Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa
File:                     3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          c8Rhwyd1Pz0N4ARLuw8rJlwcPdmRcK4n7C3VVoRN9AA=
Subject key identifier:   45:E3:B8:21:77:39:2D:18:F1:4A:70:43:87:7D:4D:D3:9C:0F:6F:54
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       62531DC43BFE7D261D6AA5FE461FB6880A37F5DC
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa
Signing time:             Tue 05 Mar 2024 18:01:36 +0000
ROA not before:           Tue 05 Mar 2024 17:56:36 +0000
ROA not after:            Tue 04 Mar 2025 18:01:36 +0000
asID:                     395839
IP address blocks:        179.60.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:53:1d:c4:3b:fe:7d:26:1d:6a:a5:fe:46:1f:b6:88:0a:37:f5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Mar  5 17:56:36 2024 GMT
            Not After : Mar  4 18:01:36 2025 GMT
        Subject: CN=45E3B82177392D18F14A7043877D4DD39C0F6F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:47:80:a7:1c:5e:71:63:49:d5:1c:5b:cf:
                    f0:6f:bb:a3:b7:69:8d:f7:bb:12:85:78:37:da:a8:
                    f7:0e:01:da:89:06:4c:da:cd:e6:69:23:12:15:ea:
                    93:1a:4b:1a:5b:2e:15:9c:f0:7f:0f:87:cf:b9:51:
                    53:82:31:80:ea:8b:61:2a:4e:8a:77:e3:40:e6:1e:
                    cd:d9:bf:c3:8b:47:d6:d1:c6:20:29:15:f8:7d:b7:
                    5a:b1:d9:9c:f6:3a:6c:22:c8:7a:9c:27:df:4b:e0:
                    5e:49:ff:99:d0:17:23:e6:6c:28:58:3d:c0:be:b5:
                    75:46:32:1e:5c:a4:b2:1d:67:8c:b7:27:e7:15:5b:
                    2b:8c:ae:ac:3c:be:46:09:9a:8b:2d:24:52:b0:46:
                    4e:ce:1c:62:a1:0d:80:1b:b1:84:75:3a:1f:17:fd:
                    5e:41:69:d6:3b:9e:f9:4e:5f:5d:8a:b5:d8:29:c3:
                    aa:a7:4f:4d:2b:3b:76:9f:3e:99:e7:e6:77:08:a0:
                    51:ce:9b:dc:02:05:c8:b1:75:e1:7c:76:5e:c0:87:
                    34:f9:19:10:d9:8d:81:ac:81:44:09:81:9f:8c:79:
                    84:5c:46:20:dd:3d:38:a3:32:cb:a4:95:74:93:91:
                    12:dc:a6:1a:45:b2:3a:37:0c:1c:49:2e:14:2f:9e:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:B8:21:77:39:2D:18:F1:4A:70:43:87:7D:4D:D3:9C:0F:6F:54
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3134392e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:53:3b:ca:07:95:91:c4:bc:fa:c0:1d:f0:3f:6d:bb:ed:15:
         96:ff:ef:72:0b:64:72:74:09:2e:95:4f:83:de:24:b3:cf:03:
         7b:93:93:c7:07:07:76:b5:16:7a:66:cc:05:5a:7d:53:b2:47:
         1e:89:37:f4:aa:c4:f6:2f:8e:26:48:92:f8:e3:ff:9b:d2:cb:
         11:ce:82:ac:09:d0:d4:82:95:7f:c2:c0:a5:3c:19:c0:71:8f:
         a2:0f:05:01:52:f7:90:a0:1b:38:32:72:ba:68:07:9f:a3:a8:
         7f:1b:a5:1c:f2:18:85:43:4f:27:30:e9:42:3e:a6:56:2c:b7:
         04:22:b1:7d:f2:99:17:ff:db:c4:c0:89:18:94:19:ef:a4:c0:
         f5:80:f9:07:44:1d:83:00:3d:75:8f:ff:94:3a:4b:fd:de:4c:
         ba:63:0c:a4:4c:85:57:05:3f:d2:dc:92:39:5c:e1:48:dc:e8:
         e1:32:73:52:55:f6:82:03:a0:0e:91:19:1a:4c:1e:be:cd:20:
         50:98:98:2b:7d:4c:22:6c:55:b7:ef:d1:2a:80:18:63:2e:31:
         39:d8:dc:c8:6f:14:0a:03:2d:8d:2b:d9:4e:4f:5a:4b:41:a9:
         e1:26:a7:31:ec:06:f6:21:ec:d8:7f:98:73:28:15:da:2b:6e:
         a7:31:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----