Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa
File:                     3137392e302e32322e36342f32362d3236203d3e203635313035.roa (raw, json)
Hash identifier:          g3oSlANvVBCTQULMFUZGDyHno/z9J20iKMo8vDjeW6k=
Subject key identifier:   36:0E:DB:50:C0:0E:3F:E6:A3:76:28:F3:A3:B8:D3:07:E7:8A:AA:93
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       6A16A385901E7BE009C6EA1F03AA1580A335EBE0
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa
Signing time:             Tue 05 Mar 2024 18:05:18 +0000
ROA not before:           Tue 05 Mar 2024 18:00:18 +0000
ROA not after:            Tue 04 Mar 2025 18:05:18 +0000
asID:                     65105
IP address blocks:        179.0.22.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:16:a3:85:90:1e:7b:e0:09:c6:ea:1f:03:aa:15:80:a3:35:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Mar  5 18:00:18 2024 GMT
            Not After : Mar  4 18:05:18 2025 GMT
        Subject: CN=360EDB50C00E3FE6A37628F3A3B8D307E78AAA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:0e:51:35:0f:fc:38:73:58:8e:66:69:c4:
                    78:16:7c:59:96:71:e6:22:b0:65:96:e3:d3:cc:a5:
                    0d:ee:70:88:31:48:81:33:38:80:e1:5e:7c:61:c8:
                    f1:7d:e9:4d:91:1c:18:b9:03:23:93:15:fa:38:d1:
                    c5:4e:27:b3:7b:5d:57:52:39:ee:1e:5c:79:07:10:
                    8d:37:e6:06:ef:96:e7:89:44:0c:0e:d8:34:d4:ea:
                    ee:e9:87:e2:78:2b:7a:41:7d:31:16:a7:5e:f3:21:
                    ba:ff:1d:a5:f8:08:17:05:1b:4f:6c:8a:4b:67:46:
                    75:ef:ac:12:aa:76:98:4c:52:55:13:47:db:15:39:
                    3a:6e:77:88:70:60:59:19:0e:19:30:0b:98:3e:b1:
                    58:78:b4:51:53:24:a8:41:1d:12:2c:f3:1d:2d:d9:
                    1c:e3:f8:82:87:a6:c8:9b:c2:f4:6b:64:aa:9c:04:
                    bd:3f:6a:9e:60:16:53:38:4d:95:13:b8:f2:41:7a:
                    da:51:60:3e:dc:b7:ca:b1:43:65:9f:21:e8:a8:f7:
                    cd:6d:da:29:25:c5:f5:57:89:e4:62:b5:c9:cd:f0:
                    a2:06:86:f9:7e:c5:e1:ed:08:9d:cb:c1:32:36:94:
                    bd:91:71:4a:d8:d6:e0:65:cf:e5:e7:bc:57:cd:10:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:DB:50:C0:0E:3F:E6:A3:76:28:F3:A3:B8:D3:07:E7:8A:AA:93
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32322e36342f32362d3236203d3e203635313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.22.64/26

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:d7:d4:f3:0c:44:7c:b0:17:92:d6:e9:14:fa:e2:f4:e0:
         dd:f0:d9:60:94:57:dd:da:d1:dc:40:9c:0f:c2:bd:6d:01:cc:
         12:bf:46:5c:ca:ab:27:c9:c2:7e:0e:5f:59:22:91:ae:0c:c1:
         e2:02:e2:6c:8a:17:54:1c:0e:23:ef:f2:f8:f1:e4:86:2b:ef:
         eb:c6:0f:8d:6b:cd:63:c7:39:46:94:54:f4:d8:72:a2:d8:db:
         e9:c0:6b:ef:c9:ef:72:78:c5:57:67:f0:cf:31:ab:9c:28:b4:
         27:25:04:c4:f6:2d:49:77:7b:d7:c2:fd:84:d8:8c:21:bf:fd:
         b2:04:ed:d2:a9:5c:5f:12:13:0a:68:7b:25:9e:f7:c8:8e:30:
         be:b4:fa:02:d5:e8:f5:8b:d7:d4:f3:ad:31:4f:dc:81:23:6c:
         73:c6:5d:f5:3c:43:c2:43:bc:6a:5f:c4:a6:12:49:4a:3b:52:
         a9:4c:ac:53:28:11:f7:49:71:f2:4e:bc:75:21:65:98:d1:97:
         f0:eb:e1:5d:95:fd:25:9a:90:65:a0:b9:9d:d2:1b:af:66:43:
         f0:9b:32:6b:0a:8e:5d:69:30:07:4b:7c:5b:e7:f5:9b:8d:37:
         17:b7:df:7d:5c:3a:4a:1a:9a:5c:64:dd:3f:b4:4a:8c:e6:52:
         76:0d:df:eb
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUahajhZAee+AJxuofA6oVgKM16+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRDU4OEE4NkY4N0IyMjRDOUNEQUVBRjlDOTZDNjU1
NUU4MDM4RTAeFw0yNDAzMDUxODAwMThaFw0yNTAzMDQxODA1MThaMDMxMTAvBgNV
BAMTKDM2MEVEQjUwQzAwRTNGRTZBMzc2MjhGM0EzQjhEMzA3RTc4QUFBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPQ5RNQ/8OHNYjmZpxHgWfFmW
ceYisGWW49PMpQ3ucIgxSIEzOIDhXnxhyPF96U2RHBi5AyOTFfo40cVOJ7N7XVdS
Oe4eXHkHEI035gbvlueJRAwO2DTU6u7ph+J4K3pBfTEWp17zIbr/HaX4CBcFG09s
iktnRnXvrBKqdphMUlUTR9sVOTpud4hwYFkZDhkwC5g+sVh4tFFTJKhBHRIs8x0t
2Rzj+IKHpsibwvRrZKqcBL0/ap5gFlM4TZUTuPJBetpRYD7ct8qxQ2WfIeio981t
2iklxfVXieRitcnN8KIGhvl+xeHtCJ3LwTI2lL2RcUrY1uBlz+XnvFfNECVjAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUNg7bUMAOP+ajdijzo7jTB+eKqpMwHwYDVR0j
BBgwFoAUmR1Yiob4eyJMnNrq+clsZVXoA44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTFDOTcyMjM5MUI5MzRFNThCNzg1RTdDQjQzQ0U0QjNG
MzU1NjY4NkQzOTZGQkE2MUZFMDZFQzRDQ0QxRTRDLzAvOTkxRDU4OEE4NkY4N0Iy
MjRDOUNEQUVBRjlDOTZDNjU1NUU4MDM4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFENTg4QTg2Rjg3QjIyNEM5
Q0RBRUFGOUM5NkM2NTU1RTgwMzhFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExQzk3MjIzOTFCOTM0RTU4Qjc4NUU3Q0I0M0NFNEIzRjM1NTY2ODZE
Mzk2RkJBNjFGRTA2RUM0Q0NEMUU0Qy8wLzMxMzczOTJlMzAyZTMyMzIyZTM2MzQy
ZjMyMzYyZDMyMzYyMDNkM2UyMDM2MzUzMTMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQazABZAMA0G
CSqGSIb3DQEBCwUAA4IBAQBf/dfU8wxEfLAXktbpFPri9ODd8NlglFfd2tHcQJwP
wr1tAcwSv0ZcyqsnycJ+Dl9ZIpGuDMHiAuJsihdUHA4j7/L48eSGK+/rxg+Na81j
xzlGlFT02HKi2NvpwGvvye9yeMVXZ/DPMaucKLQnJQTE9i1Jd3vXwv2E2Iwhv/2y
BO3SqVxfEhMKaHslnvfIjjC+tPoC1ej1i9fU860xT9yBI2xzxl31PEPCQ7xqX8Sm
EklKO1KpTKxTKBH3SXHyTrx1IWWY0Zfw6+Fdlf0lmpBloLmd0huvZkPwmzJrCo5d
aTAHS3xb5/WbjTcXt999XDpKGppcZN0/tEqM5lJ2Dd/r
-----END CERTIFICATE-----