Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa
File:                     3230302e39312e36342e302f31382d3234203d3e203131383330.roa (raw, json)
Hash identifier:          biUsVQ+WZVbIl4t13UVyPUxFEe8unFSkXIXoZKNVrpA=
Subject key identifier:   8B:44:FF:74:FE:9F:26:DF:91:5A:57:81:41:B4:8C:E3:29:19:B7:81
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       538AD7B7195C848A5FE23404880831F43CF4EFB0
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:02:42 +0000
ROA not before:           Tue 05 Mar 2024 17:57:42 +0000
ROA not after:            Tue 04 Mar 2025 18:02:42 +0000
asID:                     11830
IP address blocks:        200.91.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8a:d7:b7:19:5c:84:8a:5f:e2:34:04:88:08:31:f4:3c:f4:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:42 2024 GMT
            Not After : Mar  4 18:02:42 2025 GMT
        Subject: CN=8B44FF74FE9F26DF915A578141B48CE32919B781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:5e:85:18:73:cf:67:ff:fc:dd:66:13:49:
                    98:e4:1f:fd:49:a3:d9:06:7c:63:d9:a8:a4:78:f4:
                    e4:8d:d7:0f:3a:eb:4c:d5:8a:62:42:b5:77:64:f7:
                    2a:8c:0d:c5:67:1e:74:26:90:51:2a:6e:9f:d4:ac:
                    b7:d6:47:ea:d0:35:f4:8e:57:4d:ef:7f:6c:42:6c:
                    58:74:82:c0:74:1c:ea:06:9a:11:ca:a1:bc:ba:1e:
                    3d:cd:9b:a6:16:44:98:da:33:64:e6:58:6d:8f:aa:
                    c6:71:7c:d6:47:6c:cb:2c:45:8e:b1:8d:be:b7:e1:
                    5d:0e:71:4c:d9:7a:75:fc:17:36:db:b2:33:76:cf:
                    99:22:12:67:01:ba:81:e5:a9:a2:c6:c8:a5:c9:67:
                    04:ec:c6:e1:a4:04:0c:82:cf:ba:c7:e0:b4:32:bb:
                    7b:5f:8e:d5:9f:a8:0c:e9:37:79:5e:47:66:0d:4f:
                    b1:4f:bd:1b:09:6e:11:47:02:fe:84:b6:cc:eb:90:
                    76:0a:93:c4:91:ec:4b:aa:36:fd:ce:32:33:63:38:
                    72:b8:6a:ad:38:0f:06:5b:bc:76:2d:b5:fb:fe:d0:
                    41:30:04:28:08:f8:7c:57:38:57:66:bd:c2:eb:4e:
                    18:85:67:e3:39:13:06:b8:60:a7:97:1f:df:67:e3:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:44:FF:74:FE:9F:26:DF:91:5A:57:81:41:B4:8C:E3:29:19:B7:81
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230302e39312e36342e302f31382d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:cf:82:5e:46:c7:30:22:70:cf:1d:9b:b9:55:d1:14:bb:
         7b:7c:a1:9e:f1:2c:aa:5f:7a:c0:fe:f4:89:9e:4d:90:9b:9a:
         5d:ae:b6:0f:d2:dc:de:da:0b:a7:ee:0d:be:b5:d4:02:61:b9:
         7a:ee:8a:4f:63:a6:1f:97:25:19:c1:f5:9c:46:19:bf:31:cc:
         83:f0:a3:00:00:f4:42:51:fd:30:0a:d3:62:f9:24:13:b5:a6:
         07:7e:e3:8e:74:f4:8c:28:a5:74:b3:7e:9f:20:89:24:e9:7e:
         58:09:24:e3:ef:70:42:0e:66:ff:3d:86:fc:73:5c:68:75:28:
         02:46:02:b2:d8:c3:c1:2e:d7:61:b5:34:77:a2:6d:ec:1c:16:
         7a:27:3f:b5:9d:73:be:cb:60:ee:cf:f3:bc:16:80:92:2b:eb:
         45:db:f0:b5:64:77:09:8d:1d:9d:7d:ed:42:35:38:fe:eb:eb:
         10:e2:3a:6a:6d:b9:8a:04:5a:70:75:52:25:c9:27:b3:07:f1:
         3a:a5:4b:e5:ac:ed:e2:7a:ce:86:9f:a5:db:ac:39:4c:47:d3:
         ab:87:df:a5:7a:ad:d1:91:d5:c5:29:b3:00:62:cb:a3:08:d2:
         be:84:3f:ab:6d:20:29:63:dc:1b:8c:a6:a1:e9:ed:63:a7:b5:
         a8:6a:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----