Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa
File:                     3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa (raw, json)
Hash identifier:          eMMh2YwZth+3ndnHtDGhpL3rruMsUa50lAcpSgnIxYg=
Subject key identifier:   9E:3F:3E:04:4A:70:BB:B8:74:BF:86:FD:59:6B:F8:4B:A8:C9:14:86
Certificate issuer:       /CN=1BFA6C930F29F85B0B64884549D566A287510282
Certificate serial:       082EA0AB650BFD09A7A286680D39AD052DA90FF4
Authority key identifier: 1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa
Signing time:             Tue 04 Feb 2025 20:07:42 +0000
ROA not before:           Tue 04 Feb 2025 20:02:42 +0000
ROA not after:            Tue 03 Feb 2026 20:07:42 +0000
asID:                     7727
IP address blocks:        181.210.128.0/17 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:a0:ab:65:0b:fd:09:a7:a2:86:68:0d:39:ad:05:2d:a9:0f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA6C930F29F85B0B64884549D566A287510282
        Validity
            Not Before: Feb  4 20:02:42 2025 GMT
            Not After : Feb  3 20:07:42 2026 GMT
        Subject: CN=9E3F3E044A70BBB874BF86FD596BF84BA8C91486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:45:73:55:e2:ce:5f:f1:5c:b4:d7:aa:41:
                    34:35:cd:fa:90:c0:3b:2c:e9:f3:cf:54:a2:1d:de:
                    62:02:f1:22:fa:2d:b1:8d:2e:78:24:5c:11:c2:10:
                    64:99:26:64:39:fb:07:b2:23:97:d6:e0:e9:cc:d4:
                    2a:d4:30:26:99:e1:fb:db:63:64:33:4f:58:c0:b3:
                    2c:d9:bc:8c:03:a2:54:e9:f2:e3:ce:31:68:4c:d1:
                    2b:20:28:b4:8e:db:b6:6f:dc:92:ae:9e:dd:c2:0c:
                    5e:b5:d1:36:33:f1:a3:7a:05:d4:06:96:11:30:20:
                    36:a6:11:86:98:32:04:23:39:98:43:0c:09:e6:e9:
                    ab:78:9e:e1:44:af:1a:2c:f6:e8:14:ea:1c:b6:15:
                    2d:d9:61:8e:59:46:4f:14:85:09:6a:d1:05:5d:da:
                    18:df:73:f8:fa:8b:93:c3:b6:65:91:51:69:5b:48:
                    2c:8b:09:23:2a:6e:08:a5:32:ca:88:92:6f:14:11:
                    fa:a8:a8:3b:2a:31:9c:e8:e5:2b:d1:6b:13:ac:ee:
                    50:3d:ce:f1:09:d9:61:63:f1:e3:e8:a7:ea:0f:a0:
                    aa:45:f9:e2:79:50:b8:c1:4b:85:c3:7d:2e:5a:80:
                    77:df:57:54:21:c9:46:1d:e0:aa:2f:3c:4a:30:4a:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:3E:04:4A:70:BB:B8:74:BF:86:FD:59:6B:F8:4B:A8:C9:14:86
            X509v3 Authority Key Identifier:
                keyid:1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:38:ef:53:9a:4e:c5:34:65:09:e1:db:31:9e:5f:22:50:66:
         a3:02:3b:94:19:57:d5:c1:83:5b:16:3f:9c:be:81:c5:56:b7:
         d4:0d:5b:7e:67:25:3d:13:fa:a8:b8:a3:bc:a8:ab:cd:6e:43:
         c9:07:db:d6:8a:b4:c6:0f:d5:a8:6e:1c:9c:c5:49:d9:6d:b8:
         ca:f1:2c:cb:df:de:08:f0:63:2c:c1:83:fd:ab:f7:10:58:e3:
         a7:a1:8f:61:32:f8:ca:7f:4e:56:e6:fd:4b:46:60:ca:bc:ff:
         f7:18:1f:8f:41:a4:d0:82:ce:15:6f:c1:aa:82:21:85:83:84:
         44:7e:30:c3:be:0c:5a:f2:be:ad:09:37:b1:96:61:be:4b:7b:
         04:c0:fb:bd:70:4c:0a:aa:13:a2:bf:7f:d0:80:bd:b9:a2:88:
         64:1d:d8:90:6c:a6:c2:a1:84:9c:f8:6b:5d:93:31:bc:72:39:
         97:5d:4e:5e:e4:c9:cf:23:8f:e7:ae:78:1a:49:d1:50:98:c2:
         cf:ad:bb:64:cd:4e:8d:63:c4:32:85:17:71:4c:5c:b9:32:af:
         f5:0f:82:de:6f:1d:4d:32:59:d4:d3:6b:e9:69:e1:a0:3d:30:
         0e:64:ec:bf:e6:1c:f2:6a:e0:c7:54:85:2e:63:f2:2e:df:61:
         af:6f:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----