Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa
File:                     3230312e3232312e3132342e302f32332d3234203d3e20323033.roa (raw, json)
Hash identifier:          MPTa1LOhXbzTe6PFqK4qhuBH37TNnaovEDuoks+iZuQ=
Subject key identifier:   94:19:3E:6F:B1:5F:6F:DE:C2:C4:A2:24:A4:FF:1D:BF:5F:FC:C8:4B
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       58DE397DB7BD5DF9A3BC7BAE0234A5DC2C75F2A2
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa
Signing time:             Tue 05 Mar 2024 17:54:17 +0000
ROA not before:           Tue 05 Mar 2024 17:49:17 +0000
ROA not after:            Tue 04 Mar 2025 17:54:17 +0000
asID:                     203
IP address blocks:        201.221.124.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:de:39:7d:b7:bd:5d:f9:a3:bc:7b:ae:02:34:a5:dc:2c:75:f2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:17 2024 GMT
            Not After : Mar  4 17:54:17 2025 GMT
        Subject: CN=94193E6FB15F6FDEC2C4A224A4FF1DBF5FFCC84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:90:ad:d9:cf:cb:f8:4b:63:d9:2e:e9:9f:
                    67:fc:3d:45:0e:24:7e:de:65:c1:7e:33:a8:d6:0e:
                    2d:b4:c2:ca:66:04:95:d2:6a:c3:fb:7c:35:9c:ca:
                    11:54:d0:1f:c3:5b:a9:96:83:eb:17:dd:ba:81:a7:
                    b9:8f:eb:e6:bb:86:44:be:d4:a6:ed:47:8d:cd:a7:
                    8a:df:52:5e:3f:7a:9c:9d:eb:48:b0:a6:c4:d9:24:
                    ad:1c:60:8b:f9:e8:eb:5c:6e:6d:e7:5d:23:1f:9c:
                    cf:b6:70:51:cc:bc:ae:92:e5:13:20:9a:2f:1e:b3:
                    d8:c5:28:b4:7d:dd:bf:2b:e9:1d:4b:84:cc:18:41:
                    d8:7e:99:e0:ee:48:ed:23:0d:dd:1e:00:90:97:03:
                    27:ca:fc:ba:52:99:d6:c3:12:c9:18:bf:82:d5:70:
                    6a:e8:ea:9f:4d:6e:db:cb:7e:ed:03:1e:95:5c:2e:
                    02:b5:b4:22:8a:02:28:29:05:7f:92:8f:5b:b4:8d:
                    76:fc:94:1a:1e:9e:9f:56:0e:67:1d:a5:fb:fc:15:
                    ce:36:02:0d:6a:ee:e9:21:35:74:c1:cd:7c:8e:2f:
                    15:7b:26:c4:e6:ba:46:03:4e:4c:fa:96:b0:22:5d:
                    5b:dd:c6:8f:b3:d1:e2:5e:3e:f0:5b:7b:f5:f6:69:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:19:3E:6F:B1:5F:6F:DE:C2:C4:A2:24:A4:FF:1D:BF:5F:FC:C8:4B
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230312e3232312e3132342e302f32332d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:18:ee:14:2b:b3:2f:2a:47:ff:bf:b6:7e:29:12:d2:25:f1:
         dc:c2:5d:bf:06:8f:f5:7c:3a:2b:e3:db:35:6b:9d:d7:d2:16:
         c5:8c:b3:97:32:d7:16:25:a6:e6:7f:9b:2d:59:75:05:e3:f2:
         16:b8:6a:be:21:aa:01:18:51:5e:a3:29:d5:4e:b1:ef:1a:ff:
         3c:9e:d0:c2:20:21:92:49:09:96:76:29:a1:9a:f6:52:12:77:
         89:72:0b:98:c7:3e:4f:e4:9b:90:93:24:02:f6:8c:38:fe:c1:
         82:01:6b:9d:20:1d:e8:7e:77:40:a1:70:3d:3a:a9:38:92:dc:
         13:c5:ad:5a:6f:5c:8f:e0:cc:52:25:12:0f:97:31:65:06:51:
         b7:90:ce:f1:05:e9:19:4a:c9:62:9e:cc:9d:cc:29:8a:a5:27:
         83:ed:6f:e7:ed:93:fe:ae:f1:1f:01:27:fa:51:1c:6f:bd:f3:
         1b:cf:e8:2b:56:ae:72:1d:20:ff:11:3d:0c:3d:85:2c:4b:80:
         36:08:61:e3:3b:c9:1b:de:2e:ab:5e:7c:1a:f5:c8:c5:6c:5a:
         d3:7c:c5:22:54:15:0b:b3:e9:69:66:7d:35:8a:55:83:d3:71:
         d9:b3:f8:74:b4:ea:b9:6b:3b:05:05:71:f1:48:7a:3f:09:40:
         b9:09:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----