Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131322e302f32302d3234203d3e203237383233.roa
File:                     3230302e35382e3131322e302f32302d3234203d3e203237383233.roa (raw, json)
Hash identifier:          vuweUeB3wZH1xq4ecoaAp34Ir5x2pWY2Lem5YhNOK0I=
Subject key identifier:   26:C9:9B:8A:23:AA:A8:86:95:18:54:ED:EF:E9:E2:4D:33:86:97:56
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       4F4A0646C885E3F525FF39EEDC067B1CAA64FE5E
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131322e302f32302d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:12 +0000
ROA not before:           Tue 05 Mar 2024 17:35:12 +0000
ROA not after:            Tue 04 Mar 2025 17:40:12 +0000
asID:                     27823
IP address blocks:        200.58.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4a:06:46:c8:85:e3:f5:25:ff:39:ee:dc:06:7b:1c:aa:64:fe:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:12 2024 GMT
            Not After : Mar  4 17:40:12 2025 GMT
        Subject: CN=26C99B8A23AAA886951854EDEFE9E24D33869756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:cb:00:9f:6d:78:91:8d:f3:61:12:ba:4a:
                    6f:67:54:e4:3c:0b:ff:fd:67:2d:c1:07:0a:c2:2f:
                    25:e8:5a:1f:65:f3:d9:02:d6:b6:a8:79:f9:90:e4:
                    28:54:74:46:5e:ab:73:08:91:fb:87:26:58:0e:ce:
                    6c:55:e8:96:31:c5:1f:ba:79:24:fe:b3:48:9c:3a:
                    4c:70:62:65:37:f8:48:1d:3f:19:18:12:b7:e7:9e:
                    3d:47:b4:a1:10:76:1b:8b:03:0e:57:ce:a2:36:cc:
                    3c:07:df:ae:b1:03:40:9d:3f:30:9e:2e:a8:df:24:
                    ae:b6:c1:1b:6c:bc:81:2a:40:45:04:c3:38:f0:68:
                    2f:3a:84:cc:5a:db:cc:ac:a5:f5:ae:33:52:d3:20:
                    37:c9:cd:51:87:4f:d4:51:22:da:f9:fa:45:53:6f:
                    98:cb:e5:44:c3:67:6a:a9:a1:23:fc:82:65:2f:40:
                    bb:50:ac:97:f2:09:7e:ca:45:66:a6:50:88:d0:48:
                    43:b3:b3:12:f3:3b:d2:f5:b8:4e:7c:6f:81:59:d0:
                    5f:cd:bf:9e:03:75:24:37:59:a0:2c:65:9a:79:3c:
                    1f:89:98:48:c6:d3:b0:a9:f6:e3:c3:12:9d:0e:d3:
                    e5:23:86:74:3e:a1:b7:70:6b:31:d1:20:84:37:9b:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:9B:8A:23:AA:A8:86:95:18:54:ED:EF:E9:E2:4D:33:86:97:56
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131322e302f32302d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:f6:ab:da:57:eb:87:d3:ed:7c:07:4d:6d:d4:b7:f0:54:
         b9:62:97:37:7f:35:08:a1:af:85:37:74:eb:9e:3e:35:78:45:
         39:b7:bf:ca:e2:1a:ae:bb:cc:6e:cf:41:e4:18:8f:48:2c:40:
         b0:cd:b6:df:d5:01:a0:38:75:8b:c7:40:b9:a9:a5:dc:b9:ee:
         c7:29:0b:5c:89:8d:0d:be:ac:e5:5a:14:27:ab:62:d8:64:9e:
         c3:e4:b2:e8:c5:6c:45:8f:90:6c:a0:39:9b:1f:b7:a6:28:b6:
         ce:68:a2:3e:bd:f5:ef:7d:d9:cd:8b:2a:07:74:08:da:f5:21:
         f1:3b:67:29:29:f4:8e:fd:6f:7c:27:3d:e0:9a:88:a3:3c:7f:
         b3:66:c9:e3:35:44:f5:f4:a9:f0:06:1d:30:43:bd:cc:d5:1d:
         2f:41:4f:6e:cc:19:a0:5b:b1:4c:9a:9f:88:f4:4e:d3:28:31:
         cb:2a:cf:04:20:41:1e:72:4e:c1:69:18:0b:fa:52:5d:e5:39:
         2d:7e:39:eb:f2:6c:16:9e:95:8b:1c:e0:b3:23:48:b2:67:a0:
         89:44:70:64:07:00:e3:69:30:60:15:9c:3f:da:a0:6c:6c:4a:
         79:b8:3c:cb:1a:4f:41:51:48:09:c0:de:fc:f6:a0:1f:f0:a4:
         08:53:af:dd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT0oGRsiF4/Ul/znu3AZ7HKpk/l4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNDAzMDUxNzM1MTJaFw0yNTAzMDQxNzQwMTJaMDMxMTAvBgNV
BAMTKDI2Qzk5QjhBMjNBQUE4ODY5NTE4NTRFREVGRTlFMjREMzM4Njk3NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvz8sAn214kY3zYRK6Sm9nVOQ8
C//9Zy3BBwrCLyXoWh9l89kC1raoefmQ5ChUdEZeq3MIkfuHJlgOzmxV6JYxxR+6
eST+s0icOkxwYmU3+EgdPxkYErfnnj1HtKEQdhuLAw5XzqI2zDwH366xA0CdPzCe
LqjfJK62wRtsvIEqQEUEwzjwaC86hMxa28yspfWuM1LTIDfJzVGHT9RRItr5+kVT
b5jL5UTDZ2qpoSP8gmUvQLtQrJfyCX7KRWamUIjQSEOzsxLzO9L1uE58b4FZ0F/N
v54DdSQ3WaAsZZp5PB+JmEjG07Cp9uPDEp0O0+UjhnQ+obdwazHRIIQ3m4UBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJsmbiiOqqIaVGFTt7+niTTOGl1YwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMyMzAzMDJlMzUzODJlMzEzMTMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMg6cDAN
BgkqhkiG9w0BAQsFAAOCAQEAWLr2q9pX64fT7XwHTW3Ut/BUuWKXN381CKGvhTd0
654+NXhFObe/yuIarrvMbs9B5BiPSCxAsM2239UBoDh1i8dAuaml3LnuxykLXImN
Db6s5VoUJ6ti2GSew+Sy6MVsRY+QbKA5mx+3pii2zmiiPr31733ZzYsqB3QI2vUh
8TtnKSn0jv1vfCc94JqIozx/s2bJ4zVE9fSp8AYdMEO9zNUdL0FPbswZoFuxTJqf
iPRO0ygxyyrPBCBBHnJOwWkYC/pSXeU5LX456/JsFp6VixzgsyNIsmegiURwZAcA
42kwYBWcP9qgbGxKebg8yxpPQVFICcDe/PagH/CkCFOv3Q==
-----END CERTIFICATE-----