Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa
File:                     3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa (raw, json)
Hash identifier:          II8dD5QI9+TCH9r2tHRipbxyOt6AriXk2UPq47RCeO8=
Subject key identifier:   C4:5E:D4:32:62:DE:1B:88:C6:9B:9C:98:8D:25:E2:25:80:78:C2:1B
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       50D0934C1F23A7D8DE735F3C1197578B17E5D02C
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa
Signing time:             Fri 28 Jun 2024 18:15:00 +0000
ROA not before:           Fri 28 Jun 2024 18:10:00 +0000
ROA not after:            Fri 27 Jun 2025 18:15:00 +0000
asID:                     27747
IP address blocks:        200.115.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:93:4c:1f:23:a7:d8:de:73:5f:3c:11:97:57:8b:17:e5:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jun 28 18:10:00 2024 GMT
            Not After : Jun 27 18:15:00 2025 GMT
        Subject: CN=C45ED43262DE1B88C69B9C988D25E2258078C21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:bb:32:03:8b:7c:93:32:5f:a8:c0:57:22:
                    70:69:8d:c6:d8:69:25:c2:60:b2:8d:95:d2:bf:92:
                    d5:6a:f3:50:15:2c:e2:bc:7a:bf:52:92:12:7d:3c:
                    89:6c:6f:5f:83:b2:a7:ed:87:bf:3e:85:84:3d:eb:
                    c4:8d:67:a2:cb:37:e4:5d:66:04:d1:af:2b:27:02:
                    f0:93:3b:5a:82:d5:64:db:fc:3a:c9:56:0c:46:54:
                    20:b1:99:60:45:36:23:46:e7:f7:13:5f:6f:6f:62:
                    b6:a6:a6:e5:8c:d3:96:74:63:21:83:dc:ec:4d:8e:
                    f9:ef:43:3f:4b:98:97:a5:b5:72:9e:45:80:60:ce:
                    2a:30:a8:51:08:9f:25:0e:78:7b:b0:af:00:63:cd:
                    88:19:2a:18:44:cc:f1:6b:43:a5:d4:33:29:80:5b:
                    0a:0d:68:dc:7a:09:da:c3:dc:68:65:06:e1:67:0d:
                    5c:d0:81:77:9a:3e:97:11:c1:9e:3f:8b:6f:99:c4:
                    c4:cb:56:01:29:38:a4:24:20:e6:cd:b9:02:4f:a2:
                    c9:29:9b:cb:1c:78:6e:71:b9:2f:4c:55:57:82:b4:
                    52:89:25:c0:db:76:f5:11:8f:f0:ca:a5:dc:0b:6f:
                    25:3a:d1:bd:0d:cd:e6:58:01:90:85:81:b8:0c:15:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:D4:32:62:DE:1B:88:C6:9B:9C:98:8D:25:E2:25:80:78:C2:1B
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:4c:25:0f:46:6d:d2:3b:92:de:20:4d:1a:be:3e:1c:c2:65:
         16:bf:44:e9:63:e7:7f:c2:8d:7c:ab:cc:d8:2d:b7:fe:37:70:
         c7:dc:cb:d8:ad:64:68:ef:d7:34:0b:84:b7:50:ef:d6:d2:ac:
         84:f4:84:00:73:52:26:05:02:bd:0c:f7:8b:86:d6:5a:8e:51:
         65:ed:fd:79:1a:d0:ba:82:0a:76:0a:5b:c0:9e:5d:40:f5:1d:
         4c:7f:70:6e:5e:92:3c:5a:75:60:56:ff:39:0a:6c:eb:a4:de:
         de:17:25:af:bf:2d:ef:e9:d3:23:6b:19:de:bf:9e:15:a8:1e:
         91:a2:08:74:33:0a:9a:60:3c:f1:e9:8c:ed:4d:7e:16:79:b7:
         69:da:25:a4:95:23:c4:bd:19:16:b9:24:de:04:c5:3e:73:fa:
         0c:46:e4:1d:6c:38:49:c6:5c:9d:41:c7:2d:1b:c6:f4:36:02:
         65:89:8d:4e:77:d5:8c:4b:65:aa:46:76:c4:26:c0:c5:1e:6a:
         db:ce:ef:97:1b:21:ad:cb:0d:a0:14:2f:56:15:ab:56:ff:16:
         32:c0:66:51:34:51:3a:c0:d0:67:6c:29:eb:8a:d3:a2:04:d4:
         63:3e:d1:8f:80:cc:1b:8c:81:9d:29:28:ef:e2:91:fe:54:33:
         01:5a:0c:63
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUNCTTB8jp9jec188EZdXixfl0CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMwOTk2QjJDQTUxNjlDRUEyQ0U1Qjk5RUFFMjREQkVD
REEzN0M4OTAeFw0yNDA2MjgxODEwMDBaFw0yNTA2MjcxODE1MDBaMDMxMTAvBgNV
BAMTKEM0NUVENDMyNjJERTFCODhDNjlCOUM5ODhEMjVFMjI1ODA3OEMyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2rsyA4t8kzJfqMBXInBpjcbY
aSXCYLKNldK/ktVq81AVLOK8er9SkhJ9PIlsb1+Dsqfth78+hYQ968SNZ6LLN+Rd
ZgTRrysnAvCTO1qC1WTb/DrJVgxGVCCxmWBFNiNG5/cTX29vYrampuWM05Z0YyGD
3OxNjvnvQz9LmJeltXKeRYBgziowqFEInyUOeHuwrwBjzYgZKhhEzPFrQ6XUMymA
WwoNaNx6CdrD3GhlBuFnDVzQgXeaPpcRwZ4/i2+ZxMTLVgEpOKQkIObNuQJPoskp
m8sceG5xuS9MVVeCtFKJJcDbdvURj/DKpdwLbyU60b0NzeZYAZCFgbgMFbbbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxF7UMmLeG4jGm5yYjSXiJYB4whswHwYDVR0j
BBgwFoAULAmWsspRac6izluZ6uJNvs2jfIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNURFMTAxOTNFQTY5ODI1QTgwRDY2RkY2Q0RBNkEwNzUx
NUU4NjI5MzUwNkRBQTlCNTU5Q0Y3NDJFOEFEODQ3LzAvMkMwOTk2QjJDQTUxNjlD
RUEyQ0U1Qjk5RUFFMjREQkVDREEzN0M4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQzA5OTZCMkNBNTE2OUNFQTJD
RTVCOTlFQUUyNERCRUNEQTM3Qzg5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVERTEwMTkzRUE2OTgyNUE4MEQ2NkZGNkNEQTZBMDc1MTVFODYyOTM1
MDZEQUE5QjU1OUNGNzQyRThBRDg0Ny8wLzMyMzAzMDJlMzEzMTM1MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzczNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHPg
MA0GCSqGSIb3DQEBCwUAA4IBAQCqTCUPRm3SO5LeIE0avj4cwmUWv0TpY+d/wo18
q8zYLbf+N3DH3MvYrWRo79c0C4S3UO/W0qyE9IQAc1ImBQK9DPeLhtZajlFl7f15
GtC6ggp2ClvAnl1A9R1Mf3BuXpI8WnVgVv85CmzrpN7eFyWvvy3v6dMjaxnev54V
qB6Rogh0MwqaYDzx6YztTX4Webdp2iWklSPEvRkWuSTeBMU+c/oMRuQdbDhJxlyd
QcctG8b0NgJliY1Od9WMS2WqRnbEJsDFHmrbzu+XGyGtyw2gFC9WFatW/xYywGZR
NFE6wNBnbCnritOiBNRjPtGPgMwbjIGdKSjv4pH+VDMBWgxj
-----END CERTIFICATE-----