Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3131322e302f32312d3231203d3e203236363139.roa
File:                     3137392e35302e3131322e302f32312d3231203d3e203236363139.roa (raw, json)
Hash identifier:          P6enPMGk1BBs40TvINEd0wbFkU7MS5Rt+TQWqZ/lmoU=
Subject key identifier:   7E:D3:3A:D2:49:90:CE:BF:26:B8:35:E3:0E:7B:95:F2:04:DC:7B:5E
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       3E61EA602143873361986FFC33704EAA43CDA58A
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3131322e302f32312d3231203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     26619
IP address blocks:        179.50.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:ea:60:21:43:87:33:61:98:6f:fc:33:70:4e:aa:43:cd:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=7ED33AD24990CEBF26B835E30E7B95F204DC7B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:01:2b:52:ae:68:29:5e:06:9d:8b:5f:a9:
                    dc:9a:2d:1e:47:31:db:57:39:03:15:f1:82:0a:3c:
                    08:e2:2c:cf:e5:5b:be:3b:e0:5d:fc:5a:8e:fa:8a:
                    35:e4:be:1a:d3:a7:82:a7:b6:56:15:87:d9:1c:84:
                    a7:6b:52:65:ec:38:6e:25:e7:9a:fc:6f:42:c9:7e:
                    04:86:57:f5:ad:44:56:a0:2f:3a:ce:ac:72:1a:c0:
                    74:a8:64:29:dd:3d:a2:c9:c1:7d:14:d7:8c:ec:58:
                    b3:e9:ab:18:0f:04:42:0f:82:e7:3e:82:06:8f:54:
                    1f:02:a7:b7:a2:4d:54:a6:ce:d4:ef:e9:df:ee:bb:
                    b5:2c:e1:ff:9f:ac:46:84:50:0f:6c:18:b4:98:59:
                    81:1e:18:a0:79:df:bb:49:8e:68:0a:05:a7:d0:10:
                    22:51:fe:f8:b8:bc:32:0b:b1:e6:fe:4b:ae:59:cb:
                    6f:64:80:63:38:c6:41:7f:79:41:21:c5:60:eb:dc:
                    b2:f9:ad:08:b6:f0:cd:99:eb:7e:36:e9:26:34:f5:
                    3b:4b:76:58:70:56:54:3f:f2:c7:c5:9d:49:02:54:
                    36:fd:2c:04:40:c8:73:39:3d:87:b9:f8:cb:98:89:
                    77:5a:40:d5:ff:14:87:6b:18:a2:eb:87:df:2c:e1:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:3A:D2:49:90:CE:BF:26:B8:35:E3:0E:7B:95:F2:04:DC:7B:5E
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3131322e302f32312d3231203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:e0:5a:36:ac:9c:6c:10:9c:8a:fc:7e:e5:a4:5f:69:76:
         2a:d3:ed:ba:8a:e0:df:85:10:a5:b9:4c:f5:06:ea:48:31:01:
         ce:3c:b2:10:2f:3e:be:54:f9:ad:b7:cb:3d:87:7e:99:6b:a0:
         3d:c7:f4:17:6f:01:28:17:e6:54:fd:3c:63:b7:64:03:38:79:
         ba:92:24:c3:5c:db:c8:4d:81:39:50:be:8e:e3:a1:5e:53:d3:
         04:f4:46:bf:6f:02:6c:0f:ea:dc:64:1c:53:d0:13:22:87:24:
         b5:00:10:45:ad:d5:67:89:b8:9c:42:70:e0:a1:59:85:d0:28:
         36:2f:ff:4b:85:04:16:91:58:c2:c5:23:f9:9d:f3:54:75:a9:
         69:97:e9:3d:dd:30:ea:5e:4b:da:c8:b5:be:6b:54:bb:66:d8:
         3e:ba:1a:ac:34:ae:0f:a4:81:64:ec:12:3c:08:97:5f:11:28:
         06:71:ff:a5:77:45:21:d2:81:71:90:af:1f:49:ab:fd:0f:d4:
         49:21:a4:35:02:a6:ca:f9:6c:c7:9b:f4:48:53:75:99:1c:f2:
         ef:55:37:de:f8:cb:e1:bd:82:1c:cd:00:79:28:27:bd:f8:1b:
         d6:8f:60:6d:8c:47:02:a2:9e:e5:9a:c9:aa:41:6a:ca:7e:8e:
         d2:46:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----