Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa
File:                     3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa (raw, json)
Hash identifier:          M4+B8dKZV5DI02H1wVqkAPnxV4BALeFj/B9STyRTB2k=
Subject key identifier:   9D:74:C9:88:65:A9:F3:A8:FB:59:7B:99:1B:41:C1:E9:D7:F1:13:D5
Certificate issuer:       /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial:       07E064EBDC636EFB18A1A2A0634AD049FF09770E
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa
Signing time:             Tue 14 Jan 2025 10:15:00 +0000
ROA not before:           Tue 14 Jan 2025 10:10:00 +0000
ROA not after:            Tue 13 Jan 2026 10:15:00 +0000
asID:                     265798
IP address blocks:        201.158.96.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e0:64:eb:dc:63:6e:fb:18:a1:a2:a0:63:4a:d0:49:ff:09:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
        Validity
            Not Before: Jan 14 10:10:00 2025 GMT
            Not After : Jan 13 10:15:00 2026 GMT
        Subject: CN=9D74C98865A9F3A8FB597B991B41C1E9D7F113D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:d8:c0:61:e5:a6:ac:fc:95:ad:5d:e6:83:
                    e7:88:3b:a4:da:03:cb:8e:c4:9c:cb:60:b7:e3:7b:
                    37:73:cd:45:9a:f8:a9:d5:e8:b5:ff:67:97:2b:01:
                    f5:3c:8c:a1:3e:9b:2d:9c:ce:ce:38:6c:9e:22:7f:
                    e4:4c:e7:c7:07:55:4c:ab:77:87:68:b5:5d:36:b6:
                    25:0e:df:09:b1:dd:a1:a2:69:57:2e:25:56:dc:63:
                    a9:5c:48:25:98:13:25:5e:f0:cd:9c:81:d7:a8:29:
                    7b:b7:12:73:8e:7f:62:83:ff:19:63:6b:c0:b9:7f:
                    c3:21:a1:e8:29:ad:bf:76:f0:86:d9:de:d8:c2:bb:
                    28:eb:e4:60:b0:f8:61:28:81:ff:8c:d0:a7:b4:b6:
                    70:b4:14:4f:b7:b8:0c:9e:f9:98:bd:ae:85:8d:b5:
                    34:e0:37:b0:8d:0a:15:8f:85:a3:54:de:d2:d7:ee:
                    f1:b7:b1:ad:b0:ae:01:82:9c:e2:5f:ae:fa:c2:b4:
                    e5:09:71:f4:7b:3d:c6:f1:92:2f:d9:5b:c6:66:90:
                    1b:3f:ad:bc:8a:2e:00:6b:1c:7c:ed:95:00:20:98:
                    9d:a5:9d:5b:34:5e:b9:05:5f:dc:6c:4e:ad:94:14:
                    1d:08:a6:68:04:00:a1:dd:23:f0:c3:2f:92:f8:6d:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:74:C9:88:65:A9:F3:A8:FB:59:7B:99:1B:41:C1:E9:D7:F1:13:D5
            X509v3 Authority Key Identifier:
                keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39362e302f32332d3234203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:56:8c:b2:02:d3:c8:74:a8:b2:6e:58:11:e3:12:26:68:
         37:1e:93:9a:f9:2a:46:6e:77:92:8f:71:be:d1:66:d5:4b:ca:
         ae:01:7b:30:bb:a8:c8:58:de:02:77:86:01:78:62:df:86:46:
         3d:5e:cb:c9:43:b3:1a:9b:89:96:a2:d9:3c:73:d4:21:5c:ab:
         04:72:9d:51:f4:db:7a:65:ec:2f:83:07:e0:8d:2b:66:a1:e5:
         d7:09:a4:cf:5c:ee:e0:40:cd:30:d3:4b:b3:e6:6b:73:d4:0c:
         90:ef:cf:24:2c:7c:d1:2e:0b:3e:ba:19:61:f8:a6:f1:5b:04:
         85:a8:e9:18:dd:8d:19:e9:a6:f7:fd:c2:4f:67:c6:e0:35:d8:
         a3:59:34:65:65:3b:ec:71:14:01:df:9a:f3:db:fb:45:e3:46:
         37:28:8b:ee:b5:62:3b:09:45:46:08:2f:63:71:6c:48:a9:c6:
         be:ad:58:a8:6a:09:4d:04:cf:c7:05:8a:e6:8c:a4:b9:71:2c:
         4e:b1:2b:e6:54:0a:61:68:02:d0:ab:ae:24:14:6c:17:92:40:
         b3:d4:94:73:ca:de:1f:93:36:14:07:7c:7a:bd:07:35:9d:3f:
         7d:04:38:0d:58:40:b8:6f:aa:2a:35:65:e1:05:14:12:f5:89:
         6c:52:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----