Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138312e3139322e3132382e302f31372d3137203d3e2033383136.roa
File:                     3138312e3139322e3132382e302f31372d3137203d3e2033383136.roa (raw, json)
Hash identifier:          2qlBwCjnP3tZdpVQHtxot5ZcBt+TDT7ubOnsCfhc4+8=
Subject key identifier:   91:9E:41:50:E9:66:01:D2:C5:83:82:66:1E:EF:F6:D2:AD:00:7E:D3
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       7E8052F8C2A242A6BD581779597849A1AAE2E66C
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138312e3139322e3132382e302f31372d3137203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:46:46 +0000
ROA not before:           Tue 04 Feb 2025 18:41:46 +0000
ROA not after:            Tue 03 Feb 2026 18:46:46 +0000
asID:                     3816
IP address blocks:        181.192.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:80:52:f8:c2:a2:42:a6:bd:58:17:79:59:78:49:a1:aa:e2:e6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Feb  4 18:41:46 2025 GMT
            Not After : Feb  3 18:46:46 2026 GMT
        Subject: CN=919E4150E96601D2C58382661EEFF6D2AD007ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:2e:25:72:5a:cd:ff:4f:4e:ab:dc:ac:70:
                    4f:1c:f4:08:98:53:df:6f:6a:de:46:b7:d3:4a:35:
                    9b:22:62:aa:f3:15:d4:1e:6c:b8:35:c5:d6:d0:9b:
                    d2:fb:f8:08:eb:0a:78:26:d8:b7:6b:11:cc:8e:63:
                    9f:7e:ec:50:c1:a7:3e:a0:3d:2e:01:80:3c:9c:8a:
                    21:d5:b9:54:3f:75:a2:2f:85:c4:49:44:11:ad:de:
                    7c:97:b5:a1:08:ec:1d:85:bc:1b:56:fb:0f:1c:74:
                    50:92:46:8f:7e:dd:ea:84:40:56:f2:a3:e7:e1:fd:
                    4a:c2:93:00:8e:9d:d7:0d:8e:4b:56:42:b2:05:17:
                    1a:da:82:5e:af:c1:b4:fb:21:9c:02:8f:50:27:6b:
                    24:77:ee:15:5e:19:34:4b:16:5d:27:4e:33:3f:e0:
                    3d:c0:ff:f6:34:f3:10:b2:96:b0:03:20:cd:6e:c9:
                    f0:85:b0:09:ee:74:43:68:43:d8:e6:54:b8:d2:c4:
                    ef:29:a9:20:fb:e8:26:1a:e7:4d:e1:10:94:4d:c9:
                    2e:47:3c:bd:29:07:ab:62:75:ef:c7:84:17:8b:60:
                    67:4f:8a:51:ec:5c:cb:e4:7a:7a:f6:f4:e4:d2:02:
                    fa:b4:c8:54:7d:a3:d6:39:d3:21:52:db:8b:31:9b:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9E:41:50:E9:66:01:D2:C5:83:82:66:1E:EF:F6:D2:AD:00:7E:D3
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138312e3139322e3132382e302f31372d3137203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:43:2f:27:bf:d2:39:9b:86:26:e4:9b:ef:fc:b0:f4:fb:64:
         07:5a:01:f9:8b:32:3f:f4:57:75:57:10:45:4d:fb:7e:3f:27:
         bf:40:0d:2f:56:a0:dc:23:84:7c:cb:3a:2a:5b:01:2f:db:6b:
         a3:a7:87:6b:c1:32:b2:e1:88:bd:65:e4:a2:ec:a9:86:df:a9:
         1b:1c:0f:e8:88:26:72:1c:ce:e1:47:ae:9d:18:ff:b2:bf:df:
         7c:cd:91:96:ad:ff:2b:bd:c4:d2:04:65:21:d7:71:ec:3c:ab:
         06:0d:d8:79:ba:a0:25:27:3c:b1:fc:13:e9:f7:37:74:0e:bc:
         c6:f2:fd:18:16:0d:f8:5c:2c:c2:23:ca:82:e5:30:4b:ab:28:
         49:52:38:1b:96:bd:ca:36:0b:15:e0:05:2d:d6:00:1a:3e:04:
         5e:1e:87:23:51:96:6f:b3:e4:b6:e8:82:7f:78:c0:64:76:63:
         b1:66:1f:15:93:24:d5:8d:c6:e5:47:01:e8:a9:fb:3a:fb:28:
         f7:dd:fc:89:42:f1:7d:51:bb:75:8d:34:dd:a5:e6:a5:c5:35:
         8f:6a:d0:18:0a:3d:de:e6:89:20:9e:43:0a:72:1a:16:5a:ed:
         7c:bb:d2:0b:c9:55:d9:a0:89:f3:55:11:f2:87:87:30:c1:ea:
         76:02:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----