Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
File:                     3137392e302e3135362e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          clhYJNbFxN4A0JbTfMZsbkU1TOFfVYrnOOtRzLMeGcg=
Subject key identifier:   F4:62:01:82:34:B6:60:DD:1B:6C:AD:48:4E:85:2C:EE:63:38:4E:E5
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1A0A04FDE33395E445A74276BDE2902B9E43FC7F
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 17 Mar 2025 15:12:07 +0000
ROA not before:           Mon 17 Mar 2025 15:07:07 +0000
ROA not after:            Mon 16 Mar 2026 15:12:07 +0000
asID:                     7777
IP address blocks:        179.0.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0a:04:fd:e3:33:95:e4:45:a7:42:76:bd:e2:90:2b:9e:43:fc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar 17 15:07:07 2025 GMT
            Not After : Mar 16 15:12:07 2026 GMT
        Subject: CN=F462018234B660DD1B6CAD484E852CEE63384EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:72:3e:2c:a2:94:15:b1:a8:be:d1:6a:12:
                    16:f2:79:5e:84:f6:2a:30:9f:a4:97:55:60:04:1e:
                    10:6e:d4:8f:a2:d8:73:19:c1:20:75:53:00:18:53:
                    dc:7b:52:42:5c:ae:41:6c:32:b8:bb:a0:83:61:3b:
                    62:4b:98:82:47:a0:0a:43:2c:cb:93:56:6e:bb:26:
                    a9:11:3c:1e:dc:88:69:97:b7:aa:11:b0:41:39:50:
                    e7:3d:3b:36:da:50:76:23:a9:17:7a:6f:46:b7:81:
                    8a:7b:7f:b8:4a:97:1b:14:89:08:95:2f:b1:05:2c:
                    43:76:34:3e:2f:f9:e8:4c:c7:20:f0:fe:ed:66:2e:
                    89:1a:8d:37:a3:bc:18:0e:fa:4e:12:6e:90:85:d2:
                    59:13:1d:c0:a4:52:2a:4a:ee:7b:94:45:ef:ae:44:
                    80:b5:fc:1a:ad:70:34:3b:59:90:ed:3b:54:9f:75:
                    9d:ea:d5:22:ef:b7:5b:ae:bb:61:b4:c5:e5:b4:ea:
                    35:1f:6b:88:d4:85:e8:0b:1a:40:dc:ae:c7:2a:ba:
                    c9:ba:61:5a:5c:f4:7c:38:e9:3c:0c:43:40:25:b6:
                    e3:67:04:ce:46:38:b7:93:45:7b:8b:c0:b2:27:0d:
                    9a:86:06:6a:14:a2:75:44:f7:2b:91:ec:a0:4f:88:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:62:01:82:34:B6:60:DD:1B:6C:AD:48:4E:85:2C:EE:63:38:4E:E5
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:a5:2a:43:ea:f2:6f:26:26:82:c1:3e:83:e6:b0:6f:a2:
         a2:bb:a0:6f:03:33:87:e6:69:5f:84:5d:38:db:f1:86:99:ed:
         18:bb:0b:07:be:e0:5f:71:a7:90:25:22:a6:df:c4:43:36:0e:
         9e:2e:31:24:55:20:88:18:05:2a:a9:09:ca:e3:cb:15:f1:bc:
         d2:ab:7e:56:e1:4b:b3:66:b5:ca:62:55:ca:cf:59:f0:3a:32:
         a9:a9:86:7f:a7:68:fe:c3:92:cc:ab:bb:cb:34:52:30:5b:5f:
         8b:47:07:f6:8d:b8:35:6a:9d:a1:4f:78:8d:c0:a9:4b:6d:21:
         26:8d:56:84:d9:d8:07:a1:bb:0d:49:0e:40:ef:1f:40:28:ce:
         e2:3f:86:a9:78:ad:4c:ad:2d:9d:62:bc:ca:3b:ff:e1:b2:a6:
         a8:f5:2c:4b:45:b2:b2:44:35:8e:75:c2:cd:d6:01:0a:10:1d:
         20:59:7c:73:66:32:2c:83:73:22:e4:46:73:d1:41:fe:bf:36:
         a1:d7:66:02:49:9b:79:39:83:8b:2e:08:6a:0b:97:73:27:e8:
         9c:8c:88:16:54:15:21:7c:a6:c8:9f:57:8d:51:ab:a0:93:b6:
         60:65:0a:ef:a0:64:b9:93:3d:27:30:c7:89:ea:8a:b7:9a:9d:
         e8:f2:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----