Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3137392e3132382e302f31392d3234203d3e203138373334.roa
File:                     3138372e3137392e3132382e302f31392d3234203d3e203138373334.roa (raw, json)
Hash identifier:          oSceZRbDF7ftovnmCU5qr+PRjQIDP8TTIoFD4y2m0qE=
Subject key identifier:   1A:0F:25:35:78:20:1F:07:89:4C:E9:9C:AC:FD:98:90:6E:BD:E6:2E
Certificate issuer:       /CN=52684977E72D3E645375657C7AB1D92CF5711CE2
Certificate serial:       21E012A6C52995BC438AC407A88271440692FD2B
Authority key identifier: 52:68:49:77:E7:2D:3E:64:53:75:65:7C:7A:B1:D9:2C:F5:71:1C:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52684977E72D3E645375657C7AB1D92CF5711CE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3137392e3132382e302f31392d3234203d3e203138373334.roa
Signing time:             Mon 27 May 2024 17:40:00 +0000
ROA not before:           Mon 27 May 2024 17:35:00 +0000
ROA not after:            Mon 26 May 2025 17:40:00 +0000
asID:                     18734
IP address blocks:        187.179.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:12:a6:c5:29:95:bc:43:8a:c4:07:a8:82:71:44:06:92:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52684977E72D3E645375657C7AB1D92CF5711CE2
        Validity
            Not Before: May 27 17:35:00 2024 GMT
            Not After : May 26 17:40:00 2025 GMT
        Subject: CN=1A0F253578201F07894CE99CACFD98906EBDE62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:3c:d1:a9:75:ea:c4:44:77:03:5a:8d:eb:
                    d6:8a:6b:77:17:72:c8:fd:a1:dc:ca:c0:7d:6c:80:
                    a1:94:17:48:56:4d:52:ed:9f:8d:34:c4:09:ec:bc:
                    5e:27:db:c7:91:44:74:87:f7:39:d3:0b:87:77:53:
                    87:7d:13:c4:cd:00:37:32:f9:94:49:b2:ed:31:50:
                    6c:9a:c6:6a:cb:49:2e:0f:08:39:82:68:9a:9f:1b:
                    4d:24:53:91:5b:9e:2b:08:4b:a7:48:e5:24:4a:05:
                    d9:92:57:3e:6e:6c:79:b8:50:f6:60:f6:f6:35:60:
                    c2:02:3e:de:ea:8b:c7:cd:79:09:a0:00:6d:c4:c6:
                    79:4f:c5:13:a6:26:ce:fd:d6:dd:bc:2b:99:d9:c2:
                    ff:81:73:e8:22:d1:3a:8e:d9:a4:97:46:69:28:ea:
                    83:05:d6:16:c0:a1:91:22:d5:89:e3:d4:54:c0:54:
                    62:7f:fb:db:ff:df:1d:d4:c1:d6:d1:30:42:50:54:
                    33:9b:53:ab:b6:ff:2f:04:bc:6b:64:3d:74:16:0b:
                    ad:5b:4b:3b:fe:87:14:4a:65:03:69:ea:8b:68:bd:
                    29:13:8b:31:dc:0c:1b:e1:62:7e:d2:8f:e6:5b:96:
                    57:e4:b2:72:e4:b0:7d:39:28:45:c4:ea:d9:a1:85:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:25:35:78:20:1F:07:89:4C:E9:9C:AC:FD:98:90:6E:BD:E6:2E
            X509v3 Authority Key Identifier:
                keyid:52:68:49:77:E7:2D:3E:64:53:75:65:7C:7A:B1:D9:2C:F5:71:1C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/52684977E72D3E645375657C7AB1D92CF5711CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52684977E72D3E645375657C7AB1D92CF5711CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/3138372e3137392e3132382e302f31392d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.179.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:4f:f1:9f:42:c2:61:71:07:58:99:1a:4f:50:32:9f:31:
         82:33:d6:d7:38:3f:4a:27:b8:e4:64:8d:f5:be:20:29:8b:0a:
         d1:42:71:40:ad:0c:17:ad:9e:1c:4a:21:8a:e0:65:25:58:1a:
         4e:8c:fd:84:47:1e:f9:7e:64:52:21:10:49:9b:b7:85:52:ab:
         9a:b9:d3:b3:45:d9:f1:bb:5a:04:a3:05:8e:d7:1a:a2:60:e8:
         a5:41:71:ec:78:a9:99:1c:e6:3d:47:72:5d:d7:e1:28:88:6e:
         24:9f:2c:09:19:d3:b4:bb:7e:78:1d:da:3b:4a:8f:1f:a8:2d:
         7e:fd:cc:c3:15:fd:34:77:6d:77:72:69:00:83:29:c5:06:93:
         01:1e:4e:81:2a:79:9f:b2:8c:f2:e5:eb:99:86:48:73:d6:a2:
         22:b9:07:db:d9:46:3f:2b:23:33:03:68:de:e2:95:15:e7:a0:
         d7:53:24:59:64:20:0e:9a:97:84:6a:8d:85:cb:69:d9:4c:20:
         13:07:57:95:7a:e5:c4:20:a6:6c:48:ab:cf:5e:48:60:8d:ca:
         df:0e:52:ed:53:8c:7d:88:d4:8b:88:aa:42:78:0c:9c:97:d5:
         a2:0b:1f:a9:1c:60:86:ac:0d:bf:18:b0:cd:c2:8d:1c:2b:ec:
         64:52:6d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----