Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e3132382e302f31372d3234203d3e2036353033.roa
File:                     3138392e3231332e3132382e302f31372d3234203d3e2036353033.roa (raw, json)
Hash identifier:          WoCNY4STTGLeYt2KLkhlrUHp5zb2xPXdmeoTQEYQcAs=
Subject key identifier:   58:16:D2:50:13:66:D0:4B:00:B8:4D:44:37:87:9E:70:ED:EB:4F:F9
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       4CF1EA75E18631506964F9F288B88855401AEC20
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e3132382e302f31372d3234203d3e2036353033.roa
Signing time:             Fri 14 Feb 2025 00:09:46 +0000
ROA not before:           Fri 14 Feb 2025 00:04:46 +0000
ROA not after:            Fri 13 Feb 2026 00:09:46 +0000
asID:                     6503
IP address blocks:        189.213.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f1:ea:75:e1:86:31:50:69:64:f9:f2:88:b8:88:55:40:1a:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb 14 00:04:46 2025 GMT
            Not After : Feb 13 00:09:46 2026 GMT
        Subject: CN=5816D2501366D04B00B84D4437879E70EDEB4FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:d8:d5:73:40:28:90:b7:7e:78:5d:18:c4:
                    e0:5d:6e:e2:4f:90:dd:73:19:31:63:6c:b7:d9:dd:
                    65:49:9f:85:c1:a4:99:b7:fa:9e:47:af:c4:9e:b8:
                    c0:22:e5:66:99:78:9b:b6:18:78:85:96:93:49:c4:
                    f4:3f:0b:db:ad:c9:ac:98:6b:58:df:9c:39:56:b4:
                    a2:a8:93:7d:2d:18:aa:f5:f5:a7:03:5c:b7:59:eb:
                    65:6c:6b:28:32:df:fd:32:c1:c2:d9:80:20:9c:aa:
                    3d:dd:d5:1e:cc:85:d5:ab:5a:b2:c4:6b:26:68:20:
                    9c:c5:5d:3d:46:72:82:28:d3:0b:35:8b:f9:bd:d5:
                    83:1b:d1:80:4c:36:76:38:c3:9d:98:db:b2:a2:da:
                    35:7d:18:ea:ae:c1:df:42:7f:77:61:6a:97:09:2f:
                    bf:6a:6a:c5:4d:89:c6:9e:4c:63:d4:0a:60:a5:7c:
                    ae:52:da:6f:1c:54:a6:e3:69:94:86:6a:ac:32:c8:
                    91:09:59:b1:98:bb:fc:89:ea:36:96:5f:25:ee:e5:
                    64:7b:7f:7c:fd:d9:36:7c:52:5d:c6:60:ef:6a:64:
                    cc:a4:b4:47:df:5e:57:94:88:89:b1:90:d1:2c:8b:
                    dc:c9:a3:9c:2c:56:0a:d2:20:dc:35:bb:fc:bc:04:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:D2:50:13:66:D0:4B:00:B8:4D:44:37:87:9E:70:ED:EB:4F:F9
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3231332e3132382e302f31372d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:de:f4:34:01:57:06:c3:0f:a8:57:45:6f:fc:ce:bc:cc:
         5b:89:42:a7:c6:7d:8d:94:cb:22:26:14:98:22:ce:5e:e8:80:
         d2:af:f0:bb:a0:92:35:65:8f:6b:2f:2e:11:f1:fe:51:bd:0c:
         d4:86:1c:87:1f:c1:7a:b7:df:fd:fa:e5:4d:40:68:9b:72:1c:
         37:d3:c8:1e:35:fe:d0:e4:19:2e:0c:f6:9a:ff:c1:a2:98:71:
         97:1e:56:cd:b2:e7:9d:fe:8d:44:2b:94:d9:af:0b:a8:80:f4:
         8c:be:82:00:89:10:ca:28:26:39:b0:fa:89:9a:a5:50:a3:87:
         1b:6b:49:c2:bb:93:ab:65:7d:45:f1:b0:c7:82:8f:4c:38:fa:
         40:b2:ae:fb:b1:a2:2e:68:43:e9:2a:dc:04:d3:fe:b5:43:a2:
         23:f2:fb:e1:ff:a0:0e:ca:3e:eb:48:7d:76:a6:fa:b7:eb:60:
         b9:62:9b:45:84:da:71:f5:ee:53:9a:76:1f:bd:ec:75:28:ad:
         0f:38:f5:c2:5e:72:84:04:8b:dd:5b:48:7a:a0:21:e0:8a:e0:
         77:5a:10:f5:f3:87:1b:1d:ca:50:52:eb:4a:0f:26:87:d7:14:
         67:16:5e:87:55:fd:ef:8a:25:63:d1:a4:40:69:1c:b0:c9:fc:
         25:4b:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----