Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa
File:                     3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          xSR9rKNMGIjSVsNyQObWIIYn4kiELi9ZFQdKQDpOs9k=
Subject key identifier:   68:06:62:37:FC:37:3E:6D:5C:C2:40:2C:E0:9D:F7:79:86:4D:54:A1
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3762106882E03B1979E9FE6DB1662FE172DABDCE
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:09 +0000
ROA not before:           Tue 04 Feb 2025 19:59:09 +0000
ROA not after:            Tue 03 Feb 2026 20:04:09 +0000
asID:                     16814
IP address blocks:        201.216.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:10:68:82:e0:3b:19:79:e9:fe:6d:b1:66:2f:e1:72:da:bd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:09 2025 GMT
            Not After : Feb  3 20:04:09 2026 GMT
        Subject: CN=68066237FC373E6D5CC2402CE09DF779864D54A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:01:db:8a:24:f8:02:7e:ea:5d:0a:ff:b8:
                    3b:46:ab:12:0c:4c:64:b0:8a:5b:f2:03:ad:c2:f6:
                    60:22:70:06:5d:5f:66:b8:b6:da:5c:bb:12:8c:22:
                    aa:26:2d:ed:ff:9a:1f:89:57:77:21:e7:a2:92:bb:
                    eb:ce:8a:f6:47:57:35:38:a4:16:3d:62:4c:30:2c:
                    7a:c5:6e:6e:45:9b:e8:13:e9:51:8c:6f:44:d4:b3:
                    0a:81:d2:61:ed:e8:31:6a:dc:57:1e:4f:aa:2b:34:
                    93:6a:26:ca:ac:62:89:87:78:49:a3:27:89:21:25:
                    e9:20:2e:e7:0d:63:ba:87:3d:62:a5:3b:9c:a9:2a:
                    fb:f0:c4:bd:dd:f0:26:9f:25:9b:5e:53:84:8b:d4:
                    a9:40:2c:ff:d7:42:76:03:ef:26:9a:46:89:ae:62:
                    92:4a:04:cf:f8:87:83:d9:3d:ad:15:e3:9e:3c:35:
                    f0:53:e2:05:f3:76:b5:ea:97:16:8c:0d:df:1d:9f:
                    22:2a:27:48:93:e3:74:aa:e9:13:47:df:ae:0b:f8:
                    62:59:8f:b3:f8:8c:32:30:e1:fe:5a:8f:7b:0b:fa:
                    c8:a0:62:a6:9e:77:84:ed:65:27:f9:f8:2a:4b:ed:
                    47:95:bb:35:df:7c:71:58:71:3c:82:65:6c:d3:e9:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:06:62:37:FC:37:3E:6D:5C:C2:40:2C:E0:9D:F7:79:86:4D:54:A1
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230312e3231362e3139322e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:38:25:be:20:41:2f:2e:f5:94:97:0a:87:ad:64:b9:e9:
         2d:a4:77:08:55:36:d8:57:aa:47:70:5b:73:46:ba:7c:fc:b1:
         e5:b7:c7:a2:17:f4:f0:84:0f:c8:de:ec:82:48:61:30:a7:b1:
         58:fc:df:2f:01:e1:eb:e6:4c:aa:d5:08:8f:49:0a:3a:c8:b9:
         54:2a:0d:9a:39:53:2b:c8:3e:bf:a3:24:68:11:05:63:8f:6a:
         6f:26:b7:89:03:0d:73:6e:31:6d:90:4a:38:73:f4:58:44:d0:
         a8:1d:ee:11:4f:c4:7e:74:9d:84:55:29:dc:1f:60:cc:59:0c:
         5f:d5:0d:e5:be:f3:eb:bb:d3:fa:df:3d:af:92:1c:4e:a8:d8:
         9a:3c:8a:ab:2d:a2:38:02:d4:4c:5e:2f:8a:bc:4c:6b:0c:ab:
         c3:2d:b4:d8:6f:f5:dd:e6:b6:8f:e1:de:01:5f:b3:82:a7:bb:
         04:71:4d:ff:32:be:28:79:17:2d:5b:e2:85:0d:4f:88:67:9d:
         da:42:21:19:1b:0c:d4:3e:76:7f:79:e8:74:ce:20:8e:33:d6:
         0a:06:5a:cc:5b:66:f0:8c:d5:76:0c:cf:92:58:5d:f6:e3:df:
         e3:25:da:95:64:52:be:09:db:27:01:c5:79:ee:1c:12:d4:8d:
         a3:98:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----