:c0:be:84:a9:19:87:00:c2:c2:b2:
         14:41:1d:65:0c:56:e3:6e:96:2d:4f:a9:64:1e:5a:a4:43:8d:
         23:4b:bf:a7:b5:41:6c:59:c7:2e:e5:a2:8a:62:2c:59:81:79:
         4f:62:83:b2:61:86:66:dc:32:77:90:82:5a:89:0d:4a:2d:98:
         41:17:53:1c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULZIrYLF5Ry0Ifv09Fz5QYb501wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxMUFDQkE3MkU4MEMwMEZFQzEzRDMwQUM2NzYxMzhB
N0FDNDhDNzAeFw0yNDAzMDUxNzQ5MjdaFw0yNTAzMDQxNzU0MjdaMDMxMTAvBgNV
BAMTKEM4MzVFNjk1MjI3RENGNjM1NjgzMDQ0Mzk3OTJFNjhFNUZDMDNFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8feMiR9fTM8ZPzuPatGIlL/E
s2TVjvsn4RSodtjrlPu4ozokdl1J4R0r/XEWgUIEBIShKLZzmhkQxfGoo+Hm4sx/
VqRU6lBuJSICsEIL91nCi+MXehnotjG6EnUTj2uV8Sd7v4Hq7NlK5HtwLFpPEasZ
HmvN9e9y8jIX47k0/tkeWqJOCRy7DW6nLM9UD/g6a+nBI1gMRLRWGrVCGVolsUeb
H1adtDpZNTfMOxjt9ehH0p+MpDrUVAiI3KlYEKo+XLpAXRuFAtc4BvnVWddOyy4N
tQWu+VZtBXzPbZsg6n6A55A8inNlFE+X7OI7vHX3yet4ogOoMIz1PvGmYEEXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyDXmlSJ9z2NWgwRDl5Lmjl/APiowHwYDVR0j
BBgwFoAU9RGsunLoDAD+wT0wrGdhOKesSMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUExQTQ3QzgyRTU0NDM1M0U0QkQzNjc5RDI1NTI4REQz
MzZDMEMzQkU3RjlDOEI4ODQ1NEU3QzQxN0I2OUZGLzAvRjUxMUFDQkE3MkU4MEMw
MEZFQzEzRDMwQUM2NzYxMzhBN0FDNDhDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTExQUNCQTcyRTgwQzAwRkVD
MTNEMzBBQzY3NjEzOEE3QUM0OEM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVBMUE0N0M4MkU1NDQzNTNFNEJEMzY3OUQyNTUyOEREMzM2QzBDM0JF
N0Y5QzhCODg0NTRFN0M0MTdCNjlGRi8wLzMxMzczOTJlMzUzMDJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzUzMjMyMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7MygDAN
BgkqhkiG9w0BAQsFAAOCAQEAGp0Gk3mOom4lhWiF91OmrtykBhMFeb/KUFZXCLkA
kDBcFa4bp9ah4FDULSF8l9x7hPscxbPb6kHarpo1E5O7I3Fb/hasK0I7OLIgdQZB
9O1O15f5LMIXXCt5sebZ+HvF4hiUaV12yYsaEgkbVAfW6q11ZsYs1CtKqwZVAL3I
bZbZePQXVEyWz9Depa9cctwgxyRurj9pukxcmbXHLxZApuHYaqYw59s66UZNYEb7
QL5bDbbCUdPLQP1cax7AvoSpGYcAwsKyFEEdZQxW426WLU+pZB5apEONI0u/p7VB
bFnHLuWiimIsWYF5T2KDsmGGZtwyd5CCWokNSi2YQRdTHA==
-----END CERTIFICATE-----