Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
File:                     3230302e302e38382e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          olhpr3aZw/Tj6JOvhZvD0pKvEIieGwzLDCPDDbfK3gw=
Subject key identifier:   C5:53:48:CB:23:56:F7:75:80:17:6C:B5:BF:0B:F9:23:29:63:CD:E1
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       444D59DD4F8DF27E9B83F46A8CA01FF7E5272CDD
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 04 Feb 2025 18:19:39 +0000
ROA not before:           Tue 04 Feb 2025 18:14:39 +0000
ROA not after:            Tue 03 Feb 2026 18:19:39 +0000
asID:                     52224
IP address blocks:        200.0.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4d:59:dd:4f:8d:f2:7e:9b:83:f4:6a:8c:a0:1f:f7:e5:27:2c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:39 2025 GMT
            Not After : Feb  3 18:19:39 2026 GMT
        Subject: CN=C55348CB2356F77580176CB5BF0BF9232963CDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:8d:eb:6d:64:08:0e:d0:0c:51:b5:89:05:
                    53:22:e0:76:62:cd:2d:5b:bb:f6:5e:66:6c:65:c1:
                    76:2e:eb:23:3c:78:5c:aa:db:07:51:90:0f:f3:d0:
                    62:6a:68:b2:10:8a:f9:3d:c6:70:dd:f5:d5:f8:e3:
                    26:62:f6:65:64:68:d0:3d:46:87:b0:52:f1:0b:72:
                    03:0b:b8:1e:f4:48:24:2d:9e:ac:b2:18:52:61:bc:
                    cb:e4:68:47:ab:cc:29:cd:5a:4f:4a:89:65:1d:95:
                    28:3b:58:4e:c5:3c:25:4a:90:29:d8:ff:07:34:e4:
                    a2:ce:94:8e:9a:86:96:18:1d:4d:7f:ff:4a:84:03:
                    7c:b2:88:33:4c:50:46:c4:66:68:ce:a4:62:dd:e0:
                    31:a8:7f:1b:f5:07:fb:62:7d:5c:9e:6e:b4:ce:d1:
                    77:13:b5:c1:15:a0:32:9d:76:48:0d:a2:9b:b9:dc:
                    13:07:3a:e9:d4:78:1e:09:9c:98:ff:3d:b8:13:28:
                    f3:ba:02:cc:9b:7b:02:52:85:b1:0a:3e:6f:2b:91:
                    d6:68:75:52:a2:85:55:ef:a8:47:d4:da:93:32:c5:
                    0c:91:53:76:a7:d9:2b:6c:c2:d0:70:1d:bb:e3:c7:
                    44:a3:77:e5:25:3c:25:ba:0c:ce:6f:39:08:ad:71:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:53:48:CB:23:56:F7:75:80:17:6C:B5:BF:0B:F9:23:29:63:CD:E1
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:39:b4:af:46:25:a0:df:12:bc:1d:e6:d8:ba:d5:cf:83:04:
         76:53:c2:f6:2f:cc:8a:42:70:4d:ba:08:bc:81:c2:79:33:a7:
         3b:e2:60:17:64:c0:fa:39:06:3c:45:05:42:89:05:db:06:c6:
         7b:3d:03:70:db:ac:6f:ab:22:0a:67:81:cd:53:41:52:a1:f3:
         24:04:9c:ce:06:e1:da:9f:51:cd:6b:99:45:34:18:80:c4:e5:
         03:98:bb:20:3c:9b:3f:da:83:fb:33:68:74:1b:e3:a9:fa:e8:
         59:61:3c:c3:0b:4a:d6:b0:eb:1d:35:0d:99:c8:1b:91:10:70:
         8d:25:0e:78:2a:69:5b:16:a0:6a:ab:90:e3:40:92:b4:d2:d1:
         7a:7a:30:a3:77:a7:5d:94:eb:0a:ff:c8:78:8e:b3:c6:79:cb:
         d1:0f:43:4d:26:10:59:72:23:9a:0f:25:b6:a7:ba:2a:30:ba:
         de:65:7f:fa:b1:c6:92:dd:8c:8e:b7:a7:69:16:67:60:2a:f4:
         ba:ba:ef:4a:39:d7:3e:ca:87:2b:86:44:6b:4f:5c:ff:3c:57:
         37:2b:6e:c8:f1:51:1e:51:a6:ae:77:e8:0a:01:da:af:39:13:
         05:1b:91:dc:79:d3:6e:42:a7:ed:d8:e6:7c:03:bc:4c:04:11:
         f8:60:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----