Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa
File:                     3230312e3233372e302e302f31362d3234203d3e203131383330.roa (raw, json)
Hash identifier:          57EcoqomVm5s79/xdm4nVqLWlzbMMF1w8gAjCCwM198=
Subject key identifier:   D6:9F:5E:79:7A:A0:F6:87:4F:42:1F:4D:62:AA:B3:2D:77:FB:6F:4E
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6763057192D29669B2D1F50A8AFE9215F73B73E2
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:02:39 +0000
ROA not before:           Tue 05 Mar 2024 17:57:39 +0000
ROA not after:            Tue 04 Mar 2025 18:02:39 +0000
asID:                     11830
IP address blocks:        201.237.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:63:05:71:92:d2:96:69:b2:d1:f5:0a:8a:fe:92:15:f7:3b:73:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:39 2024 GMT
            Not After : Mar  4 18:02:39 2025 GMT
        Subject: CN=D69F5E797AA0F6874F421F4D62AAB32D77FB6F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:f0:2c:29:7a:70:3f:54:3a:3e:d4:9e:21:
                    53:79:b6:41:0d:db:39:98:ca:20:57:ce:e5:7c:3f:
                    40:bd:f3:1e:fb:43:d4:29:d5:76:10:b9:1c:51:dd:
                    7b:56:20:f0:d6:dc:f0:3c:07:78:b6:b7:5e:11:11:
                    55:e6:7b:dd:9a:e4:b9:bc:e6:82:47:df:b2:2b:e3:
                    73:e3:99:46:9d:18:be:ba:61:10:02:51:03:48:ba:
                    37:df:72:be:6a:16:e8:2f:9d:c0:f1:68:b2:8c:19:
                    5d:aa:21:65:b2:79:62:4b:22:3f:0d:20:68:69:52:
                    0b:07:c8:c5:44:07:b1:ad:ec:00:06:15:bc:16:1e:
                    9a:28:5b:9e:b6:a0:ee:08:3b:c6:e6:0c:1e:c1:c3:
                    6c:5e:07:8d:66:ed:f5:d9:2e:35:86:38:17:db:74:
                    27:f4:00:e8:9b:b6:43:77:60:49:46:1d:72:21:55:
                    ba:ca:d9:58:13:cf:1f:f9:53:50:79:2a:d1:02:43:
                    c4:94:9f:af:18:bd:23:e0:07:86:ee:a7:f5:16:b8:
                    60:94:5b:ce:0e:c0:7c:99:3f:01:b0:c0:ca:47:59:
                    a0:e6:74:bb:32:56:fa:15:2e:19:f1:12:14:92:95:
                    fb:fe:f1:c9:29:98:b1:e4:db:02:a0:8a:39:13:dd:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9F:5E:79:7A:A0:F6:87:4F:42:1F:4D:62:AA:B3:2D:77:FB:6F:4E
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:f1:c0:5c:4f:0c:a2:27:64:e8:c3:fd:d8:4f:c5:56:d1:
         e9:84:e2:09:f3:2c:c0:4f:a3:c5:a0:3f:d1:fe:bf:1b:e0:40:
         d1:bb:d0:73:65:5d:59:6a:03:98:34:25:93:d5:da:4a:43:12:
         73:25:82:e4:9f:29:dd:31:2c:62:08:0f:f1:3d:83:eb:38:5d:
         5c:ef:f5:f7:7e:58:1b:b5:a7:69:66:e7:fe:6c:82:cb:38:89:
         f1:b3:b2:ff:34:54:7e:d8:a7:d6:14:b7:ff:67:d7:f1:57:9f:
         bf:26:68:1f:98:69:a8:3e:fc:05:8f:f9:c1:1f:e8:4d:d5:0b:
         20:1a:6f:7d:b1:c6:ce:7b:5d:55:84:fc:01:5b:e5:52:4f:9b:
         d8:56:a7:e9:ff:25:f7:4e:b9:a9:63:6b:78:de:53:49:51:3c:
         95:85:66:6b:0e:9b:b3:6b:22:14:83:2c:4e:e0:c1:aa:43:f3:
         e6:d4:3b:df:15:2c:6d:3c:18:41:2e:a2:91:ee:c4:3f:78:2d:
         39:69:11:6b:49:ed:4f:4c:84:6b:a1:e9:e9:d5:77:18:54:fc:
         16:ef:5b:14:78:54:f2:00:19:42:82:15:76:9a:66:44:6a:bb:
         9f:27:e6:01:ce:cd:7e:17:a7:ed:07:fc:57:d4:74:91:7c:b1:
         75:8c:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----