Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203134373534.roa
File:                     3230302e3131392e3132382e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          4LJwCpCgaopBSkEn/wfifjuOYdMU7quPL7lcIP3ftl8=
Subject key identifier:   2D:55:D9:4D:26:42:4D:8B:37:23:F0:67:DA:FC:3C:D5:FA:E0:D7:5F
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6811E998C0CA4162A8CDAAFEB28EC38179C8DB03
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:39 +0000
ROA not before:           Tue 05 Mar 2024 17:37:39 +0000
ROA not after:            Tue 04 Mar 2025 17:42:39 +0000
asID:                     14754
IP address blocks:        200.119.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:e9:98:c0:ca:41:62:a8:cd:aa:fe:b2:8e:c3:81:79:c8:db:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:39 2024 GMT
            Not After : Mar  4 17:42:39 2025 GMT
        Subject: CN=2D55D94D26424D8B3723F067DAFC3CD5FAE0D75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:1a:f6:c0:ea:f3:50:0e:9f:77:0c:21:67:
                    5c:df:e0:a9:ed:16:e7:91:7a:e0:a1:b7:8f:f8:f2:
                    92:b6:40:5b:14:ea:90:ef:03:99:9f:69:9a:90:d7:
                    81:25:e4:12:03:39:ee:f8:bd:9d:1c:2f:50:62:c3:
                    5b:09:12:14:a6:b6:b2:6e:b8:af:d0:de:c6:24:3b:
                    8c:6e:4a:e0:77:76:23:0e:31:d4:19:00:8a:5f:7e:
                    d6:64:6f:6c:fd:c3:ac:07:37:f5:bf:41:e7:56:c6:
                    1c:76:99:3b:65:04:e1:21:ed:f8:07:84:82:cd:fc:
                    06:86:85:96:2b:6d:89:42:60:f2:75:28:79:4a:d8:
                    65:6a:cb:1e:46:ea:86:06:84:73:29:3c:12:bf:df:
                    46:2a:9e:c4:06:0a:14:51:e0:92:a9:ed:e9:4f:73:
                    32:27:97:ef:58:97:7d:3d:ea:23:41:4e:ec:92:dc:
                    9e:a7:48:7a:19:8f:50:f8:53:aa:ac:cf:5a:7c:af:
                    5d:cf:a2:79:b7:bb:02:6e:1b:fa:b9:e3:9a:76:6f:
                    96:73:e5:a4:70:39:67:57:f5:2e:df:66:fb:26:85:
                    28:01:aa:b7:de:e5:4c:d7:57:b3:29:a3:db:aa:8d:
                    5e:cf:9a:74:b7:93:b9:21:09:79:6e:50:86:6f:2c:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:D9:4D:26:42:4D:8B:37:23:F0:67:DA:FC:3C:D5:FA:E0:D7:5F
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:08:4b:72:29:56:72:4c:0d:65:b8:b0:7a:25:7a:79:c9:
         b1:8d:63:30:ba:b5:85:2c:6f:82:c7:31:97:c9:98:72:81:69:
         22:6f:f6:1b:38:e6:38:d4:f5:5e:24:d8:35:0e:02:ed:9f:08:
         94:f5:ca:09:44:86:ee:90:de:c4:64:a2:5a:4c:fd:87:99:00:
         19:ec:ab:6b:2f:c5:8e:fb:89:4a:e0:a6:f2:27:12:15:f3:7f:
         20:d5:6d:43:64:6d:4a:6f:17:d5:56:b8:a3:80:0b:33:d0:b2:
         57:d3:a1:bd:f3:39:fb:4c:68:48:58:8c:b5:48:df:79:35:5a:
         5f:20:7b:44:8d:30:d9:fc:05:4c:1a:ec:1f:5b:e3:21:83:e1:
         54:a3:14:ef:cd:b5:00:45:91:6d:46:f0:91:3f:b1:b2:05:48:
         71:3a:01:b8:48:fa:71:60:7a:e1:00:58:68:f7:52:6e:db:96:
         e0:d9:7d:b3:50:49:77:54:02:ea:a5:41:09:03:2c:57:f5:1b:
         eb:92:a7:ec:c8:67:46:c9:18:1e:c5:99:c3:61:6d:f2:b0:12:
         10:79:29:09:93:98:d8:50:40:06:24:c2:69:f4:f7:64:73:7e:
         53:b3:e9:51:a3:51:b2:ac:cc:c8:69:75:f0:be:19:a9:9f:3e:
         61:5d:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----