Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa
File:                     3137392e322e302e302f31352d3234203d3e203237393935.roa (raw, json)
Hash identifier:          x15QZnXMQMsNEaeEZuihrPgDO3VS+8B8+jkEMwSAtMM=
Subject key identifier:   F2:A0:96:4F:6C:E0:1B:2E:1D:C3:8D:0D:EF:DE:CF:DE:16:A0:72:75
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       20020A8E172A7DA4858BCF0822CB0332C53C45B9
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa
Signing time:             Tue 04 Feb 2025 18:12:11 +0000
ROA not before:           Tue 04 Feb 2025 18:07:11 +0000
ROA not after:            Tue 03 Feb 2026 18:12:11 +0000
asID:                     27995
IP address blocks:        179.2.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:0a:8e:17:2a:7d:a4:85:8b:cf:08:22:cb:03:32:c5:3c:45:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:11 2025 GMT
            Not After : Feb  3 18:12:11 2026 GMT
        Subject: CN=F2A0964F6CE01B2E1DC38D0DEFDECFDE16A07275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:8b:89:c5:3d:7f:d4:14:d2:ce:0a:a0:59:
                    67:fc:1b:11:97:4b:75:f7:a5:4a:4f:e6:48:ff:67:
                    44:0e:d4:33:ca:15:40:ae:49:58:68:63:7f:14:4b:
                    3a:9a:e7:05:3f:5e:12:83:4a:e0:26:34:1a:5c:19:
                    34:ac:3b:ed:c7:2f:ca:3f:0f:35:88:7e:6c:ef:4b:
                    59:4a:88:1e:78:60:4e:f3:ed:f2:64:94:11:e9:f6:
                    64:7d:80:f4:7e:d6:c9:d1:bc:d4:a0:13:b0:99:40:
                    2e:fc:1d:78:1d:34:95:13:c2:cf:90:8e:a9:a9:ef:
                    5f:79:88:cb:66:f0:7e:49:8d:c6:fb:76:2e:dd:91:
                    7b:61:1e:2c:f7:c3:e3:33:8c:87:a4:0d:f1:4b:e2:
                    33:99:a9:83:a7:81:5b:a7:d6:d0:ff:3d:9e:93:79:
                    40:aa:d7:55:e8:32:13:f4:a4:70:d2:bb:2f:76:0d:
                    ac:5a:b4:fc:8d:2c:e0:88:84:03:1a:93:98:df:fb:
                    5f:96:fb:b1:1a:51:05:1c:99:73:76:37:f2:4e:34:
                    8e:5d:94:be:14:cd:c6:52:03:e4:9e:21:51:04:a5:
                    a0:27:ed:08:7d:5d:09:11:5d:2b:7d:8d:7d:d3:3a:
                    2f:d1:df:50:ec:3a:8c:3e:0a:7a:87:bc:95:af:fb:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A0:96:4F:6C:E0:1B:2E:1D:C3:8D:0D:EF:DE:CF:DE:16:A0:72:75
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31352d3234203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b7:93:40:57:d1:f0:85:4a:e9:98:9e:a7:ba:59:48:09:e7:b2:
         a9:e3:54:e3:77:43:22:d4:8e:3e:8c:af:1b:3f:95:62:2d:5d:
         65:43:9c:57:f1:3f:47:0e:bb:33:fb:90:f7:2b:06:99:f9:bf:
         f1:f2:6c:ff:0f:87:00:41:74:6f:b5:52:08:1b:96:bc:c6:c6:
         ad:e9:fa:6c:13:7b:0b:71:9a:1f:e5:60:39:40:7c:aa:75:0e:
         34:4b:52:1b:b9:ee:3e:e8:18:c0:76:21:ec:44:bf:5f:ac:f7:
         a5:6c:84:ae:95:b6:70:32:37:3d:ab:87:c5:77:43:5f:57:51:
         c8:ae:7d:95:ad:9d:3e:6d:db:93:06:1e:4b:61:d5:d6:c9:95:
         13:58:29:07:71:7b:47:fe:22:88:f6:e6:c5:bf:80:30:a4:d3:
         3f:af:e1:38:4b:d8:35:66:6d:de:9d:8b:86:b3:ed:a3:ce:72:
         ae:f3:3a:ae:b7:eb:ca:84:c2:44:8a:ab:ac:3c:05:fe:c6:37:
         98:85:56:05:ef:38:30:56:df:fa:bb:01:7a:bc:ae:dc:d8:1a:
         63:f9:0c:c7:26:b0:31:5e:48:34:80:e7:bb:8c:7b:5e:b3:14:
         7a:a2:ca:45:d8:7b:d7:b5:61:a2:09:aa:ee:5c:5c:92:53:32:
         6a:07:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----