Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa
File:                     3138312e3231302e302e302f31382d3139203d3e2037373237.roa (raw, json)
Hash identifier:          LJDXGA9OJ3TunK7YYTcJjnCgFztH+CJNVakMy9EPCI8=
Subject key identifier:   EC:AE:5C:15:E1:9E:DF:2D:46:DA:9B:15:36:BB:4A:C1:31:9A:75:1A
Certificate issuer:       /CN=1BFA6C930F29F85B0B64884549D566A287510282
Certificate serial:       38F0F6A9A71E980349398E46906A9D62A784093E
Authority key identifier: 1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa
Signing time:             Tue 04 Feb 2025 20:07:43 +0000
ROA not before:           Tue 04 Feb 2025 20:02:43 +0000
ROA not after:            Tue 03 Feb 2026 20:07:43 +0000
asID:                     7727
IP address blocks:        181.210.0.0/18 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f0:f6:a9:a7:1e:98:03:49:39:8e:46:90:6a:9d:62:a7:84:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA6C930F29F85B0B64884549D566A287510282
        Validity
            Not Before: Feb  4 20:02:43 2025 GMT
            Not After : Feb  3 20:07:43 2026 GMT
        Subject: CN=ECAE5C15E19EDF2D46DA9B1536BB4AC1319A751A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:e7:b9:d4:b8:86:2a:a6:02:f8:e1:30:f6:
                    ed:77:cf:a2:14:09:28:e9:60:67:37:d7:69:97:33:
                    15:fc:36:8d:ce:73:14:dd:8f:84:c0:d4:fc:54:74:
                    48:b3:db:3e:ac:de:2e:3c:d0:d6:6a:fa:7b:28:52:
                    c7:e8:76:90:b3:e5:fd:ea:3d:2c:a1:63:40:f9:19:
                    74:c0:7f:9d:02:00:59:97:b4:4f:49:3a:06:b8:90:
                    d1:c5:b5:cb:91:ac:22:77:a4:32:21:1a:0d:ac:e8:
                    56:f1:f1:95:e9:5e:33:d2:9f:13:3f:16:65:ac:e6:
                    ae:3d:e9:66:d6:d6:a3:0e:88:b7:6c:92:80:95:ab:
                    8e:7b:33:68:0f:80:df:46:80:50:41:ff:8e:9c:11:
                    0e:90:14:9d:24:0e:31:37:22:9c:dc:44:92:63:4f:
                    e2:ce:39:a9:47:ea:26:e6:c8:a6:be:50:62:81:bb:
                    c1:fd:ea:54:b4:f9:24:ad:d0:22:54:86:50:ba:69:
                    86:39:97:73:b1:17:dd:9e:24:56:b8:67:b9:87:a9:
                    ab:41:97:c0:65:b9:f0:29:dc:23:65:4c:57:72:5f:
                    7e:45:d4:ec:76:26:5c:7c:ae:b5:75:e5:17:31:98:
                    18:1a:69:f6:04:4e:97:f2:34:6b:1b:72:ae:68:0a:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:5C:15:E1:9E:DF:2D:46:DA:9B:15:36:BB:4A:C1:31:9A:75:1A
            X509v3 Authority Key Identifier:
                keyid:1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:0f:29:73:c6:f7:09:54:b3:d0:7f:1f:58:e8:7c:cc:11:
         f8:16:ab:77:9d:3f:b4:21:7c:0d:58:95:e8:61:8a:25:a8:1f:
         49:84:b3:bd:7e:72:3c:b3:e1:d6:17:7d:ad:ac:d7:25:2f:e6:
         9b:fe:a2:5e:82:56:43:d0:0e:d7:7b:bc:10:49:e6:8f:89:b4:
         07:23:29:2c:9a:a4:72:d2:45:a7:28:9d:5d:83:40:9d:71:9c:
         31:06:fe:07:b9:18:ad:73:6b:e0:e0:70:23:f5:77:a9:44:05:
         55:a8:80:3a:1c:40:37:45:3b:f1:10:11:9e:ba:3b:b1:9a:13:
         f4:09:f6:ba:69:3d:65:32:a4:05:3e:d9:8d:b8:ab:a5:e6:ce:
         b5:42:93:18:dc:c6:6f:dc:a6:4f:5f:27:59:bc:95:46:23:32:
         0f:fe:7d:37:06:84:f2:f1:3f:5e:a4:73:71:52:37:82:99:d3:
         93:83:9b:48:67:af:2e:c7:ae:9d:f1:be:73:6b:78:ba:fb:54:
         ce:6b:64:92:c5:da:f1:fb:63:cd:f5:fb:0b:7d:01:e5:a4:01:
         6a:9a:3e:34:71:a7:be:ca:fb:04:e8:04:b5:9a:bf:eb:6d:2d:
         d2:1b:e4:c9:21:c5:73:34:19:0b:ce:03:0f:29:12:76:a4:94:
         73:11:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----