Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa
File:                     3230302e372e3135362e302f32332d3233203d3e203532333939.roa (raw, json)
Hash identifier:          NALPtyHlCCJ+DaCQgDLOohSgdO8s4gguFFK6ASpHhqI=
Subject key identifier:   D5:65:8F:85:AC:1B:12:9D:AE:1F:93:1E:BE:05:07:DD:7E:D3:89:03
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       7EF87FE10E36761262800A60F3A18A2B783C4ED5
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:42:59 +0000
ROA not before:           Tue 05 Mar 2024 17:37:59 +0000
ROA not after:            Tue 04 Mar 2025 17:42:59 +0000
asID:                     52399
IP address blocks:        200.7.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f8:7f:e1:0e:36:76:12:62:80:0a:60:f3:a1:8a:2b:78:3c:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:37:59 2024 GMT
            Not After : Mar  4 17:42:59 2025 GMT
        Subject: CN=D5658F85AC1B129DAE1F931EBE0507DD7ED38903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:ff:99:02:f4:c1:36:86:14:50:c1:c6:6b:
                    fc:53:27:0b:04:59:3e:97:15:73:bd:16:8a:d1:01:
                    74:a5:97:b0:1b:69:40:a6:f0:9e:ed:a6:7f:44:61:
                    52:36:05:49:a2:48:7e:42:5e:26:7e:55:c9:cc:fb:
                    1d:d2:a0:fc:bf:55:73:41:da:de:96:b4:63:ac:5a:
                    86:83:fa:10:20:c7:8a:7e:48:0c:8f:0d:42:ab:57:
                    37:87:ae:70:e2:04:40:92:8e:5f:2e:0f:17:e4:b9:
                    8c:18:66:1d:e0:9f:19:0d:44:72:34:04:39:ba:9e:
                    f1:e1:a0:ef:06:d1:f5:e8:16:bd:23:ae:63:53:30:
                    a5:fb:e0:22:27:ab:27:0b:1e:f7:a8:a7:38:2d:9a:
                    7a:2c:c5:e1:10:3f:6d:49:3f:c7:8c:a0:c9:8e:50:
                    80:1c:4c:ce:4c:7d:0c:e9:de:79:d0:f5:1e:d7:fc:
                    c9:b9:41:53:58:d9:3a:e8:b0:62:8e:56:af:6e:11:
                    1a:2e:9c:5f:0a:ab:9b:ca:52:37:41:60:38:fb:4d:
                    96:17:d8:94:a7:1c:c8:7a:b5:7f:d8:1a:fd:6b:88:
                    bf:15:e9:f2:58:c1:9d:bf:2a:d7:9d:a9:21:4f:d3:
                    12:f8:30:e8:bf:22:66:92:df:dd:74:62:9f:bd:61:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:8F:85:AC:1B:12:9D:AE:1F:93:1E:BE:05:07:DD:7E:D3:89:03
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3230302e372e3135362e302f32332d3233203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:aa:5f:0d:01:e5:7f:19:df:b5:5c:e6:95:60:b5:6c:e2:
         c8:58:48:a6:43:6c:e8:b4:56:af:f6:94:a9:64:10:ab:bc:16:
         d0:66:2e:d7:f6:c3:26:a0:6e:0f:e6:d7:5e:61:c2:b5:df:9d:
         8d:47:16:68:23:b9:bc:0b:9d:4e:3c:23:b2:df:5e:1f:2b:d6:
         19:50:62:c6:30:a6:f6:9a:db:40:6c:f7:28:37:98:28:dd:52:
         1e:28:12:b8:a2:46:e4:b6:cb:4f:5c:e2:3d:8f:03:3b:3b:ee:
         6c:1a:7a:d5:7f:79:f7:55:e5:08:e3:cb:5f:93:64:8d:59:5c:
         ef:d0:7e:7a:88:b0:fe:7c:53:0d:44:31:5b:be:91:d6:ca:bd:
         e5:f3:22:73:3b:b0:4b:bc:69:78:eb:77:39:fa:52:29:72:56:
         19:82:dd:b2:12:3b:c8:79:b1:2f:32:31:98:9d:8f:93:72:0f:
         4f:53:da:54:b6:8f:2e:95:0e:19:90:c9:8f:13:80:98:46:2b:
         d0:01:88:22:66:94:a7:c3:e7:fd:f5:44:5c:f2:60:5a:47:9b:
         75:dd:cd:73:c4:04:ed:59:ad:d5:4f:f2:bf:76:e8:c2:93:c2:
         b6:4a:b9:f6:1f:f8:d3:72:16:38:a6:ba:30:0b:35:d9:a2:b1:
         9f:11:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----