Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
File:                     3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa (raw, json)
Hash identifier:          gpnmVP639U+nPnB/Q4a43DOQgv2NdD4UgrpK2f/dD5Q=
Subject key identifier:   C9:F8:DC:5B:69:19:8A:FB:3B:C5:7D:C9:87:F2:5A:16:AE:64:3F:6E
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       5A72EFB02A089DBC364EC169ABCD14F5AA020E0F
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:07 +0000
ROA not before:           Tue 04 Feb 2025 18:01:07 +0000
ROA not after:            Tue 03 Feb 2026 18:06:07 +0000
asID:                     27843
IP address blocks:        181.177.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:72:ef:b0:2a:08:9d:bc:36:4e:c1:69:ab:cd:14:f5:aa:02:0e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:07 2025 GMT
            Not After : Feb  3 18:06:07 2026 GMT
        Subject: CN=C9F8DC5B69198AFB3BC57DC987F25A16AE643F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:08:5b:83:d7:e6:90:62:f8:20:24:35:d4:
                    84:8f:fa:e3:55:bc:8e:ba:7b:2e:8d:4d:b7:f3:c5:
                    9b:8c:3f:b8:88:6a:d8:18:3b:52:8a:e0:3d:0f:7b:
                    fb:a6:17:93:25:2e:64:fb:24:db:e3:6a:e1:2f:26:
                    96:8f:1e:52:79:12:ad:ac:8e:7c:40:8d:3f:b8:b4:
                    2e:9b:04:36:59:b1:11:46:ad:36:4c:c6:46:ee:b2:
                    04:8c:72:89:f3:88:58:b1:05:f9:ce:90:5c:86:13:
                    63:1c:44:d7:3d:c2:9e:8d:65:c3:66:71:d1:3a:8b:
                    46:d8:95:48:5b:2d:01:27:44:f8:ec:88:32:25:a0:
                    0e:8e:b1:25:32:e9:7b:00:28:81:2e:7d:d8:e2:6e:
                    af:8f:01:6a:d7:98:b2:2f:15:01:96:07:a0:26:50:
                    22:96:f6:1a:37:94:11:1b:20:2c:43:95:c9:4b:01:
                    31:73:f5:a7:89:c3:72:c5:a5:c2:29:c5:71:86:d7:
                    5f:56:e8:af:c2:db:0a:85:e6:b7:aa:d5:9b:e3:8f:
                    dc:d4:8f:e7:df:90:d5:e1:8b:05:57:02:a5:39:f0:
                    66:fd:42:67:be:d5:1f:05:e0:2b:56:0d:23:e3:5f:
                    10:70:12:3f:a9:82:b3:a9:11:15:e4:e1:da:70:b3:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F8:DC:5B:69:19:8A:FB:3B:C5:7D:C9:87:F2:5A:16:AE:64:3F:6E
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:ee:b8:bd:01:4a:c0:83:f6:04:fe:56:a6:49:4c:3e:b5:
         4f:d6:ea:6c:a8:63:94:9d:15:8c:c4:e0:37:41:e3:ec:65:b8:
         82:88:4e:e9:36:62:33:cf:6e:b2:1f:20:f7:1e:c3:ec:9e:6e:
         a1:08:57:01:af:f3:08:1f:63:c3:d9:a2:d0:fe:f4:b4:81:70:
         c0:88:70:84:0d:19:3a:1e:85:82:91:05:13:94:77:cb:a4:5d:
         ad:6a:7d:93:28:c1:06:32:0a:fd:6c:51:27:d6:bd:7e:fd:15:
         50:df:4f:61:6b:37:8b:2c:a8:78:f6:6f:cf:f5:d8:1b:8b:4c:
         2b:6f:fd:5e:b9:b3:49:db:4f:c8:2f:bf:13:27:52:b8:b5:36:
         ff:da:88:a0:30:64:2b:ec:b5:3c:b8:0d:51:e0:01:52:dd:2a:
         e0:30:89:20:21:cd:5b:1b:47:bc:e2:1e:62:a8:f7:2f:35:e3:
         3d:ae:82:1b:f0:4d:25:ea:9a:7e:35:b7:87:7f:2a:40:87:6b:
         0c:a6:0c:aa:e6:d9:31:59:5e:c7:b2:ba:66:95:75:db:52:49:
         3f:e3:73:83:23:e3:ea:2c:af:2f:cf:94:1b:cb:7a:6d:ae:19:
         d5:c5:63:2d:15:42:3e:ef:75:42:da:05:44:7b:ca:a5:7c:91:
         df:80:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----