Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3132302e302f32312d3231203d3e203236363139.roa
File:                     3137392e35302e3132302e302f32312d3231203d3e203236363139.roa (raw, json)
Hash identifier:          Ob1obTBKmgkB2iCbYhyQcSa26Y4k4M1G8XZ8llUnwEY=
Subject key identifier:   B6:C6:BB:EC:CA:40:36:5C:89:EF:79:1C:38:1F:07:D7:C5:F5:9E:9A
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       3018FA70E5756C41093FDC0F330EEE5C4335DC33
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3132302e302f32312d3231203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     26619
IP address blocks:        179.50.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:18:fa:70:e5:75:6c:41:09:3f:dc:0f:33:0e:ee:5c:43:35:dc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=B6C6BBECCA40365C89EF791C381F07D7C5F59E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:e2:4b:c3:03:d5:9c:cc:7e:d7:b8:e5:56:
                    da:2b:2e:ae:84:4b:a3:ce:a5:4e:2f:d9:71:4b:92:
                    d4:ec:34:c3:a4:ae:f7:d6:be:2f:88:b4:c8:af:8b:
                    c9:df:d9:80:37:a6:fc:52:19:07:3b:0a:2a:5e:d8:
                    5c:68:76:74:da:11:8a:bc:9d:1c:9e:fc:63:ee:3a:
                    c7:f4:06:b1:26:30:2a:dc:b4:f6:6a:be:09:99:a3:
                    e5:3c:30:45:05:b8:1c:eb:ad:e8:da:98:43:69:d4:
                    74:c9:0a:c1:e0:ea:19:ee:d9:64:32:f3:b9:9e:ae:
                    6a:de:4e:bb:f6:53:b3:3e:3e:3c:25:1f:69:5b:5f:
                    a2:2e:49:ec:62:83:38:ea:a0:86:40:c5:17:88:d6:
                    2e:0b:bc:a7:05:c1:eb:76:4f:83:aa:87:58:52:bf:
                    29:7c:ff:99:e4:56:62:91:72:0b:d3:e0:ff:1e:29:
                    71:f8:0c:f5:9b:bf:ed:94:bf:cd:21:d8:1c:7a:fa:
                    79:b0:4d:e3:bc:23:38:e1:3c:29:fa:b7:17:59:d0:
                    37:fb:be:95:ee:e3:72:3a:d9:e1:02:3a:28:5d:25:
                    25:2b:76:52:2b:7d:ba:9a:09:88:ec:1c:5b:9b:83:
                    83:33:3f:3f:60:7c:bc:cd:f2:1d:52:1f:bd:53:54:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:BB:EC:CA:40:36:5C:89:EF:79:1C:38:1F:07:D7:C5:F5:9E:9A
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e3132302e302f32312d3231203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:41:4b:a2:17:a2:16:6f:39:60:db:01:d4:67:06:4d:e2:
         53:7a:20:49:17:26:44:34:5f:ba:c2:de:6a:fb:d2:ee:08:f3:
         e0:09:ea:7b:3b:ce:e3:ea:c9:bf:15:be:bd:d1:8a:4b:b5:c9:
         4c:17:5f:31:11:71:e7:cd:c2:e8:c9:fd:bb:57:b6:f3:ae:9c:
         6a:07:99:40:37:51:1f:ea:f0:7b:01:6a:66:27:a0:fe:18:88:
         7c:2d:7e:c7:36:a5:78:d6:18:06:97:21:3f:47:8a:b9:b9:93:
         86:c6:10:65:56:b1:b3:54:03:c9:af:d4:e2:b9:0f:e0:bf:81:
         de:35:80:75:10:c3:35:19:1b:bc:2b:27:24:b9:7b:ea:7f:ef:
         28:19:1a:c5:eb:39:ac:80:c2:f1:f5:20:c8:9d:f0:1b:c4:f6:
         7a:be:65:92:2c:6b:49:7d:00:2f:6e:18:55:90:48:08:d0:c3:
         7e:23:d6:a6:19:51:36:34:c3:cb:70:bf:45:6c:73:f5:44:5c:
         88:0d:ea:ad:7e:b0:9a:2d:f1:1b:1b:1f:00:f6:ca:ad:ff:ce:
         25:ef:66:4a:c0:0b:0b:8d:df:b7:4a:58:1a:ce:20:0e:5b:5f:
         d4:19:37:1d:2c:2e:cd:b9:ad:9d:8e:bb:16:17:55:a0:c6:d0:
         9b:fe:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----