Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa
File:                     3138312e34312e36342e302f31382d3232203d3e203139383633.roa (raw, json)
Hash identifier:          xPSoTxaWAkGncTd8q0EM2RmhO4+MXTTjNmUaWjegoNo=
Subject key identifier:   5C:AC:51:E0:30:76:14:91:F4:AE:A0:7C:64:58:18:B5:D4:93:4D:AA
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       70BA4CB3A2F76C00B3F2BF3891129B2F95345D7F
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa
Signing time:             Tue 05 Mar 2024 18:00:29 +0000
ROA not before:           Tue 05 Mar 2024 17:55:29 +0000
ROA not after:            Tue 04 Mar 2025 18:00:29 +0000
asID:                     19863
IP address blocks:        181.41.64.0/18 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:4c:b3:a2:f7:6c:00:b3:f2:bf:38:91:12:9b:2f:95:34:5d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Mar  5 17:55:29 2024 GMT
            Not After : Mar  4 18:00:29 2025 GMT
        Subject: CN=5CAC51E030761491F4AEA07C645818B5D4934DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:48:93:ad:64:72:2f:f3:cb:1d:b5:99:ca:
                    50:39:ad:ad:1a:09:9d:0b:72:ca:73:90:11:20:86:
                    33:ad:42:36:4a:93:0b:07:29:cd:3f:a8:dc:b2:83:
                    9d:bf:da:96:ef:8b:f9:13:09:d7:dd:19:e1:b0:55:
                    dd:f4:ef:3e:87:f8:e2:22:69:e6:ea:48:19:2d:f9:
                    42:f7:a8:e5:58:a1:56:5f:2d:d6:b2:02:b4:08:6a:
                    ec:e1:15:a8:bb:5f:98:c6:a0:1a:74:51:6d:25:50:
                    08:2a:3f:07:7b:0a:af:0e:fa:cb:f9:16:6f:6a:59:
                    27:2a:24:49:bd:2d:79:df:20:64:4e:ba:80:4a:66:
                    3e:21:fc:ed:9c:d3:e7:aa:49:6c:0d:df:59:d1:78:
                    34:3f:44:96:8d:7d:f2:32:4a:b4:07:e6:ab:49:39:
                    c9:a6:78:76:e5:59:54:ea:06:70:3c:59:17:e8:d0:
                    cf:01:b6:e4:2e:62:6c:c5:4c:77:1f:e6:4e:a5:93:
                    a7:22:a8:a2:80:f4:c4:95:34:d3:15:89:4c:8c:10:
                    f2:b6:a9:a6:fb:45:ca:8a:87:cd:20:2e:43:49:3a:
                    61:ec:e3:a3:be:fe:c9:e8:94:0b:54:15:73:ad:b7:
                    6b:d3:b7:69:5c:67:4c:76:2f:95:c2:c4:eb:eb:a6:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:51:E0:30:76:14:91:F4:AE:A0:7C:64:58:18:B5:D4:93:4D:AA
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:54:1a:8a:14:8a:6e:36:bf:e5:8d:2b:c0:c4:b5:f6:47:
         6a:75:75:fe:f5:95:1e:4b:30:7f:0c:68:25:3d:53:cf:db:db:
         8a:e8:49:86:d1:0e:f6:29:37:ba:4f:d1:14:7d:f5:c8:a5:35:
         78:81:87:a3:a1:a7:d8:01:24:62:f6:7b:77:bb:f3:1c:67:bb:
         d1:67:3e:7f:76:ef:d1:2a:94:26:8a:dc:5d:22:f9:1a:e8:f0:
         ae:04:c0:c8:0b:c6:be:c7:85:b1:55:72:9c:3f:dd:6e:51:08:
         99:78:e0:fa:1d:e1:66:66:01:66:ee:bb:b1:23:12:ee:52:f5:
         d9:b0:df:f4:de:98:cc:a2:3c:f5:53:29:04:9b:93:1b:93:0d:
         a3:ce:46:4e:3a:78:b0:35:1f:b4:ad:ad:92:b1:87:59:bd:5b:
         80:46:72:2f:cd:6e:6f:57:4b:da:19:72:2e:22:cc:46:3e:75:
         0d:98:3c:55:5c:c6:69:c7:83:55:8e:5f:b9:76:bf:d0:0b:14:
         50:95:19:09:6c:7a:25:d4:d0:98:83:fc:1a:60:13:6b:28:7b:
         b2:43:ac:e3:51:30:95:1c:e3:b1:c1:cf:1a:d7:2a:2a:c4:a6:
         3d:8d:cb:d8:b0:81:56:ab:48:7d:4b:ee:4e:fe:b1:12:8a:61:
         59:0c:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----