Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e302e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          ZU3BdURMp42v86rrB5uyjEkQ3kYiLEwzY8iIMu278/c=
Subject key identifier:   68:E5:DA:5A:D9:4E:14:EA:23:72:FB:26:C0:AA:59:23:C6:42:D7:ED
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       2AD950D1B9B3C70637179FF2AF7D1BCA85AF15AD
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     26619
IP address blocks:        179.50.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:50:d1:b9:b3:c7:06:37:17:9f:f2:af:7d:1b:ca:85:af:15:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=68E5DA5AD94E14EA2372FB26C0AA5923C642D7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:bd:1c:06:ce:27:5f:34:d0:56:50:c9:7e:
                    b1:59:a4:eb:ad:89:55:4a:5d:ff:eb:b2:9d:c1:bc:
                    22:ee:92:fc:3c:5a:4b:d5:a5:e3:39:5e:a0:54:a4:
                    9f:6d:97:64:8a:e0:6c:ff:f0:07:0b:2b:a5:15:03:
                    d4:10:6c:a1:2e:b8:f3:fb:5c:f3:30:e7:8a:53:af:
                    31:73:1e:d4:1d:a5:5e:71:e8:d1:19:be:a9:72:9c:
                    2d:15:ec:2a:56:15:3b:3b:be:d7:fb:48:00:9b:3e:
                    63:af:d4:96:49:a5:1a:b7:d5:ca:2d:d3:24:f0:25:
                    61:43:b2:7f:f8:77:13:28:51:cf:58:45:3c:0b:71:
                    c9:8c:bb:6a:5d:8d:27:25:94:2a:ee:33:4a:03:0c:
                    02:b5:60:f5:2d:dc:dd:52:f8:fa:8a:00:d1:b2:2a:
                    5d:30:45:a0:f1:40:22:67:46:42:1b:58:1f:d2:27:
                    54:54:cd:69:49:7b:68:c0:46:2d:d1:c3:45:dd:4a:
                    b7:0a:bf:e8:3c:69:0c:17:34:ac:7c:c6:d5:56:dc:
                    47:31:6c:fc:16:8c:7e:04:00:b1:4c:30:65:a3:9a:
                    a6:c2:46:55:a1:d2:ab:60:5b:e8:34:22:e8:e1:3a:
                    27:78:52:cc:70:6f:92:4f:59:ed:90:9d:77:8f:0d:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:DA:5A:D9:4E:14:EA:23:72:FB:26:C0:AA:59:23:C6:42:D7:ED
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e302e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:73:c4:d4:88:8a:85:08:8b:22:33:b4:b9:36:66:4a:58:8a:
         7a:38:4e:b0:cb:e6:84:92:76:5d:2e:cc:f7:6b:42:5f:9f:4e:
         1a:4a:a5:e9:7c:27:88:b6:bf:55:d7:5d:e7:dd:35:f7:13:ab:
         8a:ac:82:6a:dd:c2:a3:b5:07:38:54:9a:48:73:f5:5c:79:7d:
         c7:ec:0b:f0:e8:03:f8:8b:e6:28:93:06:66:67:13:03:76:79:
         17:c7:81:42:5d:9c:4e:15:8b:e4:46:9f:30:31:bc:fd:e2:68:
         03:0b:cb:fe:09:88:5b:5b:e8:73:36:7c:0e:f4:96:64:c9:42:
         51:42:01:d7:15:b8:20:65:51:16:d4:da:fb:35:22:46:72:b6:
         a8:fb:ee:d6:28:1f:92:cf:b9:c5:8c:fa:ca:a7:23:f7:ad:40:
         66:fc:89:e9:b7:98:2d:5f:6c:89:ca:b6:84:f0:2d:3f:22:34:
         47:4e:19:f5:4d:87:dd:c2:8e:84:27:1a:72:b1:f5:36:48:82:
         13:26:a1:8e:40:ca:be:ed:90:b5:90:67:93:f3:df:d4:2c:fc:
         10:23:26:d4:a4:6f:01:7c:5f:f9:3d:0c:99:fa:a4:0c:6f:ae:
         46:72:d3:c4:f9:7f:71:1f:04:b2:eb:68:b5:71:bc:22:0f:03:
         63:43:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----