Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132372e39322f33302d3330203d3e20323733393432.roa
File:                     3137302e38332e3132372e39322f33302d3330203d3e20323733393432.roa (raw, json)
Hash identifier:          NWtu3eA47DvysmgIJwm7+xYHwYp5Wo7wuVfLWfLk++Y=
Subject key identifier:   2D:F1:0B:1A:39:25:1B:3C:09:2D:19:CD:18:CE:C2:55:76:E3:03:99
Certificate issuer:       /CN=4B7687F569E5893215BAF86B72C4274237504316
Certificate serial:       629806AB9EDD3655292C9973E3A10E198905C0E9
Authority key identifier: 4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132372e39322f33302d3330203d3e20323733393432.roa
Signing time:             Wed 20 Nov 2024 18:40:00 +0000
ROA not before:           Wed 20 Nov 2024 18:35:00 +0000
ROA not after:            Wed 19 Nov 2025 18:40:00 +0000
asID:                     273942
IP address blocks:        170.83.127.92/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:98:06:ab:9e:dd:36:55:29:2c:99:73:e3:a1:0e:19:89:05:c0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7687F569E5893215BAF86B72C4274237504316
        Validity
            Not Before: Nov 20 18:35:00 2024 GMT
            Not After : Nov 19 18:40:00 2025 GMT
        Subject: CN=2DF10B1A39251B3C092D19CD18CEC25576E30399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:1c:65:36:72:a4:61:81:c6:b2:31:f9:70:
                    1a:01:fc:29:0f:36:0c:9f:18:23:75:25:01:05:2b:
                    b6:fc:2a:1d:6b:19:da:bb:cc:79:ca:00:70:40:ed:
                    4c:4e:65:18:c3:54:93:8b:37:19:f3:1d:f9:ee:87:
                    e7:64:79:d3:df:8c:67:ac:19:fc:92:f4:0a:ad:bd:
                    c6:cf:86:ca:87:26:60:d9:52:2a:fd:29:26:8c:51:
                    c3:61:2b:6f:d5:16:96:bd:ab:2f:a5:aa:10:57:7b:
                    0d:f9:25:3e:42:73:7a:74:89:06:6d:bd:97:d8:a3:
                    c5:4a:e6:41:0c:86:bd:a8:6d:b2:eb:01:b9:f7:9a:
                    b1:ad:99:16:13:b2:e3:64:fc:55:0f:90:a7:e0:bd:
                    fa:98:16:4f:0f:de:8f:58:2b:8b:65:44:73:45:16:
                    ee:17:96:7a:1d:08:6e:43:b6:bf:3d:83:f1:c6:28:
                    51:0b:ff:89:c3:32:e8:ed:94:d6:f6:76:bc:06:3c:
                    ec:da:5c:a8:0a:9d:06:54:d6:38:e7:71:df:21:4a:
                    41:c9:6a:3d:8a:a1:e9:a3:7c:f0:7b:c4:7d:48:07:
                    3f:3b:69:ff:e1:47:31:40:93:36:d4:fc:59:da:81:
                    c3:d6:ce:5c:e5:9c:fe:2b:84:10:39:7a:74:af:2c:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:0B:1A:39:25:1B:3C:09:2D:19:CD:18:CE:C2:55:76:E3:03:99
            X509v3 Authority Key Identifier:
                keyid:4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132372e39322f33302d3330203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.127.92/30

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:14:5b:d7:b3:e0:83:94:48:be:e7:38:0d:5e:21:02:34:
         ea:d1:de:af:97:3b:5e:69:5a:77:75:6a:aa:8a:ef:93:68:8e:
         88:8b:59:3c:50:27:28:cf:94:e8:87:a8:1c:63:bc:88:fa:cf:
         42:7f:d5:b9:4b:4b:53:4f:2e:60:e4:33:ba:18:ab:a3:b8:39:
         17:3d:4f:52:18:da:d7:5f:b6:0a:98:a2:d4:e2:40:f8:42:6c:
         94:c4:ef:8f:eb:9a:9a:7d:5c:b9:fa:ec:08:40:2c:73:4a:4b:
         97:71:c9:f3:27:0c:67:de:25:cc:93:f1:6e:2e:a0:63:48:57:
         f8:87:3b:6c:22:37:54:6f:94:1f:a8:12:f9:8d:87:10:12:2b:
         46:59:65:27:f9:42:d4:ae:6f:e3:8d:be:56:1c:e5:50:ba:03:
         54:27:6e:76:e7:f5:86:65:1a:c2:0e:47:84:fa:c8:49:c0:0f:
         0e:09:e1:9f:18:bc:34:63:b6:33:48:3e:73:28:86:35:4a:71:
         27:11:52:fc:f8:24:57:2d:fe:3a:1e:82:b6:d2:33:9e:9d:1a:
         6a:fd:34:34:de:3b:38:21:7f:64:50:59:8d:37:22:75:d3:a5:
         e2:70:cb:76:b1:5d:02:58:31:dc:47:a5:06:e4:c2:fa:c1:01:
         11:8f:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----