Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/3137392e35312e3230302e302f32322d3234203d3e20323733393731.roa
File:                     3137392e35312e3230302e302f32322d3234203d3e20323733393731.roa (raw, json)
Hash identifier:          rki1Et8FUYhXTogXIdWyb1hkUVsbCdK28fCyoqToQ6s=
Subject key identifier:   D9:C4:E6:BE:43:E4:F3:C1:E1:30:69:26:95:C5:C7:E7:E3:34:02:FB
Certificate issuer:       /CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
Certificate serial:       0D9E173E36799265D27C3B3ABCEACA3EF15D7B94
Authority key identifier: 04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/3137392e35312e3230302e302f32322d3234203d3e20323733393731.roa
Signing time:             Tue 10 Dec 2024 19:10:00 +0000
ROA not before:           Tue 10 Dec 2024 19:05:00 +0000
ROA not after:            Tue 09 Dec 2025 19:10:00 +0000
asID:                     273971
IP address blocks:        179.51.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9e:17:3e:36:79:92:65:d2:7c:3b:3a:bc:ea:ca:3e:f1:5d:7b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D
        Validity
            Not Before: Dec 10 19:05:00 2024 GMT
            Not After : Dec  9 19:10:00 2025 GMT
        Subject: CN=D9C4E6BE43E4F3C1E130692695C5C7E7E33402FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:32:73:34:46:60:ac:f9:58:78:13:14:a4:
                    91:5f:2c:d9:de:67:cf:ac:14:49:bb:95:db:b0:ba:
                    5e:91:39:91:8d:8a:10:01:e0:da:86:60:b7:11:2b:
                    56:ba:8f:d4:9e:a3:60:b7:19:e3:27:97:05:21:e0:
                    de:32:b2:6c:fc:0d:f7:8c:5f:a2:95:20:6c:a7:63:
                    8a:d0:3f:96:d3:c9:13:d4:37:e4:4f:62:0c:92:0a:
                    45:28:0f:ca:71:60:0d:f6:2b:ab:a3:19:92:8a:e7:
                    83:b8:cc:61:f0:7b:99:19:bf:61:ef:00:c8:24:af:
                    51:cf:d2:06:e4:30:ae:3c:69:6b:96:33:9b:ab:b2:
                    93:1c:62:6b:95:f9:49:85:9b:0f:1f:4d:94:a6:ce:
                    2e:ed:ec:ec:7b:86:93:94:62:a7:87:76:7a:01:8e:
                    71:ee:73:5a:a5:0a:03:ac:61:c7:a4:f0:b2:1d:fd:
                    cd:f8:7c:cb:54:c6:49:a9:8b:8b:df:22:62:58:0a:
                    33:0a:4d:e7:ca:e7:18:1c:6a:82:5f:53:af:e4:a5:
                    7f:f4:02:3f:11:7c:c8:ab:2b:30:87:dc:c8:5c:b2:
                    d6:fb:90:c0:a4:10:93:31:bd:ef:60:ce:0a:cc:0f:
                    ea:21:b2:c9:76:c3:e7:fc:88:08:cf:4d:00:2c:21:
                    28:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:E6:BE:43:E4:F3:C1:E1:30:69:26:95:C5:C7:E7:E3:34:02:FB
            X509v3 Authority Key Identifier:
                keyid:04:E7:B9:D3:71:6A:07:CC:64:BF:4B:F1:35:59:3D:FC:1B:D5:5B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04E7B9D3716A07CC64BF4BF135593DFC1BD55B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F038FDFBB7B1E49D9D86DC7E35D79E00629C2E8B35FFA84F069EE5FC82E249E/0/3137392e35312e3230302e302f32322d3234203d3e20323733393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:00:97:f4:32:f1:49:50:7c:7b:6d:fc:33:ff:88:af:4b:
         db:23:28:1a:4c:19:d5:20:f1:13:e3:77:ca:53:76:cd:70:ee:
         91:55:cc:26:42:5d:62:70:b1:6b:b1:b0:12:1d:72:c6:30:ca:
         95:ec:90:6e:b8:af:00:5c:8a:c0:c9:49:98:65:f1:95:07:99:
         af:37:8e:63:0b:6a:e3:d6:cb:7a:ee:88:c7:06:f1:12:05:09:
         86:a9:50:19:41:de:2b:33:e1:68:2b:48:1a:af:38:0e:8a:42:
         8d:65:7b:61:8e:dd:0e:d3:1f:3f:70:08:23:60:25:d4:6b:3b:
         8e:0f:e5:1d:38:a5:da:f3:1d:b6:72:95:ad:17:23:e9:98:6b:
         fd:f4:6f:19:19:5f:e6:e9:5e:21:83:2d:27:2c:47:1a:63:43:
         b2:a0:da:e9:9d:84:72:64:ee:f3:98:14:d6:52:06:e7:a9:01:
         53:5f:63:c9:a7:15:e5:43:d5:75:1c:28:77:86:2c:b4:a3:4f:
         bf:e1:73:dc:05:b1:ab:54:93:72:4f:d4:58:8e:f2:95:2b:08:
         55:89:d6:50:5f:4b:12:16:4e:f2:31:35:a6:92:62:e7:60:48:
         ea:e3:ac:d7:e6:31:c9:07:aa:26:12:13:69:9b:ce:ab:36:1b:
         a7:7d:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----