Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5FC03B0E8A5ACD984D1F2D98D864AC8A9401CF14AA3193231B6C20033214136B/0/3137392e34322e39342e302f32332d3233203d3e20323731383235.roa
File:                     3137392e34322e39342e302f32332d3233203d3e20323731383235.roa (raw, json)
Hash identifier:          qQ4MLyBL/EBRzevZc5QeQsrF0Hx3GJMr5nSuOJ2lBzs=
Subject key identifier:   DD:46:0A:FB:9E:56:7C:E7:00:7E:7E:BF:7A:9F:7A:0A:86:2F:E6:D7
Certificate issuer:       /CN=05F032E9E59B9EF06474EC39A983B98BBCB7A35B
Certificate serial:       6926A90FDF68E029CB9A18C608D495F5E77E1DC9
Authority key identifier: 05:F0:32:E9:E5:9B:9E:F0:64:74:EC:39:A9:83:B9:8B:BC:B7:A3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05F032E9E59B9EF06474EC39A983B98BBCB7A35B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5FC03B0E8A5ACD984D1F2D98D864AC8A9401CF14AA3193231B6C20033214136B/0/3137392e34322e39342e302f32332d3233203d3e20323731383235.roa
Signing time:             Tue 05 Mar 2024 17:52:05 +0000
ROA not before:           Tue 05 Mar 2024 17:47:05 +0000
ROA not after:            Tue 04 Mar 2025 17:52:05 +0000
asID:                     271825
IP address blocks:        179.42.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:a9:0f:df:68:e0:29:cb:9a:18:c6:08:d4:95:f5:e7:7e:1d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F032E9E59B9EF06474EC39A983B98BBCB7A35B
        Validity
            Not Before: Mar  5 17:47:05 2024 GMT
            Not After : Mar  4 17:52:05 2025 GMT
        Subject: CN=DD460AFB9E567CE7007E7EBF7A9F7A0A862FE6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:de:fd:f7:50:a1:5b:d5:ed:5c:64:18:3e:
                    7c:e4:99:e4:05:02:03:16:cd:06:d2:90:06:8b:24:
                    a9:fd:6d:dd:55:08:6c:8e:c0:be:b7:9d:6b:e1:48:
                    e5:6e:49:be:68:49:48:71:d4:e1:0b:ee:5a:dd:71:
                    7d:13:18:f4:85:01:3c:85:7d:3c:8f:22:9d:ba:ad:
                    d9:ac:fc:a2:89:a7:2d:63:54:e0:c5:59:b0:b0:69:
                    17:34:75:88:83:d9:d4:d7:f3:22:85:f1:b8:a6:d5:
                    a5:c8:59:5e:99:43:26:9a:ea:5e:13:ce:7c:96:7d:
                    30:7d:ea:c5:71:92:20:92:6d:26:cb:9a:99:c7:66:
                    3f:d6:26:24:1a:bf:42:4b:23:cf:5b:bd:76:1f:c0:
                    83:e0:75:c2:3f:ed:3b:e5:0a:f4:ac:da:89:ef:4b:
                    0f:4b:14:44:7b:95:72:a5:7a:06:7f:3e:13:90:df:
                    6b:b9:27:fa:45:74:15:8a:b8:9e:cb:b3:5f:ec:09:
                    9c:26:80:02:f0:81:c6:36:cc:9a:a6:4f:9b:dd:2a:
                    c7:81:d5:ea:f0:66:56:8a:54:62:33:97:2f:cb:16:
                    30:6b:12:92:f6:f8:ad:de:70:f9:4c:b8:86:f0:96:
                    b9:68:9d:b4:56:4a:96:74:e6:3d:7a:0b:d9:f1:ea:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:46:0A:FB:9E:56:7C:E7:00:7E:7E:BF:7A:9F:7A:0A:86:2F:E6:D7
            X509v3 Authority Key Identifier:
                keyid:05:F0:32:E9:E5:9B:9E:F0:64:74:EC:39:A9:83:B9:8B:BC:B7:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5FC03B0E8A5ACD984D1F2D98D864AC8A9401CF14AA3193231B6C20033214136B/0/05F032E9E59B9EF06474EC39A983B98BBCB7A35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05F032E9E59B9EF06474EC39A983B98BBCB7A35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5FC03B0E8A5ACD984D1F2D98D864AC8A9401CF14AA3193231B6C20033214136B/0/3137392e34322e39342e302f32332d3233203d3e20323731383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b7:86:3b:39:fd:d7:80:c3:03:1a:a5:cf:a1:e2:f1:5f:bb:
         c3:c3:ae:11:d9:42:e8:84:18:25:cb:d9:a0:67:4f:4b:f0:93:
         e1:81:36:35:8d:7e:90:53:4a:e4:39:4a:fe:a5:25:10:5d:fb:
         fe:d6:93:08:97:91:bc:ff:45:c4:ca:7d:71:19:0b:cf:1c:0d:
         48:46:89:eb:20:1d:77:9c:ed:4d:12:4b:b2:4a:a8:65:fe:c3:
         d9:8f:41:10:ae:6a:c7:be:ef:67:5a:92:87:b4:9d:8d:ce:46:
         64:48:19:f8:2e:76:19:e5:91:8a:f9:02:6d:b4:2f:cd:1b:87:
         b0:3b:1d:24:cb:0b:a8:54:a6:cf:3d:ce:99:a2:27:35:3d:b0:
         a3:b6:b4:9a:71:f8:4a:b4:a9:a5:8e:f8:b8:11:e1:4f:e8:5f:
         f9:04:a9:95:48:86:f9:4b:08:7c:f3:69:71:fd:7a:7b:d7:ba:
         74:1c:03:c2:3f:77:2e:e8:c3:81:53:5d:ec:0e:2a:14:c5:f2:
         4c:d9:81:93:51:44:52:8a:4c:3e:b3:b1:d1:b1:21:92:35:c9:
         3b:03:aa:22:7a:ac:64:11:a8:e3:15:67:f7:80:17:a4:97:0f:
         78:55:42:39:a7:24:fd:c8:ff:b7:6a:b8:f7:92:12:40:79:bc:
         6f:b5:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----