Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3231342e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          w38jdVHB2uipQrkRdDVKc4J+Y4ZI45eqlH/gtSjD5vw=
Subject key identifier:   08:78:42:61:5D:6C:40:10:5C:56:17:A1:7A:A4:44:06:FF:97:79:60
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       1E3AABE3AB5ABAE462C51674C1562FB4812BA92A
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:20:10 +0000
ROA not before:           Tue 05 Mar 2024 18:15:10 +0000
ROA not after:            Tue 04 Mar 2025 18:20:10 +0000
asID:                     6429
IP address blocks:        200.14.214.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3a:ab:e3:ab:5a:ba:e4:62:c5:16:74:c1:56:2f:b4:81:2b:a9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Mar  5 18:15:10 2024 GMT
            Not After : Mar  4 18:20:10 2025 GMT
        Subject: CN=087842615D6C40105C5617A17AA44406FF977960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:cb:9a:40:4f:16:e6:8b:04:08:6e:d7:63:
                    8e:62:54:d7:12:b5:94:7e:5b:56:53:57:4f:15:78:
                    58:21:8f:f7:4e:44:dd:74:2e:4c:d9:d6:9b:14:b0:
                    f1:54:88:0e:e8:a6:7e:99:23:f9:8f:fc:77:ec:b7:
                    32:29:1c:88:9e:3f:06:ef:0e:1d:e2:f1:a3:7c:02:
                    f5:31:f6:b6:08:10:87:b7:72:c6:34:28:58:c3:b9:
                    24:2e:7f:02:e4:cc:f8:0e:08:2e:73:9a:71:0f:dc:
                    ed:54:0c:4c:45:67:88:f5:40:3b:31:97:47:45:b8:
                    29:70:3a:0c:14:86:2a:dc:61:96:11:da:ae:6b:cd:
                    4e:15:8e:57:ed:43:11:40:ea:3c:87:74:cf:61:9d:
                    cd:85:99:29:86:c1:ee:32:66:46:69:2e:35:26:32:
                    3c:8f:2b:3f:fc:f4:6f:d6:94:de:b3:11:80:dc:92:
                    f0:9c:5d:dd:cb:30:d8:f3:c3:2e:e6:a0:3a:1e:6b:
                    dc:98:c3:25:58:d0:fc:db:9c:d8:5c:a6:11:ff:36:
                    98:ee:f7:c1:c7:3a:99:21:20:fd:68:20:9a:b6:ea:
                    e6:38:7e:a1:a1:c7:3e:d8:c8:93:e7:75:77:b2:bc:
                    29:8a:18:78:2d:dc:d4:11:25:b0:fc:b2:4c:ce:aa:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:42:61:5D:6C:40:10:5C:56:17:A1:7A:A4:44:06:FF:97:79:60
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:69:c6:9b:77:21:c2:73:a1:78:21:2b:2f:a0:f4:0f:eb:
         55:16:d9:a8:e0:05:ef:2c:e2:86:74:b0:49:87:a4:a7:fe:ff:
         20:d9:36:a2:4d:91:58:69:05:3b:41:df:90:0c:2a:76:81:44:
         87:58:1a:1e:08:54:87:42:11:5a:31:80:f6:49:75:ab:56:e2:
         77:53:67:88:ca:59:24:29:12:b3:27:50:39:0e:41:b4:3e:6b:
         0b:dc:98:e8:ed:3f:7d:28:be:5a:95:43:b2:77:85:d5:b6:01:
         fa:19:2b:99:b0:27:e2:19:43:23:e9:2f:a3:1d:66:f5:76:2a:
         7a:4d:e9:f8:4d:39:b1:73:ef:c4:9b:34:ed:14:ba:69:7f:40:
         0b:54:99:64:1f:de:24:ca:93:14:2f:a2:4d:7d:4a:39:6c:4a:
         a1:ee:0d:3b:36:f8:c7:e8:76:03:76:36:e7:af:6a:21:e6:d8:
         57:75:5f:bd:e2:e7:9d:02:0b:8c:43:04:9a:2d:e2:30:00:b5:
         c6:cc:cc:18:39:55:f5:d6:5c:96:39:5e:29:d9:fa:9b:8a:cd:
         05:0d:8a:90:56:26:cb:22:b9:a2:62:cb:70:a3:d6:4d:2f:02:
         ea:85:b0:4e:ec:cc:05:5a:50:e6:5f:73:af:3f:c0:f7:8f:71:
         2a:0e:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----