Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e203138363738.roa
File:                     3137392e312e3137362e302f32302d3234203d3e203138363738.roa (raw, json)
Hash identifier:          /G+abGQdcPvcEsxA+o5H/1LBE4uCY8c6IGD0jAsay+0=
Subject key identifier:   B8:AD:82:99:16:E1:DF:5D:7D:84:D1:78:17:F9:B4:B3:12:DC:8E:5E
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       1560A81438641EB52DF2A1BD625F824742B18EC7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e203138363738.roa
Signing time:             Wed 19 Mar 2025 19:40:00 +0000
ROA not before:           Wed 19 Mar 2025 19:35:00 +0000
ROA not after:            Wed 18 Mar 2026 19:40:00 +0000
asID:                     18678
IP address blocks:        179.1.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:60:a8:14:38:64:1e:b5:2d:f2:a1:bd:62:5f:82:47:42:b1:8e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 19 19:35:00 2025 GMT
            Not After : Mar 18 19:40:00 2026 GMT
        Subject: CN=B8AD829916E1DF5D7D84D17817F9B4B312DC8E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:61:ae:2e:e8:8d:30:b5:74:fe:e4:f7:3c:
                    ef:c6:b1:cd:c2:ca:6c:59:3a:1d:7e:50:b5:5e:c3:
                    de:39:82:cc:fe:cc:7e:c7:02:77:d6:b1:e5:26:90:
                    9f:a4:18:98:ff:91:7f:d0:a1:bd:79:7f:51:37:ef:
                    e4:2b:c0:63:ff:3f:9f:e7:b0:11:f1:6c:a1:40:3e:
                    cc:32:a6:5b:95:e7:46:36:56:36:a0:17:96:26:0e:
                    f0:db:da:9b:23:7d:c4:48:c2:4b:1c:fd:34:44:e5:
                    0a:f0:42:d5:ce:12:ce:36:b2:b4:5d:04:c1:48:6d:
                    d7:5f:c0:d5:1e:81:bf:22:2c:d1:f6:ec:54:9a:6d:
                    69:6d:a8:b3:13:11:fd:3b:03:6e:0b:d6:9a:17:6a:
                    f1:a0:40:9f:d6:37:4a:7b:9d:7e:17:78:81:c8:86:
                    76:eb:6b:a6:ff:7b:20:47:2d:7a:b4:bd:da:49:e6:
                    37:23:47:6c:86:0f:8b:92:ca:fc:00:1b:b4:f9:90:
                    70:6f:76:10:00:47:c8:7c:7b:d8:b9:d4:16:3b:41:
                    d9:ff:77:bf:8d:97:40:96:5b:c4:51:22:85:c9:94:
                    90:8f:71:0c:61:a9:8b:04:2d:65:16:94:95:4e:55:
                    8f:ec:93:77:55:47:00:73:64:e4:f5:ba:82:39:d2:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:82:99:16:E1:DF:5D:7D:84:D1:78:17:F9:B4:B3:12:DC:8E:5E
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:ef:4d:b2:81:e1:f0:33:a5:13:30:0d:0e:20:08:9b:9b:
         17:9b:a3:75:c5:9b:5c:07:98:02:d7:ab:ad:44:87:99:e1:c9:
         3d:f4:f3:4d:f2:aa:6a:c6:8c:d1:cb:10:3d:92:e0:7e:77:3e:
         aa:c2:8f:ce:32:1c:45:39:74:9e:1c:af:86:05:eb:59:93:d7:
         8a:d2:eb:eb:62:fb:58:03:5c:50:0c:57:c1:79:75:b1:e1:da:
         9e:9d:cb:34:13:21:83:aa:1e:7d:ee:27:f4:aa:ab:79:44:5e:
         16:71:a8:14:61:7a:31:99:14:1c:fc:bd:0b:c0:bc:ca:93:0a:
         69:db:87:58:c9:6f:33:11:54:df:9b:6c:6b:5d:87:f0:83:13:
         b0:6e:5a:a2:93:fe:6d:96:99:af:de:62:08:e8:8c:93:85:ca:
         b8:57:f8:1f:46:77:57:18:d3:2b:cd:c3:7e:91:64:5c:f7:f8:
         92:64:d7:1b:00:66:78:3d:39:b8:dc:ba:d2:04:2e:82:d3:c6:
         c0:65:ff:91:3f:5b:1a:a6:b5:81:2e:63:c8:3c:01:4f:b3:c0:
         5f:db:4a:ce:e6:c0:04:71:26:bd:5f:7b:f2:15:70:98:87:f9:
         bf:b3:7a:3e:f5:50:64:c3:56:cb:c0:35:43:9b:aa:50:10:1b:
         68:68:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----