Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3137392e34332e36342e302f32302d3234203d3e203532343236.roa
File:                     3137392e34332e36342e302f32302d3234203d3e203532343236.roa (raw, json)
Hash identifier:          oflB0Z61pYMTjgNi0TOV5fgyPH5QOHEI6KwZHzMOWdc=
Subject key identifier:   2E:A5:32:DA:EF:F7:8B:EA:96:82:CB:C0:B6:D6:90:C8:D4:5A:B5:E5
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       419CC6D531198350D1DDE3EA3FCE0CB71BF55635
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3137392e34332e36342e302f32302d3234203d3e203532343236.roa
Signing time:             Thu 25 Jul 2024 19:05:01 +0000
ROA not before:           Thu 25 Jul 2024 19:00:01 +0000
ROA not after:            Thu 24 Jul 2025 19:05:01 +0000
asID:                     52426
IP address blocks:        179.43.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:c6:d5:31:19:83:50:d1:dd:e3:ea:3f:ce:0c:b7:1b:f5:56:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: Jul 25 19:00:01 2024 GMT
            Not After : Jul 24 19:05:01 2025 GMT
        Subject: CN=2EA532DAEFF78BEA9682CBC0B6D690C8D45AB5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:38:fb:19:65:06:8f:e0:e0:8d:32:a6:f6:52:
                    61:e2:99:6e:90:aa:69:41:62:82:d3:35:70:1b:d8:
                    6b:f9:5a:df:5d:f1:b1:a8:d8:b9:21:08:9e:a9:64:
                    0a:2f:ae:3c:4d:04:46:b2:07:75:19:72:35:93:05:
                    31:72:f3:72:36:f0:32:23:48:66:10:91:ff:d9:e3:
                    4b:2b:1a:c0:5b:e9:aa:b4:95:e4:16:ec:43:0c:ad:
                    42:8d:4a:45:2a:72:15:9c:2e:a4:2a:55:1d:b1:94:
                    e3:c6:1c:17:8b:8e:12:9a:1c:4d:64:bd:3f:da:50:
                    fb:17:40:36:b1:0c:d0:52:9e:6f:04:df:b0:b1:9d:
                    e4:cc:f0:16:56:36:1b:9a:cf:09:a1:47:04:12:d2:
                    73:1c:56:aa:21:e0:c8:a4:e1:a8:2c:35:4b:8e:39:
                    25:9d:0a:8d:c1:20:88:e1:e7:be:ad:ad:25:3c:1b:
                    50:32:ae:9b:0d:c4:02:6c:95:4b:37:4b:1d:1c:68:
                    59:71:eb:04:d9:0c:20:6a:49:80:21:17:0c:c3:cd:
                    f0:7a:6c:4b:e4:b7:9f:aa:9b:dc:90:88:e8:d5:6a:
                    a7:16:cf:9d:62:a4:c0:1d:3f:b8:73:5d:d3:fa:0b:
                    79:6e:b7:ae:4c:dc:98:9b:e3:18:d2:bd:9f:6c:da:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:32:DA:EF:F7:8B:EA:96:82:CB:C0:B6:D6:90:C8:D4:5A:B5:E5
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3137392e34332e36342e302f32302d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:bb:cb:b3:31:1a:cd:44:fc:10:77:84:bd:1a:db:47:ec:
         20:f4:be:a3:dc:c2:e7:7b:56:8c:8f:a8:2a:fe:c2:a0:46:4a:
         ce:10:3b:8b:ce:35:0e:40:ba:ff:63:e3:2f:25:cb:99:42:bd:
         69:ce:80:4b:fb:c7:8a:e0:48:07:4c:cc:29:df:72:11:5e:dc:
         81:6c:a3:a2:37:19:d8:39:74:42:17:39:52:e1:81:2b:13:d8:
         7c:53:a9:20:fd:ca:8e:97:b2:47:34:76:ea:b6:22:25:00:db:
         be:3b:15:21:7d:19:b7:b7:23:04:7a:76:77:6b:2f:70:92:26:
         7b:f5:01:63:d8:9a:1b:61:84:14:0f:13:39:5c:ab:36:5f:41:
         8f:cb:22:46:8e:78:ef:bf:0e:cb:ff:5a:b8:d6:27:7b:a4:35:
         36:d3:d1:23:3a:bf:51:4d:b2:b5:f3:ee:9a:bf:d1:49:ca:59:
         29:62:33:69:98:fc:95:8b:6e:94:f6:e0:e3:45:84:d7:3d:6a:
         f3:1f:b7:3b:e2:0d:fb:f0:ab:71:85:d8:44:f7:7a:2e:ac:e5:
         82:d3:20:52:bf:1b:8d:bf:e1:38:a4:f9:22:a3:f0:ad:77:1e:
         c5:81:6a:a6:e4:4e:78:1d:41:33:3e:24:5a:09:42:6f:e9:1e:
         94:8e:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----