Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3234203d3e203238303030.roa
File:                     3137392e302e3135362e302f32322d3234203d3e203238303030.roa (raw, json)
Hash identifier:          ODxMt4QfJbpVXKgGgq4XcM1xdKrta6CKEdJRqhuApzU=
Subject key identifier:   B2:07:A8:89:F0:9A:C4:41:EB:C1:6F:E2:23:F7:4A:2F:A3:BD:E9:B2
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1F0F20D78B7279EC42662A6198B9B2978F4C19A6
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3234203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:59 +0000
ROA not before:           Tue 05 Mar 2024 17:34:59 +0000
ROA not after:            Tue 04 Mar 2025 17:39:59 +0000
asID:                     28000
IP address blocks:        179.0.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0f:20:d7:8b:72:79:ec:42:66:2a:61:98:b9:b2:97:8f:4c:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:59 2024 GMT
            Not After : Mar  4 17:39:59 2025 GMT
        Subject: CN=B207A889F09AC441EBC16FE223F74A2FA3BDE9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:a5:6c:19:6c:3e:98:80:ec:50:41:ca:f3:
                    4a:9b:28:c7:5b:d1:b7:ab:4e:a0:6f:f5:0b:5d:a4:
                    06:d2:a2:11:79:82:45:c3:5f:0c:a0:d9:33:50:5f:
                    22:ed:5c:e2:10:d1:66:49:7a:40:e0:32:e7:05:e7:
                    6d:05:a9:06:0f:2f:c1:42:51:8e:74:f1:b4:03:6e:
                    09:bb:d0:33:2f:2b:75:53:cf:37:60:e4:10:1e:3a:
                    e8:c5:de:c0:8f:ba:40:ca:b0:fd:48:e7:91:65:5d:
                    29:ea:f7:86:11:92:91:11:3a:d4:7a:08:b9:6d:13:
                    01:58:44:da:be:57:76:ba:dc:2b:e5:ad:fc:9d:de:
                    6a:18:86:c4:72:13:46:3b:d4:d2:19:2a:28:22:c7:
                    c1:09:74:e8:85:a0:a4:de:f2:57:7a:9f:92:ca:cc:
                    0f:af:11:a9:e7:39:a5:ad:05:88:03:35:1d:3f:09:
                    8b:12:f3:36:df:0b:c1:32:2e:3e:be:ca:9f:5e:c3:
                    ac:05:fb:c8:7f:a2:1c:05:dd:b3:46:e1:aa:dc:b0:
                    1f:62:61:3d:60:7d:f9:aa:4e:60:1d:38:43:98:87:
                    33:32:58:a0:b4:2b:a7:10:0d:57:a0:71:5b:8f:a1:
                    b0:5a:10:b6:c2:78:b0:29:46:7b:01:a5:a6:db:94:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:A8:89:F0:9A:C4:41:EB:C1:6F:E2:23:F7:4A:2F:A3:BD:E9:B2
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:06:3f:ec:bb:06:96:9d:80:00:35:9e:68:66:2f:e6:4a:6e:
         45:df:7a:b8:db:58:8a:bd:b2:cb:f2:02:4d:27:d7:97:07:2c:
         7b:63:7e:20:ed:c0:a0:aa:61:60:de:f6:ee:06:e0:09:22:57:
         1b:88:db:56:01:8a:84:ea:66:6c:3f:99:56:9d:04:33:35:52:
         6f:44:c1:77:43:8c:15:4e:78:c3:82:d4:f7:94:f7:80:fa:9b:
         cc:c2:c1:8a:1e:cf:f5:de:b3:9d:82:c6:d9:c0:d9:6d:0f:d4:
         57:6d:a0:83:ff:12:5d:6e:0c:eb:44:53:6d:d1:08:59:cb:4d:
         be:70:38:c0:38:5f:32:ae:a8:01:9f:c5:c8:86:eb:20:06:46:
         26:e2:9e:0a:c9:d8:7e:95:51:32:c8:6b:14:d8:52:43:8f:63:
         08:86:40:9b:53:c8:6b:eb:27:56:49:fa:7f:0d:18:78:2b:2d:
         98:8d:ab:32:7e:d9:42:76:f2:29:7b:be:de:f0:80:72:f7:54:
         fc:59:aa:0e:ea:69:83:6c:47:41:b1:49:a0:e9:e0:60:5d:20:
         3e:ba:57:18:27:36:e6:e6:35:3d:60:59:12:4a:5f:24:25:c3:
         49:44:36:09:08:91:cd:59:34:fb:17:e7:0e:0c:fc:0a:94:1f:
         db:f2:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----