Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38342e302f32332d3234203d3e203238303030.roa
File:                     3230302e372e38342e302f32332d3234203d3e203238303030.roa (raw, json)
Hash identifier:          3qP0Rzfd72ghaq9x5A3Ctyc2qeCim9qaHUbcyS15euk=
Subject key identifier:   01:2C:53:5B:01:F4:E5:6E:66:AC:74:F2:F0:10:D4:6D:28:08:63:B3
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6437C2FE82E44E32D6E55718F3E4DB372AF42973
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38342e302f32332d3234203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:19:39 +0000
ROA not before:           Tue 04 Feb 2025 18:14:39 +0000
ROA not after:            Tue 03 Feb 2026 18:19:39 +0000
asID:                     28000
IP address blocks:        200.7.84.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:37:c2:fe:82:e4:4e:32:d6:e5:57:18:f3:e4:db:37:2a:f4:29:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:39 2025 GMT
            Not After : Feb  3 18:19:39 2026 GMT
        Subject: CN=012C535B01F4E56E66AC74F2F010D46D280863B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:0f:21:f0:7d:fe:76:e2:0f:cd:2f:be:35:
                    70:81:f3:fa:bf:96:80:a2:fe:a2:68:26:c4:2f:e5:
                    33:48:a4:6b:1d:8c:55:ef:23:e9:aa:67:22:ad:aa:
                    c7:f9:c0:60:77:30:0d:55:aa:c3:15:40:81:92:55:
                    15:04:3a:7e:86:79:f7:ec:7b:74:4c:e3:26:af:88:
                    62:9c:aa:8d:0c:7b:b3:43:3b:8b:e0:96:72:38:d7:
                    3d:0a:c1:93:aa:3a:1b:57:a1:18:ac:f3:c6:05:8d:
                    4c:10:f7:ad:77:64:a3:d1:44:82:07:cf:eb:07:bd:
                    eb:40:52:c1:95:2a:04:c5:aa:2d:df:a2:9d:28:11:
                    12:3e:62:7d:35:06:52:36:08:d0:a7:9a:1e:1d:3e:
                    13:19:f6:2f:ff:9b:57:a7:ba:f9:b0:06:e0:dc:36:
                    3c:ad:c8:61:bd:bf:27:6a:69:11:cc:8f:8c:1d:8d:
                    46:e7:9f:4e:3b:0c:5c:97:db:ef:24:72:d0:37:1a:
                    65:9c:e2:44:8b:19:47:3f:ce:19:82:ef:21:03:b7:
                    06:01:56:64:b2:48:49:7a:5f:c7:bb:02:82:8a:c5:
                    98:96:b9:f1:d0:43:17:8e:93:5c:c0:f8:b6:c5:6e:
                    02:41:37:c7:24:50:5d:36:29:53:c4:d7:9d:9e:86:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2C:53:5B:01:F4:E5:6E:66:AC:74:F2:F0:10:D4:6D:28:08:63:B3
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38342e302f32332d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:6e:64:3a:b9:c8:ee:7d:1b:66:1c:90:50:ef:d3:6e:f9:
         24:d2:7b:ed:6a:0a:0a:66:9a:df:43:c1:83:0d:8c:4e:ca:5e:
         81:ca:49:1e:00:07:0d:50:7d:fb:d3:9e:00:a3:c5:eb:a1:9f:
         15:20:2e:46:1a:81:a5:66:a5:67:b7:e0:27:6b:1e:6c:14:12:
         94:5d:c8:22:b3:3a:c8:35:ba:4e:81:f1:03:e9:63:69:43:49:
         c7:be:97:22:05:36:e6:71:0f:7f:08:6e:af:1e:48:7b:21:8e:
         ca:22:58:2b:43:c1:6a:b4:ad:0b:81:5b:3a:8e:87:ba:c8:d0:
         f0:e7:da:09:8a:76:09:9f:29:88:84:7f:7e:e8:d6:b9:f7:da:
         83:e3:a6:73:5b:15:04:70:fb:30:ac:77:c1:40:54:30:e6:b6:
         49:79:4f:d3:e5:ec:68:4f:64:d9:fa:d9:5a:51:d3:af:89:06:
         95:2a:e4:3b:22:bc:7b:d7:80:a6:9e:f6:3b:d4:06:09:74:20:
         54:1f:70:8a:ac:ea:60:f2:bf:c7:4e:7c:1c:6b:1b:4f:c1:e2:
         f2:47:7f:7b:dd:35:63:bb:33:ab:7b:04:c3:62:92:17:d4:69:
         b8:10:fa:2a:17:36:ce:4d:c4:29:6f:99:5a:30:de:1c:81:db:
         b2:f2:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----