Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
File:                     3230302e38392e39362e302f31392d3234203d3e2038313633.roa (raw, json)
Hash identifier:          IKELp1FxH/yPKMUeemDn0jrlX3txDjzdmAMfk0rqA7o=
Subject key identifier:   74:CD:EF:D0:69:EB:74:60:0E:61:32:8F:84:F6:01:FA:42:C9:E3:B9
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       4B2C281782CDE1BFFCB120463BD1C05ABA8D2A1D
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa
Signing time:             Tue 05 Mar 2024 17:43:02 +0000
ROA not before:           Tue 05 Mar 2024 17:38:02 +0000
ROA not after:            Tue 04 Mar 2025 17:43:02 +0000
asID:                     8163
IP address blocks:        200.89.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2c:28:17:82:cd:e1:bf:fc:b1:20:46:3b:d1:c0:5a:ba:8d:2a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Mar  5 17:38:02 2024 GMT
            Not After : Mar  4 17:43:02 2025 GMT
        Subject: CN=74CDEFD069EB74600E61328F84F601FA42C9E3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:50:4e:2f:fd:6a:1f:8a:c0:5e:82:80:f4:
                    c5:a8:47:3c:12:e8:c3:c2:82:ee:46:19:d2:ff:0d:
                    c0:11:a1:d8:f6:10:03:0f:b5:1f:09:3b:40:56:00:
                    ba:b7:dd:68:d9:1b:b7:d4:83:a3:18:bf:41:f2:ac:
                    fb:15:bb:ac:c0:a1:d8:06:81:a4:80:00:81:0a:76:
                    8b:f6:a7:ef:d3:89:03:0a:6f:c9:3c:1c:a1:45:49:
                    1e:d8:16:85:27:75:b6:b1:f2:fa:8e:8e:f1:66:62:
                    68:b4:4c:54:83:99:56:8e:ab:f6:77:d3:ae:3d:23:
                    64:d6:84:72:90:8e:43:80:f7:5f:62:a5:47:2f:3d:
                    c7:18:53:2d:2a:65:f1:39:64:a3:6f:37:a3:55:92:
                    1d:35:47:8e:50:44:1a:74:bd:c5:a9:e6:e0:57:e2:
                    9c:8b:a8:e1:89:bc:3d:df:a4:d5:3b:d8:19:67:2a:
                    8d:45:04:cb:ff:d5:32:b5:b6:ef:f3:ff:0f:66:bf:
                    9f:22:9e:0f:b3:f9:02:04:c5:bc:df:40:ad:67:cc:
                    9a:e6:33:e8:79:93:f7:65:3c:a8:fa:60:d1:4b:18:
                    da:1e:0c:89:be:1c:2d:25:c3:99:a3:e3:33:a8:d9:
                    b3:22:9e:37:79:a4:ff:2c:4e:c6:bd:11:9b:b9:c6:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:EF:D0:69:EB:74:60:0E:61:32:8F:84:F6:01:FA:42:C9:E3:B9
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3230302e38392e39362e302f31392d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:cf:92:a4:40:d1:d1:d5:f9:bc:98:e0:14:19:b0:72:5b:
         53:1a:d1:12:e8:1e:dd:0d:24:0a:e2:fd:a2:8b:4b:60:dc:b0:
         f6:b3:46:7a:5d:ca:fc:81:9b:c6:91:5b:79:20:c4:3e:2f:77:
         cf:18:76:a1:e8:27:60:ec:72:a7:b4:c1:71:1f:52:5c:86:f1:
         fc:80:00:33:cf:53:5e:59:ec:96:62:fe:97:8a:b1:1f:74:1a:
         31:82:e7:05:b9:10:b0:ca:8c:fa:0d:cf:9b:3e:3f:85:de:09:
         cc:a3:88:1e:21:c8:03:12:e3:89:f1:57:55:58:3e:72:77:08:
         f2:86:96:2b:db:5b:54:94:3c:25:bc:69:94:d0:0e:6b:8c:18:
         7a:3a:4a:df:7b:a0:ae:07:70:50:8b:45:95:a5:92:f6:12:b7:
         de:87:fb:2d:89:ab:83:db:09:3f:03:3e:c5:25:1f:05:76:b9:
         76:85:18:39:6a:0e:65:1c:86:98:05:a3:62:58:f9:b0:8f:00:
         2c:62:cf:cd:09:5a:d3:5a:63:d1:0b:1c:15:ce:01:48:5f:76:
         ea:1c:28:c3:48:aa:bd:c2:e2:b6:f5:44:8d:74:20:5f:c2:c4:
         1c:e6:dc:10:33:51:f6:12:0b:6e:de:d2:cb:4b:01:89:87:ef:
         34:a3:75:61
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUSywoF4LN4b/8sSBGO9HAWrqNKh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwMjA0NjFFMTA2RkExOTM5QTc5NTVGMTlFMUY4RUQ4
MkFFODU4OTAeFw0yNDAzMDUxNzM4MDJaFw0yNTAzMDQxNzQzMDJaMDMxMTAvBgNV
BAMTKDc0Q0RFRkQwNjlFQjc0NjAwRTYxMzI4Rjg0RjYwMUZBNDJDOUUzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifVBOL/1qH4rAXoKA9MWoRzwS
6MPCgu5GGdL/DcARodj2EAMPtR8JO0BWALq33WjZG7fUg6MYv0HyrPsVu6zAodgG
gaSAAIEKdov2p+/TiQMKb8k8HKFFSR7YFoUndbax8vqOjvFmYmi0TFSDmVaOq/Z3
0649I2TWhHKQjkOA919ipUcvPccYUy0qZfE5ZKNvN6NVkh01R45QRBp0vcWp5uBX
4pyLqOGJvD3fpNU72BlnKo1FBMv/1TK1tu/z/w9mv58ing+z+QIExbzfQK1nzJrm
M+h5k/dlPKj6YNFLGNoeDIm+HC0lw5mj4zOo2bMinjd5pP8sTsa9EZu5xnQhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUdM3v0GnrdGAOYTKPhPYB+kLJ47kwHwYDVR0j
BBgwFoAUJwIEYeEG+hk5p5VfGeH47YKuhYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNDNBQjQ5OTk1MUIzNkUxNkQ4RTNEMTA0QkZENzdBQkNC
N0NCRTNDOUQ5REU1QTE2ODZCNTA0QzNDNDU3RUQ0LzAvMjcwMjA0NjFFMTA2RkEx
OTM5QTc5NTVGMTlFMUY4RUQ4MkFFODU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzAyMDQ2MUUxMDZGQTE5MzlB
Nzk1NUYxOUUxRjhFRDgyQUU4NTg5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDQzQUI0OTk5NTFCMzZFMTZEOEUzRDEwNEJGRDc3QUJDQjdDQkUzQzlE
OURFNUExNjg2QjUwNEMzQzQ1N0VENC8wLzMyMzAzMDJlMzgzOTJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM4MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyFlgMA0GCSqG
SIb3DQEBCwUAA4IBAQBvYM+SpEDR0dX5vJjgFBmwcltTGtES6B7dDSQK4v2ii0tg
3LD2s0Z6Xcr8gZvGkVt5IMQ+L3fPGHah6Cdg7HKntMFxH1JchvH8gAAzz1NeWeyW
Yv6XirEfdBoxgucFuRCwyoz6Dc+bPj+F3gnMo4geIcgDEuOJ8VdVWD5ydwjyhpYr
21tUlDwlvGmU0A5rjBh6Okrfe6CuB3BQi0WVpZL2Erfeh/stiauD2wk/Az7FJR8F
drl2hRg5ag5lHIaYBaNiWPmwjwAsYs/NCVrTWmPRCxwVzgFIX3bqHCjDSKq9wuK2
9USNdCBfwsQc5twQM1H2Egtu3tLLSwGJh+80o3Vh
-----END CERTIFICATE-----