Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa
File:                     3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          +kelnON2w+KfcnwVGuvoHYizL9LsU6oQLhr15E8WiRE=
Subject key identifier:   B4:56:19:73:99:0C:0A:58:9D:67:D2:F5:31:6A:96:54:1B:06:DA:4A
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       1D50A11DB63B2DCF663DA742A358BC0F59EEF565
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 11 Sep 2024 14:35:05 +0000
ROA not before:           Wed 11 Sep 2024 14:30:05 +0000
ROA not after:            Wed 10 Sep 2025 14:35:05 +0000
asID:                     26426
IP address blocks:        200.115.166.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:a1:1d:b6:3b:2d:cf:66:3d:a7:42:a3:58:bc:0f:59:ee:f5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:05 2024 GMT
            Not After : Sep 10 14:35:05 2025 GMT
        Subject: CN=B4561973990C0A589D67D2F5316A96541B06DA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:4a:5f:08:87:4b:3f:fc:d2:46:a9:f3:02:
                    55:6d:5d:db:2b:3d:0c:49:56:9e:a4:13:39:f2:72:
                    f3:bc:b9:0d:b2:85:29:9a:d1:ef:73:2a:9d:1c:cc:
                    c4:51:1c:a4:04:5c:2b:76:80:f0:d4:04:0f:f6:c6:
                    d7:53:20:47:3d:01:d8:08:ac:b2:63:e2:17:ca:2e:
                    d0:50:35:16:60:c9:dc:1f:ff:48:90:cd:0c:15:ef:
                    01:4a:41:91:fd:51:06:74:89:88:50:d0:96:9a:62:
                    a9:3d:c8:1e:aa:70:bc:f7:a1:c1:34:09:a5:43:4c:
                    c3:b1:97:39:a7:de:ba:f7:1d:72:cd:f5:a3:15:3f:
                    8b:1d:a8:de:03:61:6a:cb:c9:34:31:6f:7e:1b:16:
                    91:51:e0:9c:4a:d5:10:9a:25:1a:c5:64:39:3d:d0:
                    a0:0b:ba:8f:79:7b:e2:9a:58:7c:ba:46:d4:c3:fd:
                    d8:16:35:bb:3d:54:17:09:94:57:1a:a8:82:d2:46:
                    1e:8c:e7:16:39:45:4c:33:25:7c:27:81:40:ac:e5:
                    76:f6:ee:12:56:c0:8e:6f:0c:d6:f9:4f:81:d9:e2:
                    7d:a9:38:7f:e3:2b:2d:ca:cd:ab:4f:7f:75:d7:18:
                    39:d4:b9:fd:94:86:a5:e8:b1:9c:2d:52:00:e6:d2:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:19:73:99:0C:0A:58:9D:67:D2:F5:31:6A:96:54:1B:06:DA:4A
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:88:ae:96:f1:33:72:fb:1f:67:86:11:8d:f7:92:0e:81:bc:
         67:c3:43:58:e2:1a:91:26:dd:c6:5d:94:29:f5:9e:e6:34:92:
         b1:b5:24:ad:ea:09:34:e6:1f:84:6f:4d:ee:39:f4:ad:ec:22:
         90:87:cf:0f:65:79:f7:c6:9f:78:4b:d5:04:86:11:c4:23:2e:
         42:95:39:41:bd:d8:7f:54:36:95:71:5e:0b:1a:62:f3:2c:48:
         d9:61:9e:69:2d:e1:01:35:09:1a:c3:df:2e:ff:62:85:0f:b8:
         0c:9a:bf:3e:ae:99:6a:2b:98:c7:fa:7c:4f:60:ae:8b:d6:d0:
         99:82:4e:f7:4e:80:0e:53:dd:41:e2:c5:ec:58:ff:db:37:fe:
         c2:1d:02:5e:c4:ad:47:06:32:59:b9:22:e5:dd:72:cd:5f:9f:
         9e:2f:fd:7f:50:15:1c:e2:18:82:15:02:4d:42:37:fd:dd:d5:
         e3:80:1f:7d:f0:60:ce:63:5e:d5:76:44:9e:42:9c:98:08:4f:
         18:46:26:ad:b0:2c:1b:80:42:54:db:5c:1b:3f:69:af:ae:7c:
         e1:1d:98:9d:f2:75:14:fd:ea:49:28:09:f1:65:fe:4e:9a:de:
         36:b2:ab:62:ed:88:7c:75:4a:2c:9d:3d:40:9e:4c:46:3f:fa:
         0c:68:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----