Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e203136363239.roa
File:                     3138312e3137322e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier:          jGv3dmz4jSMmRmE0BckftO1rOKVDfPupXj4Af6P+qog=
Subject key identifier:   82:19:E5:CC:CA:4B:8D:F6:49:16:20:B8:9B:AF:B3:28:54:4D:DA:C7
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5474AFC9FB85EF2D2EE1D58EA89FF9E8CE1542EF
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     16629
IP address blocks:        181.172.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:af:c9:fb:85:ef:2d:2e:e1:d5:8e:a8:9f:f9:e8:ce:15:42:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=8219E5CCCA4B8DF6491620B89BAFB328544DDAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:a9:48:00:cd:24:d0:db:a1:81:00:87:26:
                    db:6b:b4:5e:ba:27:5a:6c:e1:72:6c:74:24:26:a2:
                    d7:9a:ee:e4:11:9b:f1:e5:61:9a:bb:9d:e1:53:ae:
                    45:20:c2:b0:45:1c:f2:fd:40:9a:81:07:f0:b4:8b:
                    ba:64:03:50:a1:e1:cd:ae:bb:f0:da:c9:e2:ba:cf:
                    b3:a0:f3:df:c9:7f:b1:c2:d1:24:5c:4b:bd:5a:3a:
                    37:98:85:c1:da:6d:23:6c:04:0f:a4:69:1e:0c:91:
                    a5:c7:0e:40:c0:e0:28:71:45:c3:f2:2f:ef:d3:80:
                    82:7b:2b:51:63:63:6f:16:dd:9a:b9:40:2b:d3:6c:
                    9d:0e:77:e1:6f:96:73:74:bf:31:5b:66:20:16:56:
                    5e:54:05:19:31:e7:6a:79:65:c5:9c:12:65:fd:d0:
                    b1:a3:1c:4b:15:1e:a0:ca:9c:4e:a2:83:e7:35:11:
                    2a:d9:ed:6b:23:da:01:3c:b8:02:0c:ec:e5:39:53:
                    b4:56:70:ce:ca:ee:38:c2:ce:bf:8c:79:4b:67:66:
                    8d:f0:00:16:6a:75:7a:72:66:5a:6f:12:c9:5a:1e:
                    63:cd:57:68:67:2a:e3:e9:e7:30:60:cb:04:5e:53:
                    b7:d5:fb:ec:c2:85:a3:d3:f6:bc:3c:83:2a:16:eb:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:E5:CC:CA:4B:8D:F6:49:16:20:B8:9B:AF:B3:28:54:4D:DA:C7
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         96:58:4b:4d:39:21:95:7b:93:d3:f3:cd:f0:57:b5:98:5b:a8:
         63:63:92:34:22:22:d1:88:f1:66:13:28:15:6f:76:e8:2e:ba:
         12:a7:bd:b2:ce:0a:12:46:f1:ab:12:7e:5b:15:84:25:8c:b9:
         a3:92:23:41:4c:d3:ec:52:a0:1a:4f:99:66:b4:34:33:1b:a3:
         0b:e6:5a:27:a7:a4:90:d0:b9:9c:03:a6:b6:8a:ff:5e:9d:57:
         11:fd:e7:98:aa:3a:52:c6:63:f5:4e:e7:9f:8a:1c:ed:13:fd:
         aa:16:58:2e:49:09:0b:4e:c7:7d:26:bf:b8:57:0d:29:5c:29:
         32:9f:99:c6:e0:ba:5f:c0:f6:86:c2:14:48:f3:a2:d6:0f:a5:
         ab:7b:eb:cc:5f:e4:8f:22:45:93:7b:9d:14:39:6e:a1:36:a8:
         f8:5c:ca:aa:e6:4b:82:3d:ad:da:fb:1d:33:0e:85:b0:7d:96:
         10:74:80:be:6e:3c:98:12:2f:43:fd:aa:ed:f3:97:89:f2:86:
         14:85:b9:d7:d6:8b:ad:72:8d:33:2e:15:3c:cf:b6:63:43:8f:
         b6:3b:b0:a2:80:8e:8e:5a:92:4b:3d:77:14:1c:d7:1b:ad:39:
         75:05:cf:51:e5:4e:38:d7:6f:9e:15:1c:2a:55:67:29:4f:ac:
         70:6a:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----