Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3137302e3234372e3137322e302f32322d3234203d3e203438343635.roa
File:                     3137302e3234372e3137322e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          dNqgiMC8bNwuhrgcBbnqOOqKJhR1PRAW/4kDGfmn5Rc=
Subject key identifier:   D4:AA:91:40:70:C7:3F:A1:D8:CC:7F:0C:6B:2E:1E:FC:EE:4C:D2:12
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       62D01FCE7A970CCCBEE8AC9C8DDCAAA5B1E6A4B3
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3137302e3234372e3137322e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:01 +0000
ROA not before:           Mon 17 Jun 2024 01:40:01 +0000
ROA not after:            Mon 16 Jun 2025 01:45:01 +0000
asID:                     48465
IP address blocks:        170.247.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d0:1f:ce:7a:97:0c:cc:be:e8:ac:9c:8d:dc:aa:a5:b1:e6:a4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:01 2024 GMT
            Not After : Jun 16 01:45:01 2025 GMT
        Subject: CN=D4AA914070C73FA1D8CC7F0C6B2E1EFCEE4CD212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:75:dc:43:3a:71:5e:68:c7:23:56:47:ee:
                    55:08:9d:1f:82:ae:9d:e6:c0:ba:44:cc:31:17:89:
                    d5:55:5b:e9:39:be:e0:b7:45:4b:c1:df:c9:f9:a8:
                    f1:1f:36:23:b9:fc:c7:dd:e9:67:e3:a0:43:be:d8:
                    45:47:83:e7:4b:71:1a:39:3a:8b:7c:f6:17:c3:5d:
                    76:bd:aa:4d:d4:b0:0d:4b:32:75:c5:d7:09:88:47:
                    8a:85:2a:2a:40:cb:32:f0:ca:21:b7:ae:7f:48:fd:
                    52:4d:20:35:e4:29:60:2e:c1:2c:14:fe:ae:52:ca:
                    44:d8:43:61:e0:01:b2:2a:46:15:dc:2c:71:41:5c:
                    c9:f0:78:6f:ce:c6:b7:c8:26:7c:d0:0c:6e:68:b0:
                    20:6f:b5:0e:de:b6:6f:9b:01:da:98:5d:90:bf:79:
                    98:15:3f:62:ed:fa:11:65:1e:a9:6b:f4:3f:7f:35:
                    40:ec:12:52:2b:fd:8b:3d:54:36:31:ce:df:6f:88:
                    47:e0:dc:69:d1:b6:45:be:91:e9:1a:25:91:fb:dd:
                    a6:05:71:e7:97:bf:fd:97:68:6c:8c:6a:0a:0f:be:
                    d2:fe:43:fc:9a:d0:f2:63:bb:67:69:74:e2:e5:94:
                    a1:c2:65:27:70:6e:bc:ec:e6:d0:b2:14:32:16:e2:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:91:40:70:C7:3F:A1:D8:CC:7F:0C:6B:2E:1E:FC:EE:4C:D2:12
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3137302e3234372e3137322e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:eb:7d:21:39:55:82:a8:67:e0:32:f9:da:05:c9:35:2a:
         f4:8f:43:47:dd:8a:99:fc:ed:4d:03:30:bc:65:e6:01:a3:bc:
         7c:47:0a:99:81:b5:a6:19:a5:82:3f:4c:42:d9:8b:f0:32:ce:
         03:b7:c7:63:f9:d7:6b:a6:d2:43:c3:24:01:9d:da:07:6f:eb:
         70:8e:43:5c:ac:04:87:99:5f:51:13:2d:a9:13:16:da:54:c1:
         a0:57:84:a1:17:a8:6e:23:40:4e:4f:20:c5:54:ee:89:ce:61:
         3a:24:ce:13:2d:0c:ab:b8:75:2a:f6:b2:74:e5:ef:16:77:33:
         cc:36:1e:bb:9f:ba:1e:d1:09:8d:1a:cd:a3:7d:72:ac:16:b4:
         03:a2:2e:c1:c1:3d:da:7c:84:81:9a:1c:57:0d:18:bb:52:5c:
         8b:7b:9e:e6:7d:d0:bd:93:12:ba:36:36:06:14:ff:7f:b6:ec:
         eb:3b:fc:b0:6f:ad:5a:d3:9a:3b:f1:94:60:90:dc:8d:62:a2:
         42:6a:fe:a6:96:dc:69:f8:d4:bd:b9:a6:2f:26:a2:64:b2:bf:
         bb:50:45:a9:a0:55:ca:d0:b5:68:09:61:06:a8:fc:71:4d:8c:
         3f:a3:bc:8c:56:f1:95:50:fd:2f:7d:d1:a8:62:8f:47:21:24:
         dd:9f:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----