Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa
File:                     3138362e34302e302e302f31362d3234203d3e203237363830.roa (raw, json)
Hash identifier:          KWv0HSGdy6qBLHNvNEyIMF6dYxzMTtP1e9NGJ4K0np0=
Subject key identifier:   12:25:43:97:44:98:8E:F3:28:62:DE:3B:54:94:38:E8:37:46:BC:07
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       7142B5F6E7E28AD0D4D459A0F14939A6D482F3D7
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa
Signing time:             Tue 04 Feb 2025 18:12:57 +0000
ROA not before:           Tue 04 Feb 2025 18:07:57 +0000
ROA not after:            Tue 03 Feb 2026 18:12:57 +0000
asID:                     27680
IP address blocks:        186.40.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:42:b5:f6:e7:e2:8a:d0:d4:d4:59:a0:f1:49:39:a6:d4:82:f3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:57 2025 GMT
            Not After : Feb  3 18:12:57 2026 GMT
        Subject: CN=1225439744988EF32862DE3B549438E83746BC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:67:07:fe:ef:00:97:97:6e:60:68:01:ac:
                    d5:b4:0d:d1:71:9e:f0:9a:c1:d0:78:61:5e:67:fc:
                    66:87:92:97:67:5b:a3:d2:1b:0c:64:eb:8a:1d:d8:
                    e3:5d:51:1a:dd:bd:c0:11:62:8e:e5:44:aa:66:9e:
                    a8:22:3c:4b:39:cd:18:1a:be:b3:78:97:b2:d2:47:
                    c0:65:d9:10:f1:f0:83:0f:5b:9e:1f:82:47:ed:c8:
                    91:8f:68:b2:45:0c:8f:45:c3:b3:42:eb:62:08:30:
                    42:29:53:72:3a:58:99:77:71:dc:ea:a9:aa:e0:c5:
                    21:ee:45:ea:d7:56:47:d3:35:4d:41:34:c2:40:89:
                    a7:32:51:e4:28:14:51:72:92:2c:00:45:b1:31:11:
                    79:ee:3d:ef:e4:35:5f:48:95:23:2f:6f:30:4a:9d:
                    8a:3a:b5:7a:d4:7a:99:c7:8e:dc:64:75:78:8d:6f:
                    95:23:54:d7:f1:56:dd:7c:7d:05:1a:89:b0:36:53:
                    2c:c7:9a:56:77:a8:8d:90:36:70:7f:50:ea:a2:c9:
                    e1:3e:a4:11:e2:43:65:c2:c1:58:9a:03:08:1b:24:
                    6d:18:e6:0e:2c:60:aa:3c:98:78:3b:88:dd:c2:27:
                    43:43:04:04:e8:04:b5:a5:37:83:14:ff:fb:2e:bb:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:43:97:44:98:8E:F3:28:62:DE:3B:54:94:38:E8:37:46:BC:07
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:d2:b3:fa:1d:bd:79:c9:25:c8:aa:99:08:13:8e:9f:34:
         75:43:b1:24:fd:09:e7:13:a6:2f:77:91:0b:b2:bc:36:c5:12:
         35:af:3a:18:d0:0d:c4:33:39:4e:6f:da:1c:e9:df:2c:4f:8f:
         b7:ae:2c:8a:35:87:c4:98:14:5b:4d:b2:14:d8:5e:ce:d7:a5:
         b3:6a:07:92:82:64:61:22:46:b0:98:a4:c1:42:50:de:66:dd:
         86:72:81:df:f0:6b:30:a7:44:9f:dd:3a:b1:cd:41:7a:fc:0c:
         8c:6e:b0:e3:de:77:d0:3d:7f:9f:73:44:8a:34:9e:8a:cb:32:
         f1:a1:3a:91:88:32:4a:e1:45:b4:66:60:c7:72:cb:7b:b8:a0:
         3d:a5:b0:72:9e:91:34:65:ba:db:8f:63:7c:05:a1:73:79:3a:
         a9:1b:c9:07:d8:9b:de:02:62:f6:7d:c8:2d:df:e2:27:a6:1b:
         e7:f2:34:12:c9:25:c1:c0:1f:cf:04:f1:98:88:7c:17:78:ad:
         ed:7e:1f:a4:d4:c9:90:49:fa:ce:f1:7d:c5:3b:9b:f4:4b:31:
         79:a8:e7:c3:00:bb:39:d8:4d:e6:76:d4:c8:92:73:2b:49:45:
         9d:89:40:5f:1c:a1:fb:46:d4:68:0e:25:4b:e6:1e:f5:f5:00:
         01:7f:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----