Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138312e37322e302e302f31342d3232203d3e2036353335.roa
File:                     3138312e37322e302e302f31342d3232203d3e2036353335.roa (raw, json)
Hash identifier:          I31Qa/cTy/qKBOBHcA54V/zgPZbdIPHR8SkMX7CStCc=
Subject key identifier:   A8:6F:97:4A:8B:55:AB:EE:37:1F:A5:64:B2:B6:CC:89:08:D1:46:24
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0B88DDF97B6EF2D74D0097F8FC16C545748245EC
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138312e37322e302e302f31342d3232203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:25 +0000
ROA not before:           Tue 04 Feb 2025 19:58:25 +0000
ROA not after:            Tue 03 Feb 2026 20:03:25 +0000
asID:                     6535
IP address blocks:        181.72.0.0/14 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:dd:f9:7b:6e:f2:d7:4d:00:97:f8:fc:16:c5:45:74:82:45:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:25 2025 GMT
            Not After : Feb  3 20:03:25 2026 GMT
        Subject: CN=A86F974A8B55ABEE371FA564B2B6CC8908D14624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:6b:f8:37:85:cf:e7:4c:63:73:02:6d:97:
                    52:12:03:aa:c0:45:3c:3b:c1:ec:9a:db:06:0c:c4:
                    5b:47:65:a2:eb:fd:2e:f2:5c:71:7a:f0:5b:56:41:
                    12:1d:a0:f2:ca:ea:1c:a3:30:89:30:de:3a:0f:bd:
                    d9:8f:3b:ec:4e:ba:f7:9a:df:bb:6c:9b:f4:9d:10:
                    9f:7b:1f:9d:78:3f:f8:0f:93:ab:56:ac:8b:55:8c:
                    b7:12:6b:fa:90:7f:24:d1:4f:9e:5e:4c:2e:9e:6c:
                    00:0a:e1:5d:63:78:f4:2d:47:cb:0a:9b:92:31:eb:
                    95:b9:d6:7c:fb:85:c6:1b:70:92:aa:18:e7:05:9f:
                    fd:8a:85:50:35:28:81:01:41:ff:1c:b1:51:58:35:
                    5e:fc:71:15:ec:3f:49:dd:c8:d8:58:e4:26:67:bb:
                    a8:4e:6e:e3:25:37:5a:87:64:6f:2e:57:30:cd:a2:
                    d2:1e:61:ef:76:57:3f:2c:38:d9:25:5b:1f:7e:53:
                    af:f2:c3:bd:bb:f9:23:fc:2a:d0:ec:10:f5:6c:be:
                    9e:8c:9f:b4:b2:ed:fc:17:07:ef:8d:43:ec:31:72:
                    9b:21:da:21:ab:28:7a:0b:53:8e:0a:92:4f:62:9a:
                    42:ec:92:e5:1c:cb:b2:4c:b0:c1:5e:71:3c:39:0f:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:97:4A:8B:55:AB:EE:37:1F:A5:64:B2:B6:CC:89:08:D1:46:24
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138312e37322e302e302f31342d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:3f:e8:fe:bb:63:97:95:1a:79:fa:17:88:7b:b9:aa:2a:
         06:4b:af:c9:e6:1d:de:8b:78:c1:28:1e:1c:9c:dc:bb:87:ca:
         7a:e0:3a:9f:83:10:b8:79:9d:4d:24:e7:45:72:71:81:34:af:
         d7:67:8c:3a:ac:ab:15:8e:bf:e0:14:c2:5e:35:06:ce:da:ea:
         c5:7d:b2:ac:60:07:66:80:a2:cd:fc:69:f7:99:fb:c1:c9:dd:
         4b:3e:18:79:3e:32:f0:79:a6:64:98:09:73:c4:37:61:0a:8a:
         21:59:45:aa:21:c7:55:7e:75:fe:83:93:7c:e8:1e:7f:1c:f0:
         c5:0c:a4:30:db:4a:dc:14:3d:a6:05:30:cd:ba:7a:90:22:90:
         26:83:c2:86:9f:e9:9a:9e:16:34:e3:60:b9:6e:c8:75:46:c5:
         50:4f:ff:d6:eb:1e:13:cb:b2:6b:db:7f:61:37:6d:cf:97:bd:
         16:11:af:8d:f5:4e:29:18:be:94:fc:f6:50:a1:65:d8:70:e0:
         c8:67:f7:5e:24:ac:fc:55:d0:9b:7a:2c:dc:94:44:ad:83:9b:
         6a:d9:08:ac:71:ba:d3:c2:98:19:1a:be:fc:53:0e:c2:e8:c0:
         ce:09:77:0e:70:04:6b:45:7c:ac:f1:3f:0f:c9:f1:1b:d8:c3:
         cf:80:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----