Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323637373230.roa
File:                     3136382e3138312e3137362e302f32322d3234203d3e20323637373230.roa (raw, json)
Hash identifier:          wa2R9/Fok10nGpXF1qjcOgdoGjqNhg7Xe5OA1+QRBtg=
Subject key identifier:   E4:0F:19:69:A5:3D:0E:A4:9F:E4:B4:43:8D:AD:58:60:15:7D:BA:A9
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       19724ACAB770E1670636AC30BAF7BFDE4C50678D
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323637373230.roa
Signing time:             Tue 04 Feb 2025 20:00:09 +0000
ROA not before:           Tue 04 Feb 2025 19:55:09 +0000
ROA not after:            Tue 03 Feb 2026 20:00:09 +0000
asID:                     267720
IP address blocks:        168.181.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:4a:ca:b7:70:e1:67:06:36:ac:30:ba:f7:bf:de:4c:50:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Feb  4 19:55:09 2025 GMT
            Not After : Feb  3 20:00:09 2026 GMT
        Subject: CN=E40F1969A53D0EA49FE4B4438DAD5860157DBAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:10:d4:a3:c6:bf:92:b5:e1:ce:8c:0a:22:
                    e7:f8:51:42:18:9c:11:59:9a:1f:22:50:fd:5c:99:
                    6c:4b:b2:11:b6:6d:93:76:12:d1:31:66:b5:69:70:
                    2e:e7:49:0c:41:83:e0:64:72:9d:d6:7c:52:2b:69:
                    99:65:df:2f:34:17:9f:25:79:50:df:be:e9:1d:ec:
                    a5:85:eb:0f:15:cc:f7:33:87:92:17:bd:72:a7:e3:
                    8f:47:4c:e7:d6:f1:63:b2:85:4f:c4:54:f7:83:48:
                    77:6a:f9:2f:d8:6d:89:fa:48:3a:8c:db:3b:6e:6e:
                    ce:3a:2e:fd:26:ba:8a:1b:0a:2a:37:45:0b:5f:46:
                    9d:bc:24:8e:6b:d8:52:dc:c1:43:b0:f6:02:2c:1b:
                    b8:e5:3e:5d:ab:10:ad:42:45:f5:4d:c3:51:c5:92:
                    d6:a8:7f:0f:5b:ed:75:3a:18:76:75:f2:5f:de:9d:
                    9b:36:b3:b1:88:19:82:4f:85:81:bb:1e:fc:0a:10:
                    e0:d5:26:43:53:f0:29:23:b5:84:8c:3a:7a:db:12:
                    48:4f:81:35:6e:6e:dc:fc:79:3d:ee:99:5b:a5:17:
                    24:97:04:bc:7d:57:d9:c7:25:d7:ee:51:78:3d:67:
                    4c:20:3a:da:d2:59:e3:93:e9:fd:c0:61:25:35:0b:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:19:69:A5:3D:0E:A4:9F:E4:B4:43:8D:AD:58:60:15:7D:BA:A9
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323637373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:52:11:3a:6e:08:cf:0c:71:71:1c:6b:a6:26:06:7f:d0:
         c1:45:4c:fa:92:dc:bc:fc:75:06:5f:1c:63:bd:3d:d4:ca:36:
         77:3c:8b:81:91:42:95:98:d8:49:05:1b:5f:7d:e5:d6:b8:00:
         2b:89:ba:e2:1b:98:83:7b:ef:ba:d7:bc:08:16:43:5f:de:45:
         1c:23:59:16:36:e8:34:e1:cd:45:7a:f3:86:e8:0c:d9:e2:8a:
         ef:ca:55:04:f3:3d:40:e1:1a:d5:22:44:90:97:49:2e:73:10:
         de:34:3f:9e:21:ca:4c:b6:c2:84:0f:cb:1e:7b:41:37:c8:a8:
         f1:98:a1:b4:94:61:4b:9c:ee:78:b8:71:fe:2e:c2:55:17:7f:
         39:ad:ec:66:74:ab:9d:b9:72:6c:55:be:f8:5c:46:a0:8a:5a:
         cd:2f:cd:c5:da:99:99:05:69:15:1a:fc:82:28:9c:bb:64:05:
         aa:8e:80:23:55:27:11:99:4c:fd:1f:71:e0:0f:a3:2d:18:0c:
         52:b9:72:e8:85:62:64:5a:af:fd:52:29:c8:0d:3c:65:bb:67:
         6e:c2:c6:c1:c9:10:31:cf:f9:40:e1:67:38:d5:17:b2:2c:65:
         d7:c4:7b:69:77:ee:ae:a3:04:24:a4:df:11:b7:eb:3e:21:fe:
         b0:df:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----