Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e3131352e3138362e302f32332d3234203d3e203532343130.roa
File:                     3230302e3131352e3138362e302f32332d3234203d3e203532343130.roa (raw, json)
Hash identifier:          S64HiopHBTpkzqAyFIheb1iw0U4Eir22wqez30AgdF4=
Subject key identifier:   1D:E2:E6:9B:5E:BE:05:74:EA:54:DD:4B:C0:69:A7:9B:EB:B4:BB:DA
Certificate issuer:       /CN=B9A021876E416A2682854C32FF258B9643EE2BDB
Certificate serial:       59B1551B333E9D29D27082993795DB18D07A40CF
Authority key identifier: B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e3131352e3138362e302f32332d3234203d3e203532343130.roa
Signing time:             Thu 29 Aug 2024 14:50:00 +0000
ROA not before:           Thu 29 Aug 2024 14:45:00 +0000
ROA not after:            Thu 28 Aug 2025 14:50:00 +0000
asID:                     52410
IP address blocks:        200.115.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b1:55:1b:33:3e:9d:29:d2:70:82:99:37:95:db:18:d0:7a:40:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9A021876E416A2682854C32FF258B9643EE2BDB
        Validity
            Not Before: Aug 29 14:45:00 2024 GMT
            Not After : Aug 28 14:50:00 2025 GMT
        Subject: CN=1DE2E69B5EBE0574EA54DD4BC069A79BEBB4BBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:df:db:5c:d1:c7:28:3a:eb:da:4a:dd:87:
                    cc:93:01:65:65:2d:8d:0f:62:5b:0f:e1:da:d5:c9:
                    9e:f6:7a:93:7c:f6:17:bc:b0:94:51:d6:55:4e:27:
                    3d:63:e8:0b:e4:eb:8d:3e:fb:ac:c7:aa:50:73:f0:
                    90:9e:9b:29:e6:51:8e:ac:9d:1f:8c:61:16:ab:a4:
                    75:7f:24:4e:9c:23:02:96:ad:84:af:53:92:8c:64:
                    cf:2a:ac:7f:b8:cc:50:de:82:0d:14:9c:ae:ea:79:
                    a3:c8:eb:fd:b3:fc:d2:da:98:6c:32:ba:26:01:b6:
                    10:76:3f:17:fd:bc:a8:fe:9c:7d:59:8e:ee:e6:9e:
                    dc:19:c3:88:2a:20:a2:8a:bd:51:2e:f4:48:87:2a:
                    f9:d9:96:9d:3f:09:2f:74:cb:15:b4:e5:d5:29:aa:
                    87:9d:18:ff:85:f5:60:4b:b0:aa:91:5e:bb:d1:a6:
                    80:73:08:0c:22:04:db:15:72:80:75:5c:ba:4a:f8:
                    b3:8e:6d:28:23:14:6f:49:50:f9:39:4e:0a:b4:14:
                    07:62:bf:8d:bf:8f:56:3a:46:87:80:ba:87:02:d5:
                    29:ff:25:7e:14:a6:75:69:78:74:fa:51:be:9f:47:
                    e2:f4:9d:38:00:78:54:f2:06:1b:6f:2e:5e:4f:6f:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:E6:9B:5E:BE:05:74:EA:54:DD:4B:C0:69:A7:9B:EB:B4:BB:DA
            X509v3 Authority Key Identifier:
                keyid:B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e3131352e3138362e302f32332d3234203d3e203532343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:56:6e:57:fb:8c:37:dd:4a:66:b0:fc:b1:3d:e7:b8:19:
         9b:1b:fc:b2:ef:19:c8:60:ec:38:2e:e3:ee:72:df:94:7f:e5:
         70:04:b7:2b:af:b7:15:44:2c:fa:77:1f:5f:29:8d:0d:e1:64:
         59:4a:74:6e:5e:0d:00:d3:77:07:d9:1f:77:fa:f9:76:bb:8d:
         92:34:27:6d:df:7c:8a:d6:fa:6f:95:d6:bf:a0:28:25:19:b3:
         af:a4:82:c2:e4:27:e7:18:e6:aa:cf:21:b2:da:bf:e5:68:41:
         e2:3c:f1:77:ec:4d:5a:bd:ed:15:a3:e0:0f:4f:76:18:71:df:
         6d:6d:4a:99:1e:ec:2f:3f:45:c7:5b:e5:c9:8e:35:3e:53:05:
         63:16:d4:93:1a:66:b9:b4:14:24:c8:d5:a5:02:07:9e:29:7c:
         c3:aa:c8:4f:97:97:3c:b1:2a:c0:40:00:8a:79:c1:1a:ee:86:
         24:cb:49:c2:a8:f8:b9:c5:a6:8a:19:38:81:73:f4:fe:05:20:
         51:36:9a:b4:70:fa:db:e9:bd:1f:16:65:ea:3a:40:09:dc:1a:
         cc:cc:2b:8c:81:57:7f:ac:cf:90:8f:34:98:85:9c:96:7b:6d:
         58:71:6d:ca:64:dc:55:16:f1:b6:5b:93:6e:bb:d3:c3:d6:5f:
         b2:c6:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----