Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e38352e38382e302f32312d3234203d3e203237393533.roa
File:                     3230302e38352e38382e302f32312d3234203d3e203237393533.roa (raw, json)
Hash identifier:          WWXn+AC3AG87oNT0DzTYQfCbXgYdSkztrRcolleKyhs=
Subject key identifier:   83:8B:11:6C:A2:A8:F6:B5:9C:79:82:79:37:F8:F9:16:2B:3D:14:F5
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       496052F3CBB4300D3C2FE5F7B0DFE312DA6E4AC7
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e38352e38382e302f32312d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:52 +0000
ROA not before:           Tue 05 Mar 2024 18:02:52 +0000
ROA not after:            Tue 04 Mar 2025 18:07:52 +0000
asID:                     27953
IP address blocks:        200.85.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:52:f3:cb:b4:30:0d:3c:2f:e5:f7:b0:df:e3:12:da:6e:4a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:52 2024 GMT
            Not After : Mar  4 18:07:52 2025 GMT
        Subject: CN=838B116CA2A8F6B59C79827937F8F9162B3D14F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:e6:f8:6b:00:bf:9d:d6:3b:49:6b:9c:33:
                    35:5a:81:00:2f:c1:02:1a:0f:8c:ba:76:25:ee:20:
                    08:4b:42:6d:c0:da:8a:e5:4e:3d:96:91:2b:10:a7:
                    24:5b:b1:72:83:72:c9:cd:f0:b4:77:3f:e2:d0:f4:
                    fa:11:0e:50:41:9d:50:da:f2:13:70:9b:3c:70:30:
                    12:2e:4f:73:1d:eb:ae:41:a2:a4:02:5c:fb:fa:75:
                    45:7b:9c:1a:af:66:8e:b2:e5:32:67:56:98:7f:77:
                    b2:41:f8:f1:48:60:f5:8e:6e:1c:d0:f7:1f:d6:74:
                    9e:53:a9:48:a5:58:61:44:46:a7:ff:31:0b:9e:5f:
                    bd:a6:0d:44:ff:d9:14:3f:af:1a:e6:af:8e:0e:fa:
                    58:a8:d6:d6:25:a3:59:6b:77:a6:aa:da:c5:1a:5f:
                    3d:d2:dc:c9:22:24:6d:0b:f8:01:0b:39:f9:ff:7b:
                    dd:98:57:de:83:5c:8c:3a:92:5f:e7:72:f2:72:38:
                    91:52:80:f8:f2:74:b8:03:be:d3:eb:2b:d3:d8:f3:
                    87:6f:7e:89:c5:30:e2:10:fb:0b:b0:40:20:56:a3:
                    6a:6a:d7:6a:fb:fa:a2:9e:2a:c2:1e:d0:9c:d9:02:
                    0d:fe:65:4b:0b:fa:ce:42:c6:d1:dd:b1:e3:2a:95:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:11:6C:A2:A8:F6:B5:9C:79:82:79:37:F8:F9:16:2B:3D:14:F5
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3230302e38352e38382e302f32312d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:62:ba:84:32:16:f3:ad:9d:23:7c:8e:9e:0c:4f:7b:52:
         fe:7b:91:e1:2b:3d:99:62:aa:ee:1a:69:12:07:b6:ea:5a:b2:
         a8:e9:14:fc:f7:ae:11:e7:b8:8b:37:b3:8f:fb:e4:29:89:42:
         d7:da:1c:ff:e9:29:3c:66:dd:14:96:fd:63:d7:d7:13:bf:c0:
         6a:08:92:de:da:13:a4:76:b9:ac:f1:fe:2d:6e:ae:bf:f7:55:
         88:62:ef:03:83:aa:c0:7e:f1:e9:a9:00:c6:ca:da:46:0c:56:
         22:92:cb:83:79:9c:7a:b7:07:af:af:2a:2e:91:e1:cd:e2:33:
         99:76:ea:55:0c:ac:97:ad:fc:fa:05:28:8b:6b:47:5b:6e:70:
         77:40:a3:be:fe:f1:8b:59:9c:77:2b:12:7d:a1:c8:73:4f:72:
         2a:b5:68:15:e4:ec:78:66:2c:82:4e:fc:ce:27:1b:4c:d1:68:
         4e:14:97:39:df:be:2b:2c:3d:75:ff:8b:c3:ab:54:6c:ed:b4:
         db:5e:06:49:81:61:59:5c:54:22:90:03:3f:e8:6e:70:cd:0a:
         c1:f2:10:c5:01:94:ee:2d:f1:ce:09:64:40:85:85:24:e4:4b:
         98:64:09:6f:62:65:74:99:83:50:e3:62:a4:11:8c:49:ad:3c:
         51:15:72:1f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSWBS88u0MA08L+X3sN/jEtpuSscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY3RTU2NDRENDM5RUNCNjE1QTkzMTgwOEIwRDZGMkFD
NjZBMTlGMjAeFw0yNDAzMDUxODAyNTJaFw0yNTAzMDQxODA3NTJaMDMxMTAvBgNV
BAMTKDgzOEIxMTZDQTJBOEY2QjU5Qzc5ODI3OTM3RjhGOTE2MkIzRDE0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3eb4awC/ndY7SWucMzVagQAv
wQIaD4y6diXuIAhLQm3A2orlTj2WkSsQpyRbsXKDcsnN8LR3P+LQ9PoRDlBBnVDa
8hNwmzxwMBIuT3Md665BoqQCXPv6dUV7nBqvZo6y5TJnVph/d7JB+PFIYPWObhzQ
9x/WdJ5TqUilWGFERqf/MQueX72mDUT/2RQ/rxrmr44O+lio1tYlo1lrd6aq2sUa
Xz3S3MkiJG0L+AELOfn/e92YV96DXIw6kl/ncvJyOJFSgPjydLgDvtPrK9PY84dv
fonFMOIQ+wuwQCBWo2pq12r7+qKeKsIe0JzZAg3+ZUsL+s5CxtHdseMqlaizAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUg4sRbKKo9rWceYJ5N/j5Fis9FPUwHwYDVR0j
BBgwFoAU1n5WRNQ57LYVqTGAiw1vKsZqGfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yREVBNEI5NTlCRTQyMTQ4MUMxMzdCQUU1RkJDMkZCRTFC
REREODdDMDdBNjVENTJGMEM5RUNGNjhGN0M1OTlGLzAvRDY3RTU2NDRENDM5RUNC
NjE1QTkzMTgwOEIwRDZGMkFDNjZBMTlGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjdFNTY0NEQ0MzlFQ0I2MTVB
OTMxODA4QjBENkYyQUM2NkExOUYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkRFQTRCOTU5QkU0MjE0ODFDMTM3QkFFNUZCQzJGQkUxQkRERDg3QzA3
QTY1RDUyRjBDOUVDRjY4RjdDNTk5Ri8wLzMyMzAzMDJlMzgzNTJlMzgzODJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzczOTM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIVVgwDQYJ
KoZIhvcNAQELBQADggEBACwSYrqEMhbzrZ0jfI6eDE97Uv57keErPZliqu4aaRIH
tupasqjpFPz3rhHnuIs3s4/75CmJQtfaHP/pKTxm3RSW/WPX1xO/wGoIkt7aE6R2
uazx/i1urr/3VYhi7wODqsB+8empAMbK2kYMViKSy4N5nHq3B6+vKi6R4c3iM5l2
6lUMrJet/PoFKItrR1tucHdAo77+8YtZnHcrEn2hyHNPciq1aBXk7HhmLIJO/M4n
G0zRaE4UlznfvissPXX/i8OrVGzttNteBkmBYVlcVCKQAz/obnDNCsHyEMUBlO4t
8c4JZECFhSTkS5hkCW9iZXSZg1DjYqQRjEmtPFEVch8=
-----END CERTIFICATE-----