Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e39362e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e39362e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          eVMw2PidhXXbVnACeFJiUO2mrTV+dubIwcKoiOayQJE=
Subject key identifier:   93:CA:BA:EB:6D:55:81:32:69:B0:5C:53:2E:23:5C:82:7C:C7:7C:3E
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       1637B4340B322CF2AE9146A3CF7FCC723187F888
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e39362e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     26619
IP address blocks:        179.50.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:b4:34:0b:32:2c:f2:ae:91:46:a3:cf:7f:cc:72:31:87:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=93CABAEB6D55813269B05C532E235C827CC77C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:e2:ed:e1:f2:e2:2b:51:62:57:0c:22:9b:
                    36:e4:94:39:7f:40:72:4d:e0:3c:6f:c0:9a:1a:e5:
                    bb:1b:8f:60:23:39:9e:5c:c8:f5:56:51:b1:0a:40:
                    d3:9b:db:74:d4:9f:f5:46:7e:db:60:5c:f7:a2:57:
                    b5:4e:fc:e9:cd:6e:7d:f0:1b:34:be:7f:b6:93:4c:
                    e6:e1:c5:ee:f1:a3:c4:63:ed:74:c8:a4:ed:61:c3:
                    62:09:c9:09:64:eb:2a:3f:09:25:ff:e3:29:18:6a:
                    45:6d:4e:42:08:34:63:78:3c:8c:34:01:85:30:f2:
                    02:62:76:b7:e2:f4:52:b2:28:cb:6d:ed:c5:aa:91:
                    a4:34:7e:44:30:a5:d3:5d:5d:2e:61:8b:31:46:2f:
                    7c:d3:ad:94:2c:fa:42:72:f7:a1:bb:b4:ec:ae:78:
                    6c:bf:d4:c1:0b:c6:92:a9:5b:97:04:da:e7:d9:d2:
                    6d:67:95:90:a0:ab:bb:d4:cf:33:0e:84:84:72:6f:
                    9b:8b:0a:07:1a:a3:32:75:84:bb:da:d7:46:16:5a:
                    80:d5:07:f4:3b:df:6d:2f:46:ed:24:9a:cf:12:f3:
                    ce:61:a5:2e:58:45:a1:13:22:d4:03:92:48:22:c8:
                    5b:d6:51:92:78:15:87:80:7d:e4:ca:0b:0c:0e:6d:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:BA:EB:6D:55:81:32:69:B0:5C:53:2E:23:5C:82:7C:C7:7C:3E
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e39362e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:2a:78:0c:c1:ec:ed:a9:d6:f9:0e:e8:c6:5a:80:88:cc:
         25:cf:fd:51:72:5f:6d:e7:04:12:a0:53:16:4d:a6:04:c5:87:
         99:83:31:55:fb:f7:31:88:20:9b:16:80:e7:1f:fa:e9:22:37:
         b0:29:5e:2b:3d:8b:26:aa:81:ee:8a:0f:47:df:df:e3:e3:a6:
         ae:7d:fe:4e:5a:ee:78:f0:f2:04:44:86:de:16:43:b8:38:57:
         ab:16:97:f1:88:c9:44:41:b7:c9:23:32:67:79:f6:56:e7:30:
         89:c6:8a:93:ae:06:eb:28:c1:18:65:18:31:1d:62:3a:3f:f5:
         fe:bd:ce:46:44:02:d4:82:f5:d8:d1:a9:78:f9:39:85:62:24:
         03:17:d0:43:5f:f2:04:ca:a8:3a:cf:c4:bf:55:31:99:9c:8c:
         0f:1b:6e:e1:0f:f1:51:b7:f1:1f:33:bc:77:e5:62:17:b7:9e:
         c1:69:a7:d8:f3:f8:62:ff:ce:6f:25:c5:a8:88:31:4c:ff:76:
         49:f8:50:ff:62:6a:6a:a2:4a:b3:f3:2b:08:fb:83:88:e7:63:
         64:3b:d6:cb:48:ff:e4:2f:91:6f:ef:b0:19:b4:e2:4d:4a:40:
         c2:1f:c6:a6:ca:a2:10:4f:59:5d:e5:28:b6:4c:9a:a3:7b:6a:
         c1:5d:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----