Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa
File:                     3137392e35302e32352e302f32342d3234203d3e20323635363832.roa (raw, json)
Hash identifier:          H/tV0dHD/lhSmt8kD2bJgLGrKHZYLajHYVGvzsCyAEw=
Subject key identifier:   94:65:A1:D9:66:5E:C2:BB:C7:D2:2A:17:D6:87:1F:4E:B3:88:49:2F
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       657A6EB34A4542E99499BC0A9D29B04D5BC505E1
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     265682
IP address blocks:        179.50.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7a:6e:b3:4a:45:42:e9:94:99:bc:0a:9d:29:b0:4d:5b:c5:05:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=9465A1D9665EC2BBC7D22A17D6871F4EB388492F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:11:87:1e:ca:a1:50:77:98:3c:a5:0c:b7:
                    a6:5a:42:f4:15:41:8a:7f:a3:ba:1f:a0:62:20:fd:
                    4d:97:d8:69:50:97:ef:8d:93:34:80:b5:fe:45:6b:
                    8e:da:66:d5:9e:40:4a:cd:c8:0a:7b:b9:82:32:3f:
                    a5:2e:79:62:06:3a:f7:4a:55:e3:56:9e:7a:01:3c:
                    d7:08:7c:9f:a7:4d:45:cc:5c:f8:89:2c:27:01:66:
                    d9:7b:3f:81:ea:7e:cc:81:e9:73:28:cb:d6:be:29:
                    a5:17:7c:20:df:d5:a2:a3:49:78:ea:1b:0a:8c:13:
                    f5:8f:55:45:19:79:ba:92:d2:f0:11:32:1c:e3:02:
                    de:37:e0:bd:b0:a8:06:25:56:e5:1c:22:70:a3:32:
                    b2:e5:35:25:df:4c:a8:80:fb:7f:a0:00:5f:aa:cd:
                    f9:e0:e5:0d:62:46:ff:e5:64:ac:f4:09:cb:48:d9:
                    64:48:94:36:56:d9:99:19:a6:e8:f9:26:6e:7a:73:
                    17:52:51:ce:16:32:4c:b2:21:a9:c2:d8:a3:3b:21:
                    87:91:83:b4:bb:7f:e3:e7:fc:49:07:1f:3c:8e:37:
                    1c:3d:d8:1e:96:dd:d2:dd:87:17:01:25:b7:8b:9d:
                    9c:da:f9:56:cc:7a:2d:26:c4:32:2e:27:98:43:c8:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:A1:D9:66:5E:C2:BB:C7:D2:2A:17:D6:87:1F:4E:B3:88:49:2F
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:7f:2d:5a:c8:fc:a0:bb:a5:0f:62:61:02:67:27:5d:8e:
         22:1e:fa:4d:e5:fc:83:04:fb:6a:81:44:47:7c:54:67:8b:84:
         98:8b:b4:ca:04:fa:e7:a5:bc:4b:87:16:d4:7c:cf:d9:ac:7a:
         bd:d4:20:64:7f:6d:f5:69:33:e6:e1:48:04:cb:97:28:12:ad:
         fa:2b:be:47:43:1a:02:27:b6:a3:f3:3b:4c:67:05:ee:78:5e:
         b4:1b:6b:b1:a5:e3:bb:28:72:91:77:6a:09:f5:c9:78:87:0b:
         06:cb:07:1b:74:76:e9:12:20:cc:3a:f6:fc:84:4f:db:60:df:
         82:96:5d:04:55:21:9d:1b:16:f8:da:c6:5e:67:76:df:80:d5:
         da:62:9d:4f:03:f2:8b:67:ee:d7:3f:02:10:9a:dd:df:7b:b7:
         67:fb:bf:59:16:92:e7:2e:00:33:bb:91:68:b8:44:f0:b8:f6:
         d4:71:81:19:88:fc:06:14:c6:53:d4:88:fb:0c:c7:d7:67:37:
         68:ca:1f:86:43:5a:03:0b:91:1d:02:f4:d9:21:8d:90:50:f6:
         0e:ad:01:30:c9:b1:16:3f:d2:a1:48:db:a2:03:f0:ca:e2:bb:
         f5:78:cc:9d:e0:64:62:90:65:1c:38:40:e9:9b:1f:d8:5c:0f:
         3c:85:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----