Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa
File:                     3231332e3233362e362e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier:          Evf518pF08cJSxiLVpbrN5q45zmrijAbMvbqkTzcQGk=
Subject key identifier:   09:51:DA:6A:5C:4C:EA:24:22:92:72:76:C8:75:07:C9:A1:76:11:EB
Certificate issuer:       /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial:       6039BC16F91213D16E91C865F66A64EE4EB8686E
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa
Signing time:             Tue 28 Jan 2025 14:40:00 +0000
ROA not before:           Tue 28 Jan 2025 14:35:00 +0000
ROA not after:            Tue 27 Jan 2026 14:40:00 +0000
asID:                     274010
IP address blocks:        213.236.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:39:bc:16:f9:12:13:d1:6e:91:c8:65:f6:6a:64:ee:4e:b8:68:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
        Validity
            Not Before: Jan 28 14:35:00 2025 GMT
            Not After : Jan 27 14:40:00 2026 GMT
        Subject: CN=0951DA6A5C4CEA2422927276C87507C9A17611EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:1c:cb:7c:33:53:5f:9b:ee:6a:33:95:4a:
                    2a:70:c5:f2:01:7a:ee:fe:ba:c1:c8:70:21:b6:ec:
                    34:d0:4a:0b:d5:91:87:77:c2:17:b1:cb:04:51:56:
                    15:5b:6c:75:8b:db:d0:c2:8f:41:57:38:39:7c:45:
                    1b:64:e9:5d:cd:52:3b:76:d3:70:27:4a:1f:13:c5:
                    4b:37:fc:d9:f0:05:9b:c5:b9:30:58:c7:52:32:0a:
                    c4:a2:c6:26:25:d6:99:64:8f:0b:c7:5d:98:1b:8a:
                    2f:f2:73:b5:72:84:72:24:39:df:34:24:4e:62:2f:
                    43:91:70:d2:07:e1:d3:15:2f:3b:cb:39:6a:dd:61:
                    81:fa:56:e9:15:c0:09:3d:17:18:b1:36:a0:e0:eb:
                    2b:30:3d:de:e6:fd:b8:f0:b2:cc:32:8f:f0:41:32:
                    23:c5:82:22:58:8a:27:b1:70:d1:39:21:e2:3c:82:
                    05:b2:97:d5:64:e8:94:36:62:5b:5c:2a:51:65:da:
                    87:6e:2a:38:10:2e:92:de:f6:03:94:21:52:45:3e:
                    c7:72:14:da:76:6d:32:cf:07:b3:dc:d0:a2:7a:2a:
                    b0:ca:93:33:a9:99:40:19:22:72:2d:20:f6:ed:73:
                    5d:8a:ee:45:a7:3e:77:f1:e6:86:32:63:3d:e4:0f:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:DA:6A:5C:4C:EA:24:22:92:72:76:C8:75:07:C9:A1:76:11:EB
            X509v3 Authority Key Identifier:
                keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.236.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:23:d1:62:7c:8e:36:37:12:56:91:f8:fc:c3:82:63:5e:1c:
         85:67:b1:e4:f4:7d:ed:24:10:b5:e0:8a:69:42:09:94:5d:91:
         b3:e6:75:2f:4e:5b:57:7f:c7:8f:d1:51:d4:d4:dd:0d:07:69:
         8f:16:2a:75:92:b4:fa:92:82:10:11:d7:6b:a1:74:c3:1a:8b:
         1d:6e:dd:52:61:97:be:cf:88:6e:a0:6b:fa:14:a0:90:86:2a:
         8c:00:a8:40:61:44:c6:8e:e8:67:f0:2d:3f:16:53:75:6b:d4:
         df:0e:dd:b7:2a:2c:40:94:18:8c:f3:21:0b:64:06:4c:95:e7:
         3d:d9:f4:d9:49:e6:a5:05:08:1c:2d:d0:54:6d:8a:48:3d:b3:
         36:03:fe:18:f2:f5:51:d1:1b:80:f7:99:71:47:fe:1b:b0:f1:
         77:71:a5:b6:6c:f9:c1:b4:19:eb:de:03:d7:d9:4d:32:57:b3:
         69:2b:f9:09:fb:99:65:3e:27:9b:51:10:fb:ff:f1:a4:fa:10:
         81:22:5b:df:09:c3:ee:f5:d5:56:a5:db:23:5d:b0:06:5c:c0:
         a6:53:12:48:8d:ea:92:33:b1:fb:b9:1a:21:41:10:44:bb:25:
         b0:a8:3c:e6:60:0d:f0:09:30:da:c3:1c:25:ac:b4:35:f2:7f:
         e4:2f:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----