Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37322e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e37322e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          Bpr+GzvhbwPdk+A9VahjrSFpd4eEcX00CRDnDbhE1pA=
Subject key identifier:   BB:74:D2:30:4F:FA:C6:B2:E9:01:35:29:2C:A2:D6:34:30:10:EA:A8
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       17F0D8692E2C7E3EB9077FBB75491EE65AB75B4F
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37322e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     26619
IP address blocks:        179.50.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f0:d8:69:2e:2c:7e:3e:b9:07:7f:bb:75:49:1e:e6:5a:b7:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=BB74D2304FFAC6B2E90135292CA2D6343010EAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:94:23:b4:c5:6b:92:4d:a5:6e:5a:e0:d3:
                    6b:ec:f4:b1:7a:0d:d3:2a:53:ea:aa:18:3d:9d:6e:
                    f6:3d:b4:72:c0:e3:37:53:a1:4b:4a:b8:44:8d:7c:
                    a1:1d:24:66:54:e1:56:be:c6:0c:67:ce:fb:37:5b:
                    84:9e:de:c6:13:99:50:d6:1c:05:7e:74:78:e1:fe:
                    8a:7d:f4:e8:fc:c6:36:27:1c:f0:7d:77:b0:ba:66:
                    ae:ba:25:f2:2c:88:54:4b:6d:ef:4c:c9:ef:4c:4e:
                    31:66:de:c2:8d:75:56:85:48:70:6b:98:e7:d5:0a:
                    e7:61:85:1a:f0:dd:de:a7:d2:e0:47:24:27:04:de:
                    f6:82:f5:dd:44:3d:a0:b6:ed:39:c2:34:b2:fd:38:
                    24:71:88:60:12:b6:90:a7:56:30:90:70:6e:9d:8c:
                    0d:1d:3a:87:f5:2a:28:89:0f:7f:b5:ce:2e:7a:2c:
                    a2:c9:46:38:27:54:f0:23:2e:96:5a:35:4b:b2:87:
                    27:de:f2:27:d6:df:0c:8d:9e:0a:f6:5d:a8:7b:8e:
                    86:38:f0:46:36:20:ee:d6:85:c1:1e:e5:13:68:f0:
                    1c:a1:8b:0d:19:08:c8:1a:d6:d2:f5:06:80:75:a3:
                    ff:59:34:7b:39:a3:fe:09:fb:e6:a0:fb:08:7c:aa:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:74:D2:30:4F:FA:C6:B2:E9:01:35:29:2C:A2:D6:34:30:10:EA:A8
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37322e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:2b:7b:fe:65:09:0c:2a:a5:ee:66:65:3c:a2:b8:76:9e:
         65:e0:92:04:a0:12:78:38:9c:07:b3:95:0a:d6:92:7c:9b:95:
         6d:d9:25:17:1d:ad:e6:8a:39:fc:9e:06:42:7a:2d:68:90:6b:
         d1:ca:0a:a8:96:f2:64:ad:01:fd:08:1c:c3:a5:33:7d:fe:4f:
         c3:d0:c0:e0:d4:b7:bd:c4:a6:80:bb:1a:30:8f:3a:e2:65:b5:
         1c:9e:84:ee:5b:b1:04:3b:f0:bd:f2:7d:63:93:4f:9d:c7:bf:
         42:bc:2d:de:ed:61:c6:ca:7f:4c:2f:26:ed:3b:26:19:2b:e6:
         ef:98:fd:ea:7c:6a:0e:98:4a:90:d6:78:97:a7:11:2d:71:88:
         5e:20:90:a1:f6:69:09:4d:bf:ec:6e:e4:a7:7a:44:70:82:29:
         69:eb:7a:39:8f:e7:27:dd:46:7e:f9:bd:84:78:97:aa:a0:53:
         9e:84:6a:25:a9:99:64:70:76:89:cf:55:fe:24:b7:cb:16:27:
         9d:b2:60:2b:94:b3:96:f6:a5:f7:a3:7a:53:c0:13:71:87:41:
         4e:b4:a8:9b:d9:4d:94:29:9b:44:6d:17:96:ce:ee:d4:71:b0:
         72:f6:9f:11:8c:ec:c3:a3:8c:58:e9:6e:62:97:8b:67:47:2e:
         44:65:f9:86
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUF/DYaS4sfj65B3+7dUke5lq3W08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg2QjBCRTU0NDVFMjNDOEQxMzZCRDBCMDRDRENCQzBF
N0UzMUVGRjAeFw0yNDAzMDUxNzUxNDJaFw0yNTAzMDQxNzU2NDJaMDMxMTAvBgNV
BAMTKEJCNzREMjMwNEZGQUM2QjJFOTAxMzUyOTJDQTJENjM0MzAxMEVBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtpQjtMVrkk2lblrg02vs9LF6
DdMqU+qqGD2dbvY9tHLA4zdToUtKuESNfKEdJGZU4Va+xgxnzvs3W4Se3sYTmVDW
HAV+dHjh/op99Oj8xjYnHPB9d7C6Zq66JfIsiFRLbe9Mye9MTjFm3sKNdVaFSHBr
mOfVCudhhRrw3d6n0uBHJCcE3vaC9d1EPaC27TnCNLL9OCRxiGAStpCnVjCQcG6d
jA0dOof1KiiJD3+1zi56LKLJRjgnVPAjLpZaNUuyhyfe8ifW3wyNngr2Xah7joY4
8EY2IO7WhcEe5RNo8Byhiw0ZCMga1tL1BoB1o/9ZNHs5o/4J++ag+wh8qmq7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUu3TSME/6xrLpATUpLKLWNDAQ6qgwHwYDVR0j
BBgwFoAUSGsL5UReI8jRNr0LBM3LwOfjHv8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEE3NkEzN0NDRERBNjBGQUEzODA2RjU1MEY1NDcyM0Iy
MDUxRjdGNDBBNkJBRUJGMUQ4NjVFQzM1OTFCODBELzAvNDg2QjBCRTU0NDVFMjND
OEQxMzZCRDBCMDRDRENCQzBFN0UzMUVGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODZCMEJFNTQ0NUUyM0M4RDEz
NkJEMEIwNENEQ0JDMEU3RTMxRUZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBBNzZBMzdDQ0REQTYwRkFBMzgwNkY1NTBGNTQ3MjNCMjA1MUY3RjQw
QTZCQUVCRjFEODY1RUMzNTkxQjgwRC8wLzMxMzczOTJlMzUzMDJlMzczMjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOzMkgwDQYJ
KoZIhvcNAQELBQADggEBAJ/SK3v+ZQkMKqXuZmU8orh2nmXgkgSgEng4nAezlQrW
knyblW3ZJRcdreaKOfyeBkJ6LWiQa9HKCqiW8mStAf0IHMOlM33+T8PQwODUt73E
poC7GjCPOuJltRyehO5bsQQ78L3yfWOTT53Hv0K8Ld7tYcbKf0wvJu07Jhkr5u+Y
/ep8ag6YSpDWeJenES1xiF4gkKH2aQlNv+xu5Kd6RHCCKWnrejmP5yfdRn75vYR4
l6qgU56EaiWpmWRwdonPVf4kt8sWJ52yYCuUs5b2pfejelPAE3GHQU60qJvZTZQp
m0RtF5bO7tRxsHL2nxGM7MOjjFjpbmKXi2dHLkRl+YY=
-----END CERTIFICATE-----