Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa
File:                     3138312e3230322e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          rw7N2+S9lK4/i6roeD9VdrxVVwVy7WkK/ndGNr3cjNc=
Subject key identifier:   9B:17:DA:20:C2:FC:3B:CF:BB:33:64:F1:80:95:7B:8E:4F:BE:49:8A
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       4F3E337FC185D62CAEA2AD12A1F6A89A97ABB381
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     16629
IP address blocks:        181.202.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3e:33:7f:c1:85:d6:2c:ae:a2:ad:12:a1:f6:a8:9a:97:ab:b3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=9B17DA20C2FC3BCFBB3364F180957B8E4FBE498A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:14:89:da:64:ce:29:0d:43:d2:07:03:fa:
                    6b:6b:38:31:8d:c2:b3:00:5a:5f:d9:eb:8e:37:a9:
                    49:de:f3:d8:f1:0a:89:01:68:35:3c:3b:f9:81:c5:
                    85:cb:d1:20:63:f9:c5:3c:50:7f:f2:e2:30:47:78:
                    1b:05:f0:91:53:ce:13:65:b4:ad:e4:c7:8c:e6:6a:
                    85:75:ef:81:c0:f0:14:67:9a:61:3d:6d:d2:06:5a:
                    c7:10:c0:87:de:df:f0:a5:31:89:24:e0:1b:81:07:
                    34:26:5a:b6:41:30:23:61:73:42:b8:1f:96:56:31:
                    3e:bf:3d:30:f5:8f:da:ba:aa:cb:77:22:64:36:d0:
                    23:8d:41:c2:e6:3c:25:46:01:69:65:99:da:b5:ca:
                    9d:80:61:6c:7b:6a:2c:a0:63:14:ed:cf:cf:63:d1:
                    67:3e:fa:2d:0b:57:04:86:8e:48:2e:b5:9c:b7:76:
                    5b:89:cf:a7:79:60:d4:6c:50:26:a3:0d:d2:96:51:
                    17:80:22:e9:49:62:9c:12:52:85:5e:6d:d9:7e:05:
                    27:e2:17:41:14:57:09:42:65:fa:7f:2a:d9:71:8e:
                    9d:50:3a:97:4e:d0:df:9e:4c:8a:1a:9c:71:8b:43:
                    36:b6:2f:81:0d:24:61:2d:27:71:c9:56:96:b4:5a:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:DA:20:C2:FC:3B:CF:BB:33:64:F1:80:95:7B:8E:4F:BE:49:8A
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:4c:48:63:0a:82:78:2b:55:31:3b:75:c3:0a:38:3d:3a:41:
         24:1a:90:aa:e3:bd:28:c1:4c:1d:57:c7:01:c8:21:7e:11:15:
         bd:36:8e:e5:2e:4a:05:bc:78:55:fb:55:97:d4:c6:72:2d:b9:
         72:84:aa:6a:a4:e2:03:bf:82:5d:65:9d:40:58:c4:8e:b6:0d:
         33:ac:a3:95:3e:68:40:08:59:34:7d:6f:9f:44:49:49:63:e3:
         a6:1e:44:29:3b:e1:65:14:a8:37:06:0b:a4:a3:45:8d:9d:36:
         10:24:5f:89:b2:ee:e0:ef:02:e5:ee:19:2e:9b:f2:02:46:9a:
         fb:60:10:ab:c5:80:52:d8:47:22:d0:5f:db:9b:66:59:d0:0f:
         c7:b8:5f:6e:01:34:da:9b:a4:e2:93:90:5c:c0:69:43:d4:62:
         cb:90:5c:d5:6b:24:32:f6:12:80:f2:0b:3e:b2:6c:97:27:b5:
         d5:c8:8a:66:7a:55:e8:c5:1a:b3:c7:09:63:29:4a:69:3b:af:
         f2:62:5b:57:24:c0:de:77:e9:34:1a:19:b6:84:c6:a1:59:a8:
         43:f2:3e:ea:ac:3a:00:dd:b2:cf:89:0e:2d:2c:87:95:52:6d:
         af:99:29:8c:9e:de:b4:33:e9:f1:15:48:84:1c:6d:ed:de:8b:
         81:3f:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----