Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3234302e302e302f31322d3234203d3e203236363131.roa
File:                     3138312e3234302e302e302f31322d3234203d3e203236363131.roa (raw, json)
Hash identifier:          TULY0tp1BfI0sKkVyi8/VVwuhLqZzCAq6RHGrQRcE3E=
Subject key identifier:   55:9B:C4:72:D2:2B:AB:93:D9:BF:B4:07:69:BE:9B:4B:BD:FD:1B:0A
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       363BC973F5F987B9C33CE07ECC7628ADCF48B2B7
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3234302e302e302f31322d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:00 +0000
ROA not before:           Tue 05 Mar 2024 17:56:00 +0000
ROA not after:            Tue 04 Mar 2025 18:01:00 +0000
asID:                     26611
IP address blocks:        181.240.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3b:c9:73:f5:f9:87:b9:c3:3c:e0:7e:cc:76:28:ad:cf:48:b2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:00 2024 GMT
            Not After : Mar  4 18:01:00 2025 GMT
        Subject: CN=559BC472D22BAB93D9BFB40769BE9B4BBDFD1B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:04:99:d7:ee:d5:fb:f3:c4:ff:93:9b:9d:
                    72:3d:d0:7c:90:6a:c8:40:40:87:71:ef:ec:f7:68:
                    e7:68:ec:18:10:7e:65:a6:87:9b:8b:de:c8:db:4d:
                    57:b4:87:2f:70:e7:56:bd:14:25:98:9e:18:4a:de:
                    f2:ca:cf:0b:22:82:bf:5e:c8:13:d6:3c:14:81:d0:
                    3b:f8:9d:a5:22:16:96:c6:c9:2a:85:0a:e8:6d:bb:
                    f7:5b:24:c8:e0:a9:a7:d6:74:65:43:88:78:9a:5f:
                    cb:8b:35:8e:7f:88:fd:04:8b:9e:1b:5b:47:8b:f3:
                    03:e4:18:0f:f9:a1:b9:2c:a9:5a:a5:c9:47:94:91:
                    cd:77:86:b7:51:5e:12:de:99:19:d2:41:1d:49:27:
                    71:26:d2:f0:34:7c:fc:af:32:56:8f:4a:a1:3f:43:
                    05:87:48:21:1d:22:d1:32:50:fc:51:57:d3:5c:d0:
                    c3:95:1a:ef:cb:a1:b8:db:01:f8:cc:11:8c:c0:7d:
                    a6:a8:c1:02:78:2c:63:c8:d6:5a:f6:c6:2f:21:dd:
                    ca:75:83:4b:49:43:7e:0e:a5:26:3d:7c:1e:33:35:
                    a4:fc:0c:ae:68:d1:72:29:e1:db:8f:89:0e:40:91:
                    be:2d:63:33:95:7a:84:dd:31:5d:a2:89:ac:60:4e:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:C4:72:D2:2B:AB:93:D9:BF:B4:07:69:BE:9B:4B:BD:FD:1B:0A
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3234302e302e302f31322d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.240.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:35:76:d9:32:26:7d:b2:49:92:5f:5e:1c:45:1c:e3:82:
         6c:3e:70:47:a9:8e:3c:83:96:1c:8f:f1:6b:e7:75:58:65:62:
         18:29:e8:f9:88:42:b8:40:e1:c5:f7:10:3a:56:7a:6c:0d:c4:
         17:8a:1c:37:9c:59:c4:c5:74:1b:cc:61:78:dd:89:19:d8:d4:
         9b:c4:a5:8b:72:1c:26:20:43:02:a2:a4:34:5a:b1:0f:cb:0d:
         30:0a:1b:d1:21:f2:79:24:be:1c:5c:95:a1:dd:ca:09:8c:53:
         5f:ea:ca:ec:b2:fa:99:b1:8c:02:a6:cb:92:58:60:c4:1c:03:
         02:89:b6:dd:a7:45:76:ff:8c:1b:79:bd:d9:05:93:60:d1:58:
         76:1f:09:06:2b:c9:a3:4b:78:0c:61:fe:ca:da:e7:31:1e:2e:
         c8:ac:7c:96:e8:e6:b7:5d:34:3b:9a:32:4a:06:84:69:eb:33:
         e6:c5:ec:f7:3a:18:19:4c:58:c8:37:96:bb:a1:f7:5b:49:d1:
         29:3b:d0:22:7b:2d:cc:f0:34:3e:19:90:ae:42:3d:ee:70:ae:
         f2:dd:ca:91:54:d6:5e:a4:70:97:39:5f:22:af:39:8d:b0:ed:
         41:02:eb:1f:16:70:7d:a6:f0:e6:40:00:ed:0d:2e:a7:ab:9b:
         61:5f:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----