Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa
File:                     3138312e3137382e302e302f31352d3234203d3e203131353536.roa (raw, json)
Hash identifier:          l+3SI46Zwm7eZS5VSbfg4H7Ouev6EmaL7VHAKm+I7ik=
Subject key identifier:   CD:F4:0C:FE:0A:70:01:D7:97:0A:A6:CC:6E:97:34:08:ED:0C:03:FC
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       7729F7AA2AC70B05E2779659FB6D1BDB5CD64807
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa
Signing time:             Fri 14 Mar 2025 14:20:02 +0000
ROA not before:           Fri 14 Mar 2025 14:15:02 +0000
ROA not after:            Fri 13 Mar 2026 14:20:02 +0000
asID:                     11556
IP address blocks:        181.178.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:f7:aa:2a:c7:0b:05:e2:77:96:59:fb:6d:1b:db:5c:d6:48:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:02 2025 GMT
            Not After : Mar 13 14:20:02 2026 GMT
        Subject: CN=CDF40CFE0A7001D7970AA6CC6E973408ED0C03FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:d5:12:9a:2a:7e:40:30:66:43:a0:c1:ff:
                    e9:fb:84:98:58:76:2e:2a:cd:64:a0:f5:2a:fa:17:
                    44:fe:cf:fc:8b:fe:4b:b2:18:2b:17:3f:0b:e0:8e:
                    3d:f2:4f:c6:9a:83:f2:8b:62:b9:dd:77:c9:85:d9:
                    b0:cb:f6:94:cc:3b:b0:56:10:62:8f:e2:97:37:86:
                    0e:99:73:7e:79:37:c7:49:d1:4f:93:8b:b6:15:02:
                    81:35:39:1e:14:31:09:b0:1b:cb:21:ea:a3:86:02:
                    2d:d9:4c:dd:91:54:ff:55:b4:30:7a:a3:8f:2a:f8:
                    26:bf:41:a7:11:b0:0a:7a:f0:d5:1b:3e:47:ae:f6:
                    73:22:0a:13:12:45:52:f2:56:06:05:dc:7f:ff:aa:
                    95:a3:cf:6d:0c:22:23:b7:3f:b8:06:d9:8a:d9:91:
                    09:e4:d5:9b:64:41:b7:18:f9:01:10:ec:8f:54:65:
                    43:e2:98:a5:f0:78:8a:b6:b4:d9:28:d9:29:56:cb:
                    3a:a1:3f:c2:f8:3e:2b:55:bc:10:7c:c3:46:f4:0c:
                    6c:87:ca:4a:a4:54:7e:5b:9b:92:0e:81:a6:89:07:
                    5c:db:9c:4b:2d:10:1b:74:f3:90:27:ea:81:5d:6f:
                    40:3f:c7:a4:5c:45:e4:3e:a9:5c:71:1c:79:28:c2:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:0C:FE:0A:70:01:D7:97:0A:A6:CC:6E:97:34:08:ED:0C:03:FC
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:39:54:07:61:9f:c4:ec:b3:c0:48:67:a9:ca:5b:e0:18:
         68:78:c6:fc:e2:bb:49:f1:da:88:89:e1:92:8b:a4:e5:18:c2:
         97:d3:66:2f:c4:64:31:44:73:9c:59:e5:71:47:23:4c:59:dd:
         db:57:d3:31:67:e8:e1:b8:77:93:00:65:66:18:cf:a7:c5:b7:
         54:99:8f:d5:4d:2b:37:a6:ef:87:7f:b7:4d:3e:e4:55:8f:59:
         4a:f1:4d:b6:7b:11:9b:88:c5:c8:31:31:78:79:be:9e:fe:e2:
         d3:62:97:84:c5:05:17:fe:78:f8:ac:5a:59:51:69:2b:11:48:
         14:7f:a2:b8:56:59:9c:14:0e:09:9d:1b:b9:d1:97:51:86:54:
         b5:af:20:22:d7:b2:40:e7:5e:e3:a1:7f:6b:d0:76:e8:98:dd:
         36:0d:15:13:f3:ba:84:5f:a3:c9:49:4e:8f:98:40:2e:01:df:
         0d:29:42:84:24:58:64:83:8f:5b:90:31:ed:4c:62:27:f8:b4:
         a0:37:fa:8a:82:a5:52:96:fa:97:a8:96:bd:6f:0a:80:c9:a3:
         ff:9a:83:be:92:3a:6c:7e:b4:21:84:3d:60:7c:1b:be:a2:64:
         af:5b:50:dd:fe:b5:56:1f:c5:0c:86:75:fc:11:67:b1:a5:53:
         65:be:f9:af
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUdyn3qirHCwXid5ZZ+20b21zWSAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNTAzMTQxNDE1MDJaFw0yNjAzMTMxNDIwMDJaMDMxMTAvBgNV
BAMTKENERjQwQ0ZFMEE3MDAxRDc5NzBBQTZDQzZFOTczNDA4RUQwQzAzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6tUSmip+QDBmQ6DB/+n7hJhY
di4qzWSg9Sr6F0T+z/yL/kuyGCsXPwvgjj3yT8aag/KLYrndd8mF2bDL9pTMO7BW
EGKP4pc3hg6Zc355N8dJ0U+Ti7YVAoE1OR4UMQmwG8sh6qOGAi3ZTN2RVP9VtDB6
o48q+Ca/QacRsAp68NUbPkeu9nMiChMSRVLyVgYF3H//qpWjz20MIiO3P7gG2YrZ
kQnk1ZtkQbcY+QEQ7I9UZUPimKXweIq2tNko2SlWyzqhP8L4PitVvBB8w0b0DGyH
ykqkVH5bm5IOgaaJB1zbnEstEBt085An6oFdb0A/x6RcReQ+qVxxHHkowoknAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUzfQM/gpwAdeXCqbMbpc0CO0MA/wwHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMxMzgzMTJlMzEzNzM4MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzEzNTM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG1sjANBgkq
hkiG9w0BAQsFAAOCAQEAIZ05VAdhn8Tss8BIZ6nKW+AYaHjG/OK7SfHaiInhkouk
5RjCl9NmL8RkMURznFnlcUcjTFnd21fTMWfo4bh3kwBlZhjPp8W3VJmP1U0rN6bv
h3+3TT7kVY9ZSvFNtnsRm4jFyDExeHm+nv7i02KXhMUFF/54+KxaWVFpKxFIFH+i
uFZZnBQOCZ0budGXUYZUta8gIteyQOde46F/a9B26JjdNg0VE/O6hF+jyUlOj5hA
LgHfDSlChCRYZIOPW5Ax7UxiJ/i0oDf6ioKlUpb6l6iWvW8KgMmj/5qDvpI6bH60
IYQ9YHwbvqJkr1tQ3f61Vh/FDIZ1/BFnsaVTZb75rw==
-----END CERTIFICATE-----