Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3230302e362e3134342e302f32312d3233203d3e203237373435.roa
File:                     3230302e362e3134342e302f32312d3233203d3e203237373435.roa (raw, json)
Hash identifier:          uc7RTQV60Xw6lrarXlkdmzssZUP/p3g01T06dwixQfo=
Subject key identifier:   97:A2:F6:02:19:65:DD:E7:72:96:97:3A:BF:50:93:C9:4F:6C:42:84
Certificate issuer:       /CN=15DB6B388486161B93957759E07BEB14CE6D932F
Certificate serial:       74262D5FB59CC8E8CA89BF3850DFF6C33A60256F
Authority key identifier: 15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3230302e362e3134342e302f32312d3233203d3e203237373435.roa
Signing time:             Tue 05 Mar 2024 17:51:30 +0000
ROA not before:           Tue 05 Mar 2024 17:46:30 +0000
ROA not after:            Tue 04 Mar 2025 17:51:30 +0000
asID:                     27745
IP address blocks:        200.6.144.0/21 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:26:2d:5f:b5:9c:c8:e8:ca:89:bf:38:50:df:f6:c3:3a:60:25:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DB6B388486161B93957759E07BEB14CE6D932F
        Validity
            Not Before: Mar  5 17:46:30 2024 GMT
            Not After : Mar  4 17:51:30 2025 GMT
        Subject: CN=97A2F6021965DDE77296973ABF5093C94F6C4284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:dc:75:3d:b1:84:55:a7:03:5d:f4:83:88:
                    3a:60:04:a0:c3:dd:c6:32:e6:d1:19:6c:19:33:74:
                    30:29:f5:92:76:3d:8d:23:56:b8:77:5c:2d:5d:79:
                    7c:56:71:92:d0:fb:62:5b:14:1b:5a:76:86:4f:b1:
                    1d:38:99:7e:c2:cd:f5:05:cf:8a:0f:69:97:fa:80:
                    44:43:e0:d6:b3:6b:2d:f8:58:38:9c:49:a6:00:50:
                    98:97:bc:a7:79:1a:6f:13:3c:3a:fd:3e:aa:86:91:
                    70:3f:a7:65:69:62:d5:23:8a:8f:95:35:82:a8:d6:
                    23:35:cb:55:a1:d1:72:58:ca:2b:ac:80:f7:62:ee:
                    d3:cd:40:4a:20:4b:35:0d:f5:f3:5b:f5:17:4e:05:
                    7a:0c:25:29:bb:43:44:ca:08:ea:3e:0d:75:3f:fd:
                    ab:d3:4f:86:ba:2b:40:89:d4:06:58:2d:d8:8a:0e:
                    f1:e8:6a:83:59:52:40:e1:ca:66:1e:8e:56:c2:df:
                    93:cb:9d:69:04:8b:86:e9:1a:17:0c:1a:ed:cb:bc:
                    52:51:d5:0f:a5:20:62:eb:23:2a:9a:ed:47:5b:cb:
                    a7:46:19:5f:80:a0:0e:65:4e:9f:43:90:25:1a:d1:
                    e1:ff:5e:87:dd:28:68:fe:76:52:8d:be:03:0f:a0:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A2:F6:02:19:65:DD:E7:72:96:97:3A:BF:50:93:C9:4F:6C:42:84
            X509v3 Authority Key Identifier:
                keyid:15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3230302e362e3134342e302f32312d3233203d3e203237373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:fd:5b:05:0a:cf:69:93:32:58:3a:fc:bd:77:9d:f4:8c:
         34:b7:3a:1b:6b:40:08:e2:ea:7a:50:95:3c:59:f1:64:93:9c:
         0d:51:cb:a0:62:10:62:7c:83:9b:46:1a:7b:5e:52:86:69:a2:
         9a:b9:1e:57:3b:65:b3:23:44:55:91:a1:c4:ac:d3:2c:60:ff:
         ca:71:ae:d4:28:a2:fd:06:f7:36:77:95:d3:6e:2c:de:86:50:
         db:81:2a:0e:5a:b9:f0:70:70:3b:6d:bc:33:b9:aa:36:ec:c1:
         13:62:05:0d:7a:69:27:c0:00:7a:6f:7c:30:42:1c:0b:fc:a4:
         c4:a3:15:fc:cc:90:9f:61:40:6b:ce:87:fd:f2:bc:60:8d:a7:
         a4:2e:00:ae:93:8b:22:3f:b0:cf:28:e7:a8:15:19:c2:5d:6a:
         c5:f9:be:82:b5:ad:bb:41:b2:05:b6:e9:5f:b2:11:21:ae:d8:
         5a:62:dd:9a:6c:4a:c2:01:85:84:e7:c0:7f:4c:6a:72:ed:c0:
         e6:e8:7a:28:b0:af:a9:35:8a:51:31:bd:28:95:79:66:76:a3:
         6c:ec:16:73:fa:27:1b:a4:c5:f4:75:da:b7:3b:18:32:3d:c2:
         08:05:e9:b1:43:20:d9:41:3c:5f:9b:1c:80:8e:18:59:95:7b:
         cd:41:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----