Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa
File:                     3230302e35382e39362e302f32302d3234203d3e203237383233.roa (raw, json)
Hash identifier:          unJ8sWi+VXscNJASaTDBEn/NwIcVUS522XOjYUG4/0c=
Subject key identifier:   66:38:E3:AD:22:B4:F6:18:37:1F:37:CC:E4:D3:6C:B9:6D:AF:94:9D
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       41B8D54E0E13CE0A08B6DA56E5FBC8885C40274C
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:02 +0000
ROA not before:           Tue 05 Mar 2024 17:35:02 +0000
ROA not after:            Tue 04 Mar 2025 17:40:02 +0000
asID:                     27823
IP address blocks:        200.58.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b8:d5:4e:0e:13:ce:0a:08:b6:da:56:e5:fb:c8:88:5c:40:27:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:02 2024 GMT
            Not After : Mar  4 17:40:02 2025 GMT
        Subject: CN=6638E3AD22B4F618371F37CCE4D36CB96DAF949D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:d2:8d:0e:9a:f6:c3:86:0d:b1:22:6c:38:
                    9c:75:e2:95:f1:00:e8:11:81:dc:19:5f:b6:13:a3:
                    dd:8d:0d:a0:60:60:66:e6:3b:ff:d1:90:d2:04:df:
                    93:e6:27:54:30:23:0a:3d:28:da:68:81:81:ab:c9:
                    ed:e7:07:0c:2a:8d:b9:c1:03:f2:6d:0b:a2:b2:5a:
                    fa:c7:7e:1e:d1:18:80:3c:d1:4c:51:a7:a4:34:09:
                    9f:28:cf:ff:78:59:ca:26:5c:77:d3:75:cb:20:81:
                    5c:58:54:9c:fe:f1:39:79:a4:bd:f1:40:f7:02:c2:
                    fb:41:0d:0f:0e:12:cd:cc:1e:16:72:ee:d5:4c:0f:
                    bc:f6:21:db:76:21:c3:42:c5:7e:06:39:ad:f8:2a:
                    05:d3:19:54:9a:af:e4:71:8e:da:1c:df:a1:3c:49:
                    09:b3:e6:9e:26:91:72:fc:1b:38:db:ee:b3:30:38:
                    1d:fb:ff:80:48:20:40:2a:66:5f:6d:e4:99:a9:43:
                    99:c8:ef:ad:61:b7:5e:66:ec:49:c1:ea:05:48:d4:
                    0a:d0:80:b2:9b:14:31:95:de:90:2b:58:03:16:f0:
                    97:aa:79:36:af:8a:68:73:91:71:16:3d:79:ec:36:
                    10:4c:f1:ec:c5:77:12:0e:3e:b5:4d:df:1a:90:21:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:E3:AD:22:B4:F6:18:37:1F:37:CC:E4:D3:6C:B9:6D:AF:94:9D
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e39362e302f32302d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:2c:47:11:d8:0c:01:a9:99:97:81:1e:b8:8f:d2:80:2a:
         99:8a:0c:a9:f4:b8:e0:b3:6a:aa:f9:f5:db:f7:2b:e0:e2:75:
         53:1d:d8:ea:24:7e:c2:ee:08:b6:ed:38:3e:c3:18:53:8e:2f:
         2f:6b:72:a0:78:73:b7:f6:15:dd:c2:5f:f2:e9:f1:15:f5:3e:
         47:18:6e:34:8d:64:fb:b5:78:5d:6c:42:d0:ef:33:0c:29:b2:
         ba:1c:4d:01:33:f2:ab:5a:9e:fa:33:21:20:c3:48:23:9a:69:
         b3:8b:d5:21:2f:c5:eb:8d:38:25:67:ba:59:8e:79:e5:ca:df:
         6b:ad:c9:5e:50:a7:22:ec:ff:04:47:0e:36:22:aa:68:62:b5:
         ef:76:0c:ac:e1:c8:ea:6d:6c:ad:9d:2e:ea:47:30:0d:41:77:
         d5:79:fb:d8:c5:b9:f0:20:0e:af:30:dc:85:12:39:5f:5a:cd:
         7a:b6:9b:9f:ee:c5:97:eb:c3:af:20:b9:ee:ea:43:a0:34:2e:
         5b:f5:ca:fa:42:d2:f2:f5:18:48:ab:2c:4f:cf:b5:6d:54:cf:
         bc:62:28:10:f4:4f:b2:4b:22:1d:6a:7e:7d:6b:63:8b:eb:bc:
         c3:bc:04:2f:f8:42:e5:49:a7:74:ee:42:5e:66:8d:b9:bb:82:
         df:7c:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----