Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135312e302f32342d3234203d3e20323733303435.roa
File:                     3137392e36302e3135312e302f32342d3234203d3e20323733303435.roa (raw, json)
Hash identifier:          /AkchNFxdkGr9dGgyAJubjzJbgrkCZKEMeq/0o7+ptw=
Subject key identifier:   5A:14:C1:B0:33:D2:FA:4A:17:CE:27:A6:F6:2D:FD:AA:DB:C9:70:ED
Certificate issuer:       /CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
Certificate serial:       2152173F83925CFDEBF504574BA6BC98C0E3E6EE
Authority key identifier: 09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135312e302f32342d3234203d3e20323733303435.roa
Signing time:             Tue 05 Mar 2024 18:01:37 +0000
ROA not before:           Tue 05 Mar 2024 17:56:37 +0000
ROA not after:            Tue 04 Mar 2025 18:01:37 +0000
asID:                     273045
IP address blocks:        179.60.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:52:17:3f:83:92:5c:fd:eb:f5:04:57:4b:a6:bc:98:c0:e3:e6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE
        Validity
            Not Before: Mar  5 17:56:37 2024 GMT
            Not After : Mar  4 18:01:37 2025 GMT
        Subject: CN=5A14C1B033D2FA4A17CE27A6F62DFDAADBC970ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:d9:cc:de:b8:ad:ce:eb:19:5e:37:22:39:
                    f3:13:42:c6:f6:27:f4:98:7e:00:fb:37:b4:a2:b6:
                    74:e2:a4:aa:31:7c:bc:c6:56:e5:9a:05:8c:12:4c:
                    93:cb:af:94:28:2f:d3:6f:44:3d:c7:33:e3:da:13:
                    17:94:12:03:3b:f1:2b:e7:50:24:d3:ce:6f:c8:a9:
                    a5:d8:ec:53:0a:13:35:16:66:27:a2:1e:17:3e:21:
                    03:8a:16:f4:82:e3:0b:f3:f5:15:9a:4c:90:7a:a2:
                    55:ea:9e:60:91:70:bd:4f:58:4f:22:55:64:85:ea:
                    79:d2:48:a4:b0:64:53:e0:db:f9:2a:ea:7d:75:6a:
                    1f:fd:d0:35:01:7c:0f:7e:96:c9:28:63:ff:5e:c1:
                    45:35:da:63:46:f8:f3:36:c4:b9:53:48:13:0d:99:
                    67:43:86:8c:a0:20:88:8b:e0:5c:6f:e3:7d:83:d3:
                    37:6b:59:41:45:23:36:ee:6c:02:c8:c0:e6:57:18:
                    69:de:12:55:78:96:51:a7:5b:82:d4:18:1e:0b:8f:
                    3d:9d:f3:ca:3c:ba:8d:4e:f7:da:ce:a4:04:8e:2b:
                    d2:38:b6:22:95:73:8b:5d:e5:2a:54:65:dd:6e:7a:
                    d3:57:a7:98:21:75:53:4c:64:67:f6:9a:6a:c6:62:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:C1:B0:33:D2:FA:4A:17:CE:27:A6:F6:2D:FD:AA:DB:C9:70:ED
            X509v3 Authority Key Identifier:
                keyid:09:ED:69:65:08:0E:B5:39:E5:EF:0D:AF:CE:44:8E:AB:8D:41:CF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09ED6965080EB539E5EF0DAFCE448EAB8D41CFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9829311B0DAEB18880FFC96C77D8CF07E9531AE4E79B0B23FC0ED16FE545AE0D/0/3137392e36302e3135312e302f32342d3234203d3e20323733303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6b:40:34:59:d0:a9:42:dc:c1:f2:ed:47:2f:80:46:70:47:
         91:c7:52:36:2e:73:ad:5d:6f:eb:74:73:c2:d0:b1:02:18:be:
         11:d1:a8:f9:cb:a0:31:67:4a:60:f5:af:66:59:34:a9:4f:10:
         3c:18:c1:1a:17:0d:75:95:c9:3c:52:8d:7d:cf:0b:9b:1e:a2:
         05:43:a2:70:1b:59:78:66:50:8a:88:a5:2d:f4:21:f5:b7:3c:
         c0:68:15:6b:bc:d9:35:5f:a8:d9:e3:ed:94:79:6a:da:96:ec:
         51:b8:da:53:60:ef:e2:2b:ab:0f:e4:f4:5a:f0:7f:f1:4b:f0:
         69:88:d8:94:b8:31:5a:61:5b:af:f2:c7:67:d6:f7:5c:3c:81:
         50:12:9a:20:aa:3f:e1:3c:f1:bc:44:04:22:26:40:eb:23:a3:
         e9:60:5e:9e:aa:7a:7f:5d:82:54:ed:c3:49:a7:1b:29:63:d5:
         6b:71:21:c4:4a:b9:94:ad:56:48:b5:e5:6e:c7:c9:1d:ef:e9:
         b3:7b:56:11:28:0d:79:c6:34:92:24:15:0b:fa:88:46:31:2b:
         fe:50:0a:0d:a8:8f:22:b8:96:cb:83:b0:bc:94:82:ca:82:04:
         1b:33:f8:cf:5e:93:d2:46:61:36:0f:6e:23:b1:99:b9:0f:63:
         3b:d4:ec:a7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUIVIXP4OSXP3r9QRXS6a8mMDj5u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlFRDY5NjUwODBFQjUzOUU1RUYwREFGQ0U0NDhFQUI4
RDQxQ0ZERTAeFw0yNDAzMDUxNzU2MzdaFw0yNTAzMDQxODAxMzdaMDMxMTAvBgNV
BAMTKDVBMTRDMUIwMzNEMkZBNEExN0NFMjdBNkY2MkRGREFBREJDOTcwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9htnM3ritzusZXjciOfMTQsb2
J/SYfgD7N7SitnTipKoxfLzGVuWaBYwSTJPLr5QoL9NvRD3HM+PaExeUEgM78Svn
UCTTzm/IqaXY7FMKEzUWZieiHhc+IQOKFvSC4wvz9RWaTJB6olXqnmCRcL1PWE8i
VWSF6nnSSKSwZFPg2/kq6n11ah/90DUBfA9+lskoY/9ewUU12mNG+PM2xLlTSBMN
mWdDhoygIIiL4Fxv432D0zdrWUFFIzbubALIwOZXGGneElV4llGnW4LUGB4Ljz2d
88o8uo1O99rOpASOK9I4tiKVc4td5SpUZd1uetNXp5ghdVNMZGf2mmrGYg+RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWhTBsDPS+koXziem9i39qtvJcO0wHwYDVR0j
BBgwFoAUCe1pZQgOtTnl7w2vzkSOq41Bz94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85ODI5MzExQjBEQUVCMTg4ODBGRkM5NkM3N0Q4Q0YwN0U5
NTMxQUU0RTc5QjBCMjNGQzBFRDE2RkU1NDVBRTBELzAvMDlFRDY5NjUwODBFQjUz
OUU1RUYwREFGQ0U0NDhFQUI4RDQxQ0ZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOUVENjk2NTA4MEVCNTM5RTVF
RjBEQUZDRTQ0OEVBQjhENDFDRkRFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTgyOTMxMUIwREFFQjE4ODgwRkZDOTZDNzdEOENGMDdFOTUzMUFFNEU3
OUIwQjIzRkMwRUQxNkZFNTQ1QUUwRC8wLzMxMzczOTJlMzYzMDJlMzEzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzNDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszyX
MA0GCSqGSIb3DQEBCwUAA4IBAQCTa0A0WdCpQtzB8u1HL4BGcEeRx1I2LnOtXW/r
dHPC0LECGL4R0aj5y6AxZ0pg9a9mWTSpTxA8GMEaFw11lck8Uo19zwubHqIFQ6Jw
G1l4ZlCKiKUt9CH1tzzAaBVrvNk1X6jZ4+2UeWraluxRuNpTYO/iK6sP5PRa8H/x
S/BpiNiUuDFaYVuv8sdn1vdcPIFQEpogqj/hPPG8RAQiJkDrI6PpYF6eqnp/XYJU
7cNJpxspY9VrcSHESrmUrVZIteVux8kd7+mze1YRKA15xjSSJBUL+ohGMSv+UAoN
qI8iuJbLg7C8lILKggQbM/jPXpPSRmE2D24jsZm5D2M71Oyn
-----END CERTIFICATE-----