Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e382e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e382e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          UgN9+3p3/rtk9sIMDbtRycdxlwjmcd8pwptz6hTnDQk=
Subject key identifier:   B9:B5:F3:D5:43:2A:AB:AA:95:29:4F:10:10:05:16:CA:F9:2B:8A:10
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       56035D510E8A386B6A417D4AAF462F4FD2151D29
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e382e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     26619
IP address blocks:        179.50.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:03:5d:51:0e:8a:38:6b:6a:41:7d:4a:af:46:2f:4f:d2:15:1d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=B9B5F3D5432AABAA95294F10100516CAF92B8A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:18:fd:bb:9a:5e:22:e1:75:25:f8:8a:1e:
                    da:86:66:64:87:b2:8b:8e:2d:ed:e8:93:4f:e8:a5:
                    c9:e5:e2:49:13:2d:d2:bd:ef:16:37:9f:b9:75:8a:
                    d3:00:71:ac:2f:ce:94:cf:02:0a:1d:52:1b:70:f7:
                    14:8a:21:81:c9:3b:4a:f7:9d:9d:a1:ed:55:b6:d1:
                    c0:a3:3c:60:4c:df:8e:06:58:82:8b:d4:33:4c:15:
                    9a:93:c6:a1:5a:dc:be:43:14:5c:8b:15:1d:22:f7:
                    75:3d:da:70:a0:97:67:8c:c3:90:3f:c2:c6:2d:d1:
                    97:63:8d:a8:1c:f5:5b:a1:e0:fc:12:89:bd:94:49:
                    f4:70:f9:91:8c:1b:00:14:c2:c0:05:fd:e4:b7:39:
                    a4:8c:56:5a:a4:c4:5d:dc:5e:68:29:ba:85:9b:c6:
                    14:b5:7f:51:d7:af:46:b1:d3:53:ae:51:72:70:b7:
                    17:4a:93:ef:7b:93:88:8e:f3:d0:35:fc:ba:fb:46:
                    04:01:44:bc:b6:ce:f4:30:17:0f:e5:05:eb:86:09:
                    0c:33:19:d1:67:3b:b3:10:60:92:14:d7:9e:73:50:
                    3d:4e:90:75:16:6f:2c:0e:92:47:44:84:ca:1c:cd:
                    63:10:1f:13:b9:a8:64:d8:a7:95:31:95:40:cb:52:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:F3:D5:43:2A:AB:AA:95:29:4F:10:10:05:16:CA:F9:2B:8A:10
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e382e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:83:66:90:15:b3:ad:4b:f6:8e:19:11:ab:e0:b9:41:8b:73:
         30:ef:0c:39:f9:29:31:fe:37:27:47:74:58:5b:1e:ce:cd:74:
         a5:73:7a:70:d8:57:a1:ce:3b:bc:a3:30:22:e8:2b:83:0c:f2:
         b6:fd:cd:65:08:31:e8:08:2e:28:d3:f0:28:ee:e1:06:e3:73:
         3b:63:ac:12:8c:63:01:97:b3:e5:36:1c:62:24:e5:48:58:b3:
         9b:53:a6:f6:e9:6f:75:0d:8a:77:8a:27:7f:6f:f2:ff:30:92:
         e5:76:e1:0f:3a:48:2a:0d:4b:dc:41:24:65:ca:67:14:ba:3a:
         ee:70:2f:3b:9c:ef:7e:ed:2a:78:3f:b7:98:50:26:da:b9:98:
         48:8b:7e:fd:2f:74:1b:a1:b6:f8:ef:5d:0d:9f:6b:a0:6f:70:
         5a:84:c3:0f:76:7a:ac:2b:fc:a9:b9:58:d1:c7:d5:c3:7c:d9:
         c5:ca:3f:ac:3b:c5:83:fd:80:f7:b6:88:a4:b8:74:63:9a:fe:
         aa:15:e8:13:5c:b7:9e:af:f5:51:3e:20:e2:b5:77:22:16:4e:
         4e:71:f7:79:ff:7f:81:53:09:2e:6c:e7:f8:75:fd:29:d3:7e:
         9f:dd:7c:7a:79:5a:15:2a:bb:0a:e8:2b:6a:92:02:a3:b2:cd:
         37:b4:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----