Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa
File:                     3138362e312e3230382e302f32302d3230203d3e20323632313839.roa (raw, json)
Hash identifier:          H9036cBJM1JF9YjhU8vYvITfAk4RkYdxpDyyaQxWhvA=
Subject key identifier:   42:28:62:0B:E4:27:27:E4:79:77:C8:81:D4:C3:5C:29:9E:4C:2B:0F
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       5D42707E7F654D0F21622025A641DCD9F69FD760
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa
Signing time:             Tue 04 Feb 2025 18:34:12 +0000
ROA not before:           Tue 04 Feb 2025 18:29:12 +0000
ROA not after:            Tue 03 Feb 2026 18:34:12 +0000
asID:                     262189
IP address blocks:        186.1.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:70:7e:7f:65:4d:0f:21:62:20:25:a6:41:dc:d9:f6:9f:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Feb  4 18:29:12 2025 GMT
            Not After : Feb  3 18:34:12 2026 GMT
        Subject: CN=4228620BE42727E47977C881D4C35C299E4C2B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:66:60:83:57:e5:b3:03:95:e1:3d:c3:c0:
                    e8:fe:7d:10:d2:bd:f3:05:3b:a2:b6:8b:b7:1c:a0:
                    68:fb:02:56:3a:9b:c0:2d:45:b6:93:e6:62:22:16:
                    8e:73:e7:c8:55:91:06:52:02:34:03:ec:14:56:18:
                    d6:61:56:f6:b8:4e:e6:ab:b5:35:15:a0:42:ae:85:
                    d5:23:a4:09:71:1d:41:df:2c:c8:b0:4a:81:71:3d:
                    b5:6e:06:d1:c3:d5:c9:36:35:f4:f0:c7:fd:9f:59:
                    b0:a2:ca:8e:64:c1:9e:cb:ba:8d:68:66:84:57:c9:
                    5b:a5:64:e5:78:e6:0a:c6:88:1c:4c:ec:9e:26:08:
                    5a:6a:89:c5:54:86:2e:a3:9c:b8:df:2a:77:7e:8a:
                    64:0c:3b:c3:0d:87:b6:31:90:d6:d4:58:75:b4:81:
                    09:a8:fe:24:38:f8:bd:3c:58:83:7e:4a:2a:8c:e5:
                    a1:73:13:8d:62:59:79:be:b3:21:e7:5c:a8:64:0e:
                    55:f2:48:ff:a7:bd:58:b0:29:f3:f1:6c:15:a4:49:
                    41:12:ed:2f:00:94:41:2f:37:d8:af:cf:d8:ba:d7:
                    da:cf:d4:2b:a3:87:4e:73:a2:fa:50:a4:f1:16:dc:
                    dc:10:ef:1c:b9:9e:0e:a0:18:aa:cd:b1:74:0a:7e:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:62:0B:E4:27:27:E4:79:77:C8:81:D4:C3:5C:29:9E:4C:2B:0F
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230382e302f32302d3230203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:9a:5b:28:8c:32:22:f2:b8:32:03:3c:a3:14:86:7d:ac:d8:
         4b:bb:cb:f5:4e:a2:de:93:d5:f5:ae:e5:96:f1:25:84:a4:e6:
         39:68:9b:02:21:14:c8:75:80:f9:70:ff:14:3a:86:2b:ef:3a:
         9b:4d:55:80:e4:54:85:5f:b2:98:e1:32:35:25:ac:6c:b6:52:
         c5:cb:2d:81:a4:05:2a:cd:a0:b8:85:e3:f5:54:70:32:88:85:
         8d:48:20:7c:5b:a0:6c:2a:63:b9:94:f9:3e:e8:08:5f:fb:fd:
         1b:6b:89:7d:55:4f:90:40:45:a5:af:83:44:2f:78:c1:67:83:
         e5:1e:c0:80:8f:07:68:bb:28:60:a4:11:95:c7:58:a2:ca:f6:
         0d:1a:b3:83:27:41:fc:d7:83:60:b8:a8:69:ac:64:d1:9d:26:
         64:48:17:0f:e5:c6:e4:03:9b:fa:8e:5f:09:ca:44:ee:0f:91:
         b6:52:a0:ec:c0:65:40:11:7d:14:cf:3b:18:c2:4a:e4:bd:98:
         b8:b5:8c:0a:cb:5f:e4:71:b7:05:26:d1:ea:2c:42:25:7d:20:
         9c:6c:8c:09:b4:7d:2f:29:49:d0:b6:0c:fa:32:66:39:6c:41:
         45:7c:03:dc:1d:7e:f6:11:0e:bc:c9:12:3e:ae:d0:f4:48:11:
         80:48:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----