Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa
File:                     3138362e3137322e302e302f31342d3136203d3e203237383336.roa (raw, json)
Hash identifier:          h8rusXJkwZoa03F9YQ2irQsU+u2LhoQa0kaufCjb7WM=
Subject key identifier:   C1:BD:11:CF:D4:63:B1:16:4E:21:BE:3B:87:EE:B0:ED:DD:12:49:3F
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       7F975CD834B869424CE74AC85BAA896499DB8932
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa
Signing time:             Tue 04 Feb 2025 18:12:12 +0000
ROA not before:           Tue 04 Feb 2025 18:07:12 +0000
ROA not after:            Tue 03 Feb 2026 18:12:12 +0000
asID:                     27836
IP address blocks:        186.172.0.0/14 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:97:5c:d8:34:b8:69:42:4c:e7:4a:c8:5b:aa:89:64:99:db:89:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:12 2025 GMT
            Not After : Feb  3 18:12:12 2026 GMT
        Subject: CN=C1BD11CFD463B1164E21BE3B87EEB0EDDD12493F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:3f:f0:89:e2:f0:28:38:f1:79:5e:04:68:
                    4a:48:83:5a:6a:91:8e:1f:64:87:f0:92:c2:9e:dd:
                    68:9d:b5:15:44:7e:e4:8c:e2:6b:52:41:e6:bb:67:
                    93:20:54:89:f0:57:39:fe:41:48:3a:cd:16:c0:bf:
                    2f:f3:ca:81:a7:02:0c:a8:77:a8:65:1d:d9:a4:49:
                    24:83:69:e8:e7:10:4b:5e:23:5b:3e:78:d5:fe:2a:
                    5a:29:45:6a:0f:07:26:e8:03:79:e1:ca:5d:20:d6:
                    83:fa:87:0e:1c:86:54:8d:86:c4:7d:2a:0e:ed:9e:
                    4e:8c:92:93:19:e1:8c:3c:bd:29:a0:e5:2b:af:a2:
                    a9:f6:15:9c:b4:3f:2d:3e:a1:9e:f1:d8:8a:9e:43:
                    40:ad:71:a6:24:2b:b1:ee:d5:cb:10:28:04:25:9a:
                    02:3b:22:c4:76:fb:f5:dd:be:7c:f0:61:c8:ff:42:
                    4f:95:66:de:35:e5:75:2b:fb:b7:ee:0c:68:65:ba:
                    e1:25:eb:6b:35:c5:e4:ec:e3:66:f5:57:e0:7f:b2:
                    64:d1:a1:9e:5a:90:01:b0:c2:7a:0f:ad:9c:a0:fb:
                    5b:45:19:fb:7b:42:b3:2d:1b:43:57:d4:fd:a6:83:
                    41:fe:b2:7d:5f:f8:36:06:69:f7:37:af:2e:8f:49:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:11:CF:D4:63:B1:16:4E:21:BE:3B:87:EE:B0:ED:DD:12:49:3F
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3138362e3137322e302e302f31342d3136203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.172.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:c2:b5:02:2e:a3:7c:7a:e2:79:2f:05:b4:de:59:fd:e5:
         0b:fd:42:74:11:79:64:b6:d7:fe:2a:2f:74:f1:99:9b:a3:b0:
         fb:da:b8:20:b7:9f:20:b5:de:ae:51:ed:85:e6:56:ac:32:1c:
         ac:87:00:12:cb:34:03:9c:c1:2c:4c:60:2a:b7:40:3f:1d:23:
         f0:30:4b:b0:e8:df:bd:da:14:3d:d8:60:d2:e0:40:38:7a:a4:
         66:41:e3:6c:c8:1c:b2:b8:32:f9:8d:a8:96:12:4b:5e:73:7d:
         64:63:6a:47:06:bc:83:32:7a:a7:dd:82:46:07:54:85:ed:56:
         27:24:36:db:56:d3:4b:0b:69:c3:80:59:8d:9f:79:d0:91:9e:
         a4:1c:41:7e:ba:41:60:24:06:bd:72:80:8e:f8:aa:5f:68:22:
         8e:a2:a6:49:a5:98:0e:bd:fd:37:78:b9:40:e3:2f:ca:db:73:
         3a:3e:60:c8:f8:04:d8:a8:8c:69:8f:d9:5c:01:a8:78:84:9b:
         79:6b:3f:ba:5d:b9:08:cc:e4:46:9a:94:0f:b7:68:08:f4:3a:
         ad:b0:19:a5:4b:9f:d9:86:f7:d6:38:94:6e:58:b8:12:53:8f:
         88:f5:e1:40:fa:75:52:2d:fd:1f:78:e2:b8:b2:ad:54:f4:0d:
         7d:c5:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----