Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3234382e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          qKq9bqcaEvJi0ICeC9T1qckFlk1xfLIqtpAtxgsPPpg=
Subject key identifier:   F4:7C:17:3C:3D:9B:0A:9F:50:09:1F:7F:7B:A6:2D:5B:7D:96:70:5F
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       0D2CED9321FCC6B5105DD79F801B5E5E71C8EF1E
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:25 +0000
ROA not before:           Tue 05 Mar 2024 18:07:25 +0000
ROA not after:            Tue 04 Mar 2025 18:12:25 +0000
asID:                     27895
IP address blocks:        181.94.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:ed:93:21:fc:c6:b5:10:5d:d7:9f:80:1b:5e:5e:71:c8:ef:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:25 2024 GMT
            Not After : Mar  4 18:12:25 2025 GMT
        Subject: CN=F47C173C3D9B0A9F50091F7F7BA62D5B7D96705F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:1d:1e:ee:53:e7:9d:01:d3:65:8f:6d:2e:
                    f9:dd:9c:7a:4a:ce:a8:21:48:dc:79:a8:d9:62:6c:
                    86:ec:e3:a9:64:c8:80:a1:d2:66:d7:06:0f:d0:9e:
                    3f:d0:c5:49:c4:85:e7:d6:ad:2d:e2:d4:bc:c0:1f:
                    9d:41:50:f2:6c:2e:e4:a9:85:90:f8:e1:58:6f:39:
                    0f:38:9f:7a:69:d2:c4:9d:a9:e6:f3:37:df:06:9d:
                    80:3d:31:d4:94:3c:5c:7b:14:d2:32:9b:95:d9:29:
                    4e:18:b9:5a:40:3d:cf:f7:69:ef:39:7f:c5:72:10:
                    ad:5f:6b:5d:b4:52:12:c0:46:a9:75:8f:3b:0c:f6:
                    79:b8:b0:3e:e3:77:cc:dc:b5:45:a2:65:f2:4a:c2:
                    4c:3c:10:b2:94:1e:9b:42:d3:13:2d:b1:53:42:3c:
                    0e:79:7d:0b:a8:0f:51:ad:d9:e5:5c:5e:f1:39:0b:
                    17:76:58:46:e7:86:80:71:e7:90:67:e3:fb:8c:16:
                    08:14:9c:f2:e5:9f:08:8f:e9:ee:dc:58:58:8d:2c:
                    f5:79:42:e5:55:44:5c:ea:31:7e:e0:c7:d5:44:09:
                    37:1b:11:58:30:16:e2:ad:ef:e8:98:50:7c:a2:06:
                    7b:16:13:f2:ba:ad:95:fa:38:87:79:fd:da:a8:02:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:17:3C:3D:9B:0A:9F:50:09:1F:7F:7B:A6:2D:5B:7D:96:70:5F
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:15:3f:07:d7:3f:a0:56:62:b4:a4:4f:99:15:b4:e3:8c:
         e3:89:13:78:0e:3f:81:3f:83:a4:9a:b3:97:9e:7c:c0:c5:a8:
         28:44:7c:a8:18:53:52:8b:69:df:b6:38:45:cd:24:75:b4:56:
         7f:68:54:b1:09:b6:0d:65:33:8b:77:31:25:22:c7:61:1b:60:
         4a:69:2c:fe:f8:94:8f:da:79:44:e4:e9:bc:ef:f4:eb:1f:3a:
         e7:90:e9:e7:7f:ca:64:86:40:bc:dd:14:4b:59:5f:2c:88:c8:
         a0:f4:91:87:b2:0f:3a:05:ff:e4:a4:f7:22:74:c3:2c:a3:56:
         e2:f4:a4:8f:69:ec:41:c6:17:cd:54:cd:c4:ee:6a:79:9a:f3:
         e4:a2:a8:07:44:23:13:c1:10:39:a3:56:68:88:e5:50:6e:3d:
         dd:1e:ee:cc:b4:15:7f:da:df:69:f2:54:56:0b:8a:27:4f:4d:
         35:b1:fa:45:ae:8d:fe:df:fa:29:f7:98:28:25:64:9f:b1:15:
         bf:aa:a6:e3:68:7e:8d:fa:af:e1:b3:bd:82:e3:5f:06:48:7d:
         a4:6a:3c:94:95:01:a9:7d:66:02:16:e1:14:78:3c:fe:ee:00:
         9d:8b:2b:7b:52:33:3f:c2:5a:2f:f5:80:0c:0f:13:2f:59:03:
         e2:eb:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----