Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e302e302f31382d3234203d3e203237373733.roa
File:                     3137392e35312e302e302f31382d3234203d3e203237373733.roa (raw, json)
Hash identifier:          EGomgtmNEIRpPhhVV4yPvCMmO0UXn+8ZSpSeBmbPHrc=
Subject key identifier:   62:D7:FD:1D:29:10:C6:34:8B:C6:24:D7:CA:29:72:EE:3A:19:31:4F
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       72789760B10FC95991535D91F0E2E0A8D15984D3
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e302e302f31382d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:42 +0000
ROA not before:           Tue 05 Mar 2024 18:05:42 +0000
ROA not after:            Tue 04 Mar 2025 18:10:42 +0000
asID:                     27773
IP address blocks:        179.51.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:78:97:60:b1:0f:c9:59:91:53:5d:91:f0:e2:e0:a8:d1:59:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:42 2024 GMT
            Not After : Mar  4 18:10:42 2025 GMT
        Subject: CN=62D7FD1D2910C6348BC624D7CA2972EE3A19314F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:0e:1e:5c:0e:cb:55:a2:d0:e8:ae:26:8d:
                    7d:dd:91:51:3c:5f:a1:74:a2:63:3a:96:c5:5f:66:
                    3e:d3:10:6f:08:3e:c7:b4:6f:68:25:72:00:cb:a0:
                    29:b2:fe:d6:81:72:c4:69:44:bb:ae:21:b2:3d:10:
                    06:c1:18:c5:c0:7b:bc:2c:02:53:90:8b:7b:3c:26:
                    dd:0b:1e:58:0b:d7:d0:1f:a3:db:2f:80:78:0b:fd:
                    64:40:c8:23:c0:34:11:cc:66:e8:72:d0:32:83:84:
                    09:50:e1:6d:e7:36:85:e0:22:3c:73:fc:22:ae:60:
                    6f:27:c5:a1:4a:11:e9:09:6d:42:10:5b:a9:cc:1b:
                    8e:ee:0a:f0:11:24:0d:c4:81:68:6c:4a:2d:00:e3:
                    f3:dc:fd:ba:0d:c8:8f:5e:20:e8:7f:46:ac:f4:ff:
                    ee:b8:69:a0:37:47:6f:f0:29:29:3a:f6:75:7c:c3:
                    b3:1a:d5:c9:6e:fd:8e:29:14:d1:4e:d2:7e:46:53:
                    6e:e7:95:1f:16:1c:19:ed:74:a2:49:f0:52:36:3d:
                    62:a4:1a:8e:7d:84:f2:b6:23:f8:77:9b:c0:f6:c5:
                    89:1d:cb:c4:dc:52:72:45:95:0a:cf:f1:8d:33:23:
                    aa:3e:20:9c:5b:1a:3a:31:25:e9:49:01:f5:02:9e:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:FD:1D:29:10:C6:34:8B:C6:24:D7:CA:29:72:EE:3A:19:31:4F
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3137392e35312e302e302f31382d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:07:b3:46:71:5f:a9:e1:c5:f3:b0:ef:fc:99:72:52:68:00:
         9d:2d:fc:e2:ae:a9:cb:cb:32:ca:89:58:fc:2d:cd:79:ff:34:
         dd:94:92:46:c8:7d:d5:ce:85:e5:de:31:89:f4:43:32:6e:cf:
         d9:59:84:d0:ad:f8:cb:46:47:c9:e9:e6:cd:34:8b:80:a8:6f:
         73:cc:d5:63:8f:56:c0:70:9e:76:1e:7a:66:09:96:16:e9:6b:
         88:67:aa:c6:fc:b2:73:78:54:fb:d2:61:b2:f9:f4:28:a7:13:
         a6:06:61:d9:97:9a:c1:b9:93:8a:e0:45:0d:e7:95:a3:55:55:
         25:5a:06:c4:65:13:9a:04:b4:a5:13:7f:d4:26:13:9e:84:26:
         ea:1e:8b:f1:de:e6:15:06:4e:70:08:b4:a1:05:65:ef:27:7a:
         53:25:33:3d:06:dc:5a:8e:d1:85:ce:1a:32:9b:cd:7c:5d:87:
         70:75:32:df:ed:6d:9f:61:b6:54:0a:4d:ed:3d:4d:9d:10:91:
         25:02:b7:65:44:b3:ea:3c:8b:84:9f:2e:7d:d7:bc:f1:2b:59:
         bd:6e:b8:70:17:06:c2:d6:ef:c5:1c:55:8c:38:6d:f8:b6:2a:
         5a:e8:11:d1:95:37:6f:39:36:c0:e2:dd:4c:f3:96:bd:5d:05:
         79:44:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----