Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e203133353739.roa
File:                     3230372e3234382e3136302e302f31392d3139203d3e203133353739.roa (raw, json)
Hash identifier:          SJkI3nGpVqs1B+foSEseMnqK6PWVSjqqsHlDy1zJkcM=
Subject key identifier:   86:EA:9B:79:D8:D3:EB:A3:75:2A:90:8D:57:C2:D4:F8:F9:C9:7F:77
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       72213492E9F12E66758B8926A510FBD53804B6EA
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e203133353739.roa
Signing time:             Tue 30 Jul 2024 16:50:02 +0000
ROA not before:           Tue 30 Jul 2024 16:45:02 +0000
ROA not after:            Tue 29 Jul 2025 16:50:02 +0000
asID:                     13579
IP address blocks:        207.248.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:21:34:92:e9:f1:2e:66:75:8b:89:26:a5:10:fb:d5:38:04:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:02 2024 GMT
            Not After : Jul 29 16:50:02 2025 GMT
        Subject: CN=86EA9B79D8D3EBA3752A908D57C2D4F8F9C97F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:6a:9b:50:37:21:82:bd:59:8a:72:af:44:
                    ac:f0:65:8f:98:fc:45:00:70:2f:4a:3a:38:d3:87:
                    c9:2e:eb:77:40:aa:23:d2:8b:e2:7c:5d:df:a4:03:
                    fe:82:b0:13:22:e2:d5:c3:23:06:dd:fc:4d:e0:4e:
                    8b:f8:ea:6c:d8:38:47:dc:c7:b1:f9:28:80:a9:8a:
                    fb:1e:bd:56:0e:9e:7e:f6:f7:e2:6f:b5:e8:a8:6c:
                    5c:3b:af:2f:c3:f6:8d:1d:77:20:52:39:13:d6:f9:
                    7f:a4:c8:f0:b7:4c:66:f5:1e:99:42:44:3a:95:84:
                    de:1c:e6:17:08:87:65:60:5b:5e:8b:04:57:8b:b5:
                    a3:94:de:c7:dc:99:54:58:a0:55:59:0e:f4:6c:e6:
                    41:40:04:97:41:74:94:61:d3:9e:5f:bd:e2:d8:4d:
                    5c:42:ca:2f:79:46:29:71:e5:8d:c0:df:9b:2d:76:
                    42:9c:bf:18:32:31:1b:40:19:41:91:23:4f:b2:94:
                    b9:86:e0:d1:9a:b5:3c:4a:05:cd:27:be:ae:32:db:
                    c8:2a:bf:7f:1c:96:61:cb:71:60:ff:61:1e:83:ac:
                    f9:b1:11:8b:34:30:e6:ba:56:7e:cf:17:68:1a:83:
                    14:b4:c6:a5:0f:7e:6b:7b:e5:c2:21:96:86:b3:46:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:9B:79:D8:D3:EB:A3:75:2A:90:8D:57:C2:D4:F8:F9:C9:7F:77
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234382e3136302e302f31392d3139203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:66:15:18:79:e3:87:07:07:22:7b:0a:3c:c7:5f:f0:fa:21:
         ba:46:29:ef:b4:26:d3:5e:bf:eb:e5:82:ca:07:88:8c:4f:b6:
         ec:28:fc:a0:65:51:32:f6:a8:b3:92:75:de:2b:89:df:ee:6d:
         3c:3a:18:4c:ff:5d:6a:ef:06:45:9c:2f:62:4d:1e:63:5e:88:
         34:6b:fb:e6:99:6b:e9:0d:bf:ac:fe:ac:01:90:c5:b8:c3:1b:
         f4:9b:64:7a:26:53:94:bd:ec:fc:2c:de:ef:a0:43:29:fa:76:
         74:a2:3f:d1:31:90:8f:6b:35:b0:70:53:19:50:e4:9d:8b:33:
         03:b7:a3:de:57:ea:2d:cd:d6:ef:9c:06:ab:91:a7:58:7f:30:
         30:86:90:91:92:2e:fc:97:a0:84:82:d3:ba:8c:5c:bc:cd:7f:
         92:9c:2c:10:34:1f:fe:a6:ba:ef:a4:37:72:24:06:c8:6c:ff:
         43:6d:4e:ba:cd:65:19:21:6b:4b:85:fa:be:75:f1:da:b2:8a:
         21:e4:5f:96:6d:9b:a1:28:43:36:cc:af:2e:f4:e5:f9:b0:19:
         fc:a6:80:73:b9:1a:ef:6f:13:77:fb:29:6a:b6:4a:e9:24:e4:
         e9:90:65:af:6a:b0:8e:58:75:2d:39:89:6f:65:a2:3a:40:aa:
         32:6a:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----