Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3139203d3e203133353739.roa
File:                     3230372e3234392e39362e302f31392d3139203d3e203133353739.roa (raw, json)
Hash identifier:          1gR7j/wshhmNOKnmwB+IBB88les460vWkVs9inNIzpc=
Subject key identifier:   AF:CD:FA:74:9C:62:15:56:2E:8F:AC:53:9A:9F:56:95:9E:BB:90:A3
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       2CA70CD45C8C6838A3B5FA4E985954E6FA7BC0FD
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3139203d3e203133353739.roa
Signing time:             Tue 30 Jul 2024 16:50:04 +0000
ROA not before:           Tue 30 Jul 2024 16:45:04 +0000
ROA not after:            Tue 29 Jul 2025 16:50:04 +0000
asID:                     13579
IP address blocks:        207.249.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:0c:d4:5c:8c:68:38:a3:b5:fa:4e:98:59:54:e6:fa:7b:c0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:04 2024 GMT
            Not After : Jul 29 16:50:04 2025 GMT
        Subject: CN=AFCDFA749C6215562E8FAC539A9F56959EBB90A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:27:1e:bc:d3:66:ec:70:8f:7a:85:e5:37:
                    35:39:20:b8:30:5d:12:b7:f4:32:b1:93:2e:f0:63:
                    75:c8:2b:d9:82:fb:f2:c2:13:b8:cf:44:03:a8:cd:
                    dc:47:f3:dd:bf:ba:d8:f5:b0:8c:7e:14:8b:6e:7b:
                    76:ab:6a:68:fa:12:a9:5a:04:1f:eb:d2:a7:df:61:
                    3e:82:e0:cd:32:b7:4f:dd:73:77:72:dc:8e:4a:21:
                    b1:36:04:fd:01:a4:fe:5d:58:73:a2:65:04:bf:e6:
                    6d:a0:a3:07:1b:f5:e9:5b:24:88:95:78:e3:c9:c4:
                    a2:8e:a0:9a:07:11:e5:21:0a:c7:24:06:8e:5a:81:
                    8d:8b:ee:23:ee:5e:93:ef:72:9d:42:95:02:22:71:
                    6c:a4:e3:7b:16:16:f3:86:01:c2:b7:ed:5b:55:22:
                    22:a6:df:2e:62:81:7f:3f:38:44:64:2c:9c:ba:de:
                    52:5d:7a:ce:e6:bc:f0:b8:ce:67:a3:d6:18:65:da:
                    31:02:56:fe:11:f2:1a:15:f5:f4:ee:2f:c9:40:fd:
                    39:47:28:bc:1e:e4:b9:36:96:5f:7d:64:f5:d1:ec:
                    21:cf:9e:46:5a:fa:89:e5:c7:36:7b:d2:9e:04:f9:
                    8a:e0:eb:61:e9:2f:d5:42:51:d5:81:d8:ad:94:61:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:FA:74:9C:62:15:56:2E:8F:AC:53:9A:9F:56:95:9E:BB:90:A3
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3139203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:b3:0e:f6:ac:05:d7:c9:ff:09:55:eb:09:5d:ca:83:ef:
         78:4a:2a:c3:ee:be:a0:ec:81:7b:83:41:0c:13:6b:cf:7b:ce:
         41:30:ba:1d:d7:b5:ce:32:74:4a:dc:c5:ff:9a:78:40:1b:b4:
         2a:89:02:7f:ca:0d:fb:00:76:3e:f3:75:f1:68:70:62:f4:36:
         0f:a9:c2:93:bf:70:59:6a:31:c0:b7:b8:01:b0:32:ef:b5:32:
         0c:e4:fa:4f:37:5f:85:bf:79:2b:cf:7a:35:41:24:fd:2e:5c:
         de:b8:de:1b:d2:a8:16:a3:f5:a4:eb:3e:c7:da:7e:6d:cc:d5:
         20:ee:e7:72:ff:76:59:15:58:da:f9:e9:5b:9d:a0:6b:b8:f8:
         6c:11:d8:a0:b3:5e:59:1e:0d:3b:e0:ca:8c:cd:db:35:a2:6b:
         10:c5:ef:dd:d3:dd:e2:55:78:f5:a4:e7:1a:57:35:c8:c8:44:
         f8:ad:54:dc:5f:e8:f0:70:42:fe:06:56:49:f5:88:32:95:a8:
         19:d6:37:14:be:b7:95:5a:fc:66:23:a6:3e:4d:c0:bf:50:9d:
         ad:1d:52:0c:36:6c:af:5b:07:a3:4d:39:60:a8:8a:5f:ef:57:
         7c:d2:8f:26:d5:fb:ab:6e:36:e6:c7:ba:b3:82:92:7b:a6:62:
         44:f3:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----