Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa
File:                     3230302e3131342e38342e302f32322d3232203d3e203238303635.roa (raw, json)
Hash identifier:          SfZ4gJ/Xrrr5Ku/eA52E35IBrdaIqFIXfalczq9fIVI=
Subject key identifier:   95:BC:80:21:6D:68:68:E1:A3:91:44:DF:67:C8:C5:4F:2A:5B:B4:37
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       0C5269DE8C2C218F094DE5A10CFEFCCCECCADF77
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa
Signing time:             Mon 16 Sep 2024 21:05:00 +0000
ROA not before:           Mon 16 Sep 2024 21:00:00 +0000
ROA not after:            Mon 15 Sep 2025 21:05:00 +0000
asID:                     28065
IP address blocks:        200.114.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:69:de:8c:2c:21:8f:09:4d:e5:a1:0c:fe:fc:cc:ec:ca:df:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Sep 16 21:00:00 2024 GMT
            Not After : Sep 15 21:05:00 2025 GMT
        Subject: CN=95BC80216D6868E1A39144DF67C8C54F2A5BB437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a6:b1:35:ac:98:59:9e:6b:dd:3b:f2:25:15:
                    6c:97:1f:da:da:8e:b7:cf:35:28:ba:fc:76:db:d2:
                    38:5c:af:16:c0:04:b0:7f:1d:49:e4:27:a5:64:48:
                    d7:12:5d:f7:41:2a:15:a9:bd:4c:58:b1:f5:a8:6f:
                    2c:24:81:82:ce:2b:e2:9c:3b:d7:dc:3f:6c:5d:64:
                    d8:7c:06:ce:f2:1a:03:6c:96:78:f1:8f:b5:0e:70:
                    64:03:0b:63:e0:e1:be:f0:9f:36:3d:e2:0d:c2:1d:
                    e3:54:a2:89:a8:63:dd:6f:76:b5:2f:47:12:fe:37:
                    93:68:51:02:98:22:1d:b0:03:4a:b2:80:cb:1c:50:
                    40:f9:28:c1:1b:ca:55:db:eb:40:9f:05:69:c5:c4:
                    dc:26:b4:04:47:76:f6:06:2a:7c:55:8d:f0:ae:96:
                    89:65:7e:ac:26:55:af:e3:45:d9:66:e4:84:d7:10:
                    b8:d3:39:7d:10:fa:f9:db:21:86:d7:c5:51:69:6c:
                    28:13:ca:8e:85:21:c4:69:bc:f3:6d:59:06:77:d8:
                    f1:0e:43:b2:18:3c:25:a0:c3:2c:a4:5f:be:3a:a4:
                    9c:88:ad:30:e4:61:77:ae:db:11:b0:37:18:7a:a7:
                    23:69:4e:b3:23:24:97:81:c3:a0:b1:73:67:88:4b:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:80:21:6D:68:68:E1:A3:91:44:DF:67:C8:C5:4F:2A:5B:B4:37
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:54:d9:9c:3d:3d:a0:f4:9e:21:c9:45:b9:2d:26:5d:95:e7:
         9b:58:e3:b3:cf:07:c6:6f:86:1e:15:aa:7b:29:37:7e:d3:4f:
         00:77:39:4a:17:22:87:c4:3c:a0:e2:01:ad:9e:25:1c:23:6e:
         8c:09:a6:47:7c:62:e4:81:9d:14:43:9b:d2:5c:85:ad:38:dc:
         5e:2f:bb:d1:cd:68:25:19:dd:3c:02:6e:ad:c7:16:83:ed:94:
         ad:65:1e:b1:34:27:97:13:f3:0f:3e:eb:56:2b:d2:9c:3a:b4:
         c8:7d:ea:bb:44:b4:3a:0e:f8:68:bb:c3:95:33:30:90:af:25:
         66:57:c7:9c:c9:9f:74:04:46:c7:99:1c:c8:1d:b3:a6:05:d9:
         fa:d8:13:82:cc:fd:fe:8d:6a:28:4e:25:14:dc:64:22:04:0d:
         cb:6f:fd:54:fa:1c:18:64:a1:3d:94:c6:ad:c2:c1:86:f6:a7:
         8a:4d:15:17:e2:09:b0:77:1a:ca:92:a1:57:40:6a:10:ba:75:
         c5:0a:c7:7d:7e:42:6f:6e:00:c9:70:67:10:3a:68:a8:21:2e:
         24:42:b1:6a:96:9d:2f:63:61:16:57:c8:e7:3d:2a:e4:86:3f:
         e7:11:cd:e1:2d:7d:81:2f:0b:48:2c:f3:fc:d8:8b:56:ba:a2:
         90:fc:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----