Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/3230312e34392e3132382e302f32322d3234203d3e20323639393836.roa
File:                     3230312e34392e3132382e302f32322d3234203d3e20323639393836.roa (raw, json)
Hash identifier:          M7OabbYtrVeRRX59iLc7gubHSiHC4xsQWOlZcmDdRvs=
Subject key identifier:   51:01:68:38:FA:4F:3A:7F:A1:53:EE:52:F5:4C:BA:84:6C:B1:16:07
Certificate issuer:       /CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
Certificate serial:       6751B919F8616941AEBAA9190967E4C51CF6C1C8
Authority key identifier: 17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/3230312e34392e3132382e302f32322d3234203d3e20323639393836.roa
Signing time:             Tue 04 Feb 2025 18:22:07 +0000
ROA not before:           Tue 04 Feb 2025 18:17:07 +0000
ROA not after:            Tue 03 Feb 2026 18:22:07 +0000
asID:                     269986
IP address blocks:        201.49.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:51:b9:19:f8:61:69:41:ae:ba:a9:19:09:67:e4:c5:1c:f6:c1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
        Validity
            Not Before: Feb  4 18:17:07 2025 GMT
            Not After : Feb  3 18:22:07 2026 GMT
        Subject: CN=51016838FA4F3A7FA153EE52F54CBA846CB11607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:2c:4e:9e:51:46:71:43:5a:81:27:3c:f3:
                    8e:4b:b5:f3:61:c8:08:18:51:6b:a3:4c:96:29:7b:
                    52:f1:36:d4:97:5a:2d:d5:d5:d7:08:d3:bf:50:0e:
                    bf:9e:a3:72:4a:c6:51:2f:cf:ea:0c:ec:ef:f3:50:
                    b6:41:fc:d7:32:b0:99:5e:b3:65:18:b8:0f:2d:78:
                    d9:42:25:ab:7d:d4:1c:50:9d:bf:b6:cc:0c:6f:d7:
                    2f:a3:54:bd:50:c4:cd:09:53:45:67:01:63:e5:1d:
                    eb:c0:26:a3:06:cc:d7:6d:10:d7:b8:f2:35:ae:7e:
                    1c:54:5f:4e:29:66:93:c1:d7:33:99:36:93:54:5b:
                    34:c5:90:e2:9d:99:b6:f1:47:5f:3c:d7:96:a4:db:
                    ee:22:1a:7d:58:c9:4e:e0:48:21:66:98:91:c7:75:
                    e8:f9:8e:77:8f:93:1c:4c:cf:76:7f:6c:04:c5:c8:
                    0a:ae:17:a7:92:ea:17:06:0e:f1:41:f1:b9:e5:23:
                    21:4a:ba:e8:34:79:ac:11:fe:a3:ff:34:ea:2c:5f:
                    63:fb:80:a7:ec:01:af:44:d4:94:57:4a:1d:1c:c1:
                    c5:a7:00:22:e7:ca:e8:f0:63:31:36:e9:40:2b:34:
                    40:f8:2a:4c:d9:59:0b:45:33:f4:5b:9e:d6:e9:e4:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:68:38:FA:4F:3A:7F:A1:53:EE:52:F5:4C:BA:84:6C:B1:16:07
            X509v3 Authority Key Identifier:
                keyid:17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/3230312e34392e3132382e302f32322d3234203d3e20323639393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:8e:f8:a7:f9:1e:b5:46:06:c0:75:ca:92:3b:1d:f6:a8:
         ae:2a:0d:02:a6:94:90:61:b4:49:7a:71:40:8f:a7:3a:a5:d8:
         35:8c:f0:19:e1:4e:ce:a6:75:54:1e:2e:2f:82:01:24:f2:2f:
         86:88:c8:8e:db:e8:40:3b:bb:ec:65:67:7b:9a:cf:3a:2e:48:
         76:1c:6c:8c:0f:e2:fb:3c:a4:c3:08:35:66:c5:6b:dc:8c:2f:
         04:d3:aa:c2:00:80:63:b3:cd:4c:25:ba:66:fd:c2:3f:23:f3:
         d9:c1:7e:fd:3a:6f:62:b4:78:e4:4f:f4:ea:a4:ac:57:0b:4a:
         24:b9:19:9e:3f:a6:b0:f7:fb:37:b5:5f:63:af:58:c1:43:c6:
         4e:43:d5:60:4b:3f:f3:60:10:b3:a8:bb:dc:3f:ec:17:c6:9a:
         84:41:d1:c2:2a:17:04:0f:1e:8d:3f:4c:f7:fe:56:ba:f5:89:
         96:74:fd:91:b6:15:00:5d:11:fb:63:04:8c:fa:13:bb:5f:5f:
         49:8c:34:4b:4e:17:0c:4e:12:da:b7:77:9e:7c:bc:66:23:45:
         e3:48:a6:ab:ad:49:a9:ed:ef:9e:d8:16:2e:a6:1d:5a:09:9d:
         ad:32:a0:84:b9:a6:71:44:82:e7:89:c8:29:4f:74:ea:9b:55:
         6d:12:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----