Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa
File:                     3137392e342e302e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          2y0PdK0Gypb2Lg6k/VVrI/rBaAVuJsB/ltQLQS/PXTQ=
Subject key identifier:   A6:B1:F7:C5:90:E7:0D:69:57:84:A1:55:D4:08:36:65:C9:47:31:2C
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       464D311D26D449A2908859F9F938D2B2483AE448
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa
Signing time:             Mon 29 Jul 2024 14:45:00 +0000
ROA not before:           Mon 29 Jul 2024 14:40:00 +0000
ROA not after:            Mon 28 Jul 2025 14:45:00 +0000
asID:                     6535
IP address blocks:        179.4.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4d:31:1d:26:d4:49:a2:90:88:59:f9:f9:38:d2:b2:48:3a:e4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Jul 29 14:40:00 2024 GMT
            Not After : Jul 28 14:45:00 2025 GMT
        Subject: CN=A6B1F7C590E70D695784A155D4083665C947312C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:20:44:f2:e8:d4:97:64:a9:95:0a:61:60:
                    d3:bf:09:e5:d6:b1:ab:9e:14:eb:6a:52:15:93:3c:
                    8c:57:85:b0:bd:0b:b0:c6:a7:bb:36:51:9b:38:86:
                    ed:1f:59:92:c9:a8:4e:aa:a8:93:8c:fa:1a:9a:d5:
                    8c:9a:74:c1:91:00:1d:9a:54:ab:c9:26:b7:17:23:
                    51:ce:bf:91:25:22:39:c0:31:6c:f2:0c:d7:d0:ee:
                    dd:e9:89:9c:d4:d8:5e:56:54:2a:af:93:c3:45:c5:
                    e1:ec:41:75:9b:cc:22:f4:79:5e:b1:b8:2d:99:25:
                    97:9b:eb:91:77:f9:9b:b5:3c:ab:5b:44:39:f3:33:
                    ef:98:48:8e:66:e4:7a:1b:72:c9:b2:91:56:90:fb:
                    84:7c:5a:7f:ae:a6:45:04:6f:ac:e6:f5:d9:33:19:
                    67:e2:db:c5:79:e5:2f:c4:fd:18:84:17:1a:d1:bc:
                    2d:a2:3a:27:4f:ce:47:ce:30:e9:02:c0:42:e1:43:
                    ab:1d:af:7c:16:9c:0a:7d:66:25:c9:4e:29:ae:26:
                    f6:95:86:6c:21:96:f1:6c:29:1a:17:53:b7:ca:00:
                    04:2e:14:48:f7:3d:6c:f3:56:05:b6:2c:ad:13:e2:
                    82:7b:5d:f4:9a:a5:d9:16:ab:f2:82:bd:0b:3d:6d:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B1:F7:C5:90:E7:0D:69:57:84:A1:55:D4:08:36:65:C9:47:31:2C
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:1e:db:35:77:d2:84:ac:36:f1:df:8a:98:3b:7d:52:e0:
         7f:a2:4b:1a:70:9a:0d:6f:c5:28:e7:ab:2b:8e:56:01:16:77:
         23:ca:8e:5a:7b:69:da:00:37:66:97:d8:d5:03:bd:d2:9a:66:
         4c:ad:ab:46:b1:7d:a4:2b:cb:12:c3:ac:92:ae:64:26:6d:03:
         58:41:ea:d7:b7:82:4e:76:13:5f:bb:2b:9a:ce:55:a4:07:36:
         f9:54:8b:6c:ee:ba:0b:f4:f4:cf:16:ec:6e:2f:d8:d7:81:3a:
         ed:99:57:b5:d8:a2:b8:46:7f:64:ed:ea:3c:1f:b0:11:da:13:
         00:51:b9:68:03:5e:b1:df:ab:0c:b3:1d:5b:43:ff:4d:fc:79:
         97:3b:78:4b:4c:18:56:86:b2:55:62:3b:a4:e8:f6:ab:49:cc:
         ea:29:a7:63:3e:87:06:82:da:38:6c:20:a8:2f:15:68:80:f8:
         cd:0a:be:50:25:a8:f9:34:ef:c5:f9:5a:75:3d:87:35:f1:0e:
         c3:45:ba:7b:74:ee:02:ac:44:fa:3e:3c:88:90:ad:68:a9:19:
         d1:6a:f2:e9:8e:97:2a:99:20:8a:8b:84:7e:36:0a:b8:a0:b2:
         c1:50:db:66:ef:bc:45:6f:d8:e3:18:dd:8f:3e:55:70:95:bd:
         49:b6:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----