Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa
File:                     3137392e332e36342e302f31382d3233203d3e203237383336.roa (raw, json)
Hash identifier:          3372dHvFBuQWTzkYpI5IR7uMrp6hicxyFNqkqXqAaAE=
Subject key identifier:   29:43:16:C2:D2:BE:5B:A0:B9:20:52:B2:1D:6A:63:C1:37:2E:23:39
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       300629CBCD8AD8AB0B95961450BBC4982D0804B5
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa
Signing time:             Tue 04 Feb 2025 18:12:07 +0000
ROA not before:           Tue 04 Feb 2025 18:07:07 +0000
ROA not after:            Tue 03 Feb 2026 18:12:07 +0000
asID:                     27836
IP address blocks:        179.3.64.0/18 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:06:29:cb:cd:8a:d8:ab:0b:95:96:14:50:bb:c4:98:2d:08:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:07 2025 GMT
            Not After : Feb  3 18:12:07 2026 GMT
        Subject: CN=294316C2D2BE5BA0B92052B21D6A63C1372E2339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:08:eb:e4:64:e1:63:f0:77:67:80:ef:ed:
                    50:22:31:20:3e:82:24:1f:0c:c4:e5:4e:a1:d5:e1:
                    8c:07:36:9a:42:f9:93:5e:1a:fe:43:52:5d:16:ec:
                    5d:2a:4a:72:b4:b2:e1:9c:e0:d4:2e:65:b5:89:24:
                    0b:e1:22:f5:2f:d5:46:22:93:e8:bc:17:fe:96:91:
                    78:fa:46:64:f2:ac:b3:47:cd:09:3d:d2:18:f1:18:
                    d6:f1:ca:8e:ad:5d:23:83:d0:ee:59:60:cf:69:1c:
                    8f:ac:32:e2:81:b2:d1:2f:ea:7e:18:5b:b2:f1:8b:
                    b6:f1:ed:8b:20:21:2b:91:bd:8d:04:59:32:23:b6:
                    d4:77:b1:1b:ef:45:9e:6c:2c:e7:c2:2c:f2:bb:14:
                    2a:f7:1d:e0:5d:b8:64:60:7d:84:32:72:4f:25:3f:
                    ba:b3:66:fc:2b:80:c7:84:db:dd:75:c2:d7:be:7e:
                    68:2b:8b:e8:71:85:31:80:a2:9f:18:93:14:86:1e:
                    56:bb:88:7c:5d:61:8c:09:d3:c3:7d:34:87:bd:a4:
                    4c:db:30:7e:5c:2c:41:be:84:c5:d2:a7:d6:55:1a:
                    f8:ff:dc:4a:2f:b5:6c:76:1c:56:db:58:a4:3e:48:
                    32:af:e8:ad:da:a7:2b:24:83:01:64:8a:0d:6b:3e:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:43:16:C2:D2:BE:5B:A0:B9:20:52:B2:1D:6A:63:C1:37:2E:23:39
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e36342e302f31382d3233203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:cb:44:18:ef:4b:a8:92:00:e2:4c:4e:29:5a:9c:ac:0b:
         78:dd:f5:65:89:f1:68:1f:11:17:a8:24:db:d7:4a:13:f2:22:
         fc:06:fc:56:a0:cf:40:22:ca:88:bf:73:5c:6f:f1:33:2d:16:
         66:f1:02:f0:6b:8a:c8:b8:0c:75:42:41:a8:fa:61:88:d8:10:
         0f:7a:a4:14:ae:56:93:52:02:c4:3c:6c:77:98:7b:e2:16:71:
         d8:4d:9d:a4:fb:4b:a8:26:ed:3f:0e:60:d7:f8:75:48:e8:e5:
         8d:4b:cb:0e:d2:3f:8b:b3:a1:54:96:c6:9c:3c:b3:da:82:51:
         88:50:79:eb:20:e9:14:47:6f:86:99:28:ef:66:bf:7f:61:5b:
         4b:0e:48:35:02:6e:3c:fe:82:03:9a:15:82:b2:66:97:1a:a1:
         e6:9b:7c:1a:89:8b:2d:da:c7:f7:87:35:46:5f:13:22:5d:10:
         9a:f1:1a:e6:cb:99:b7:35:5a:a9:53:f0:3c:39:ee:79:35:23:
         01:df:3d:38:19:e2:3b:ee:53:74:51:f9:f2:05:64:66:63:c9:
         cd:85:60:87:f9:5a:fb:ef:d9:87:08:9c:75:e0:34:3b:0b:f2:
         1b:a5:57:8c:f4:5e:bb:f2:e9:a8:0c:a6:9c:22:58:0c:c0:ed:
         b6:e7:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----