Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa
File:                     3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa (raw, json)
Hash identifier:          oZzMVoCdVflIWT1P6ioq831QNqq86/xq1g8MvNOiysM=
Subject key identifier:   29:8D:61:1E:73:C3:F0:C7:FF:BB:39:FB:3F:06:60:69:D2:1C:2B:38
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       2AA1A95B144D75E7AD7F77BF58AAF2B0FF9040C0
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa
Signing time:             Tue 05 Mar 2024 18:01:36 +0000
ROA not before:           Tue 05 Mar 2024 17:56:36 +0000
ROA not after:            Tue 04 Mar 2025 18:01:36 +0000
asID:                     209588
IP address blocks:        179.60.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:a9:5b:14:4d:75:e7:ad:7f:77:bf:58:aa:f2:b0:ff:90:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Mar  5 17:56:36 2024 GMT
            Not After : Mar  4 18:01:36 2025 GMT
        Subject: CN=298D611E73C3F0C7FFBB39FB3F066069D21C2B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:66:28:07:5c:56:2f:68:ca:87:88:4c:89:
                    5f:00:30:2c:b5:35:14:9d:9e:b2:92:f6:03:a3:b6:
                    ea:7e:1a:a6:ea:4e:5e:a9:c1:c1:6d:54:53:6f:a5:
                    0a:99:ca:51:7d:2a:5b:84:2f:ed:9f:94:e0:ff:96:
                    c4:e5:4e:80:c8:3c:5f:db:98:11:f1:f6:70:ad:d5:
                    0d:fc:d8:64:42:31:c5:79:c2:0b:47:3b:f7:75:ff:
                    de:02:f3:14:1e:0d:79:44:2a:e3:e7:a0:f5:17:20:
                    e0:ba:24:b5:e4:11:ae:2e:82:d5:3c:d4:3f:0c:f2:
                    d3:ad:95:60:6e:54:85:1a:5e:5e:2e:81:7f:f4:ba:
                    ea:16:da:ea:6b:bf:14:9d:00:de:f1:32:d7:97:31:
                    75:54:29:3d:e6:3a:9e:55:03:40:7b:b2:87:cb:a9:
                    71:e3:03:2a:ae:3c:8c:3a:42:12:ce:c9:91:b0:85:
                    7d:f7:19:cf:c9:82:1f:ae:12:2c:53:31:d3:8d:ed:
                    1e:2b:d0:ea:d9:02:e8:2d:5c:e6:15:7c:6c:3a:9c:
                    db:54:50:7c:77:51:8c:5b:e4:27:7f:e6:fa:5a:62:
                    80:83:a3:4f:00:dd:10:6d:dc:24:c8:aa:bb:63:23:
                    31:4e:ab:f8:bf:e7:08:cf:44:90:e0:99:5b:31:8f:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:61:1E:73:C3:F0:C7:FF:BB:39:FB:3F:06:60:69:D2:1C:2B:38
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134372e302f32342d3234203d3e20323039353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:f9:0c:48:9a:2c:93:1e:dd:b7:5d:c1:27:69:62:bd:31:
         7e:a6:15:eb:1d:8c:ca:44:b9:3d:98:d2:48:35:58:f6:f5:02:
         7d:98:3e:08:fc:ce:3e:98:5e:6e:e1:90:1f:e1:e9:08:82:d8:
         94:38:ef:77:8e:7c:ac:6a:2f:12:79:d6:fb:b9:84:e1:d9:5d:
         5a:a9:0e:8d:86:df:42:a0:38:66:13:9d:c7:fa:ff:b4:5c:6b:
         00:3b:d4:84:5e:a0:82:5d:ff:18:e5:6a:01:be:3f:f5:1b:d1:
         d9:9d:05:c8:da:58:68:ff:9b:02:3b:63:92:00:ca:b6:51:df:
         ce:ea:4a:01:da:fd:19:8c:90:34:17:89:cf:6d:1f:2b:02:a4:
         f2:3c:bd:e8:33:37:63:6b:40:93:a8:94:6d:23:04:a3:4b:6e:
         02:d5:df:a2:ee:fe:b4:5b:7b:17:43:2b:5f:bc:2b:a9:a7:6b:
         48:b7:cf:85:32:1e:2f:63:25:b2:5f:9a:3c:0e:5d:24:9a:fe:
         24:ba:bc:16:1c:9d:35:f2:ae:bc:dd:4c:ff:2d:d7:50:d5:9e:
         90:56:65:62:b7:01:b7:0c:52:07:bc:c0:bd:9d:8f:4a:d2:e7:
         30:50:a9:55:d4:67:6b:f9:94:f8:6a:01:24:39:8a:7d:81:37:
         b8:93:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----