Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa
File:                     3230312e3234342e302e302f31352d3234203d3e203139343239.roa (raw, json)
Hash identifier:          Gx8SvgYjCqyJWl8RYgCZHfjKhslckxslZO9H/kjx9SY=
Subject key identifier:   61:B0:68:41:12:0D:E6:56:A1:55:C1:E4:18:E4:42:23:73:03:B5:AA
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       48B4B8E4838629F92BD3EEB6F26B3B0DC34EF6D6
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:09 +0000
ROA not before:           Tue 05 Mar 2024 18:10:09 +0000
ROA not after:            Tue 04 Mar 2025 18:15:09 +0000
asID:                     19429
IP address blocks:        201.244.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b4:b8:e4:83:86:29:f9:2b:d3:ee:b6:f2:6b:3b:0d:c3:4e:f6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:09 2024 GMT
            Not After : Mar  4 18:15:09 2025 GMT
        Subject: CN=61B06841120DE656A155C1E418E442237303B5AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:67:84:a6:53:2e:ac:5a:7e:61:b1:e6:f0:
                    a1:22:a8:cc:f3:23:1b:15:02:df:2b:dc:2a:d4:6b:
                    94:de:f4:00:c2:96:b4:f0:04:a0:c4:13:6e:e2:c9:
                    c3:c4:3b:33:30:f6:88:56:95:bf:ed:2f:19:e3:34:
                    7b:6d:02:73:c3:f9:b2:ee:29:24:2a:ae:40:33:38:
                    61:bf:fd:2c:c4:c7:64:74:f1:56:62:dc:b7:f2:9c:
                    ff:c3:ce:a6:6b:51:fe:28:54:ba:23:a8:f6:d4:36:
                    81:71:5c:f4:98:9c:2d:8b:b1:95:31:83:c7:70:9a:
                    b2:cd:46:17:87:70:45:83:eb:09:a1:24:73:61:e8:
                    fc:a7:f7:8f:a4:0c:1f:db:df:9c:f2:b7:bc:2e:24:
                    0b:94:8f:2b:71:cd:43:9b:d5:d8:0c:12:ab:56:ef:
                    ba:8f:55:8e:0c:de:23:67:be:a1:4f:73:dc:a7:10:
                    ab:9c:58:f1:95:d0:45:aa:9a:a8:65:45:37:aa:46:
                    5c:0c:74:69:d8:0e:2a:11:1b:32:01:ef:60:5c:99:
                    52:e3:50:1a:d1:90:fe:58:cb:d9:b3:4b:4d:50:14:
                    9d:7d:4c:b7:e0:26:02:5c:b1:81:1e:bb:f2:69:a2:
                    b2:c0:e8:d5:d7:2c:2b:48:38:40:f5:40:e1:8e:f7:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:68:41:12:0D:E6:56:A1:55:C1:E4:18:E4:42:23:73:03:B5:AA
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230312e3234342e302e302f31352d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.244.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:03:07:5f:8d:aa:a2:dd:99:bf:0d:74:56:aa:77:f1:a6:
         60:5a:a3:d2:36:45:f8:55:2d:fc:80:55:c5:46:4a:5f:90:8c:
         c3:05:87:81:ac:a9:b3:84:1d:f5:d1:d3:5a:f2:1b:77:b5:fc:
         78:cf:a7:53:1b:a5:7d:bc:82:55:ec:99:4d:3b:f5:05:6d:a2:
         58:27:11:da:8b:3c:a8:c9:81:f7:65:b9:5b:b0:5e:bc:97:cd:
         56:dc:8b:7b:c2:ee:e8:d8:5f:ac:af:f3:5d:b1:87:6e:3d:2b:
         69:fc:b2:12:f7:75:7d:8e:01:66:4a:c7:e0:4e:76:ee:30:4a:
         96:8a:7a:47:3c:31:54:09:7b:0a:41:88:af:77:73:ae:a4:3f:
         ea:dc:ed:77:4d:e6:ba:f2:e0:42:32:5e:53:b1:2e:d6:19:eb:
         07:76:6b:87:12:18:7f:bc:b6:e3:f2:27:48:94:f5:59:64:01:
         06:bd:05:80:e2:a7:ff:e1:1b:17:7b:5d:7a:3d:13:4d:ec:7b:
         8c:5b:aa:c0:00:a1:f5:4e:03:44:5b:66:27:c3:c4:ab:52:c6:
         93:eb:16:07:63:7d:64:c6:20:63:45:80:4e:9b:fb:e4:88:3b:
         f5:29:93:bb:bb:a3:9a:f6:e4:28:34:81:1f:0f:1c:fa:d3:cd:
         d4:05:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----