Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203232393237.roa (raw, json)
Hash identifier:          GME2yFJMzh8xlwcAjCeEvfRza/Wq29jx6nccojCNiU8=
Subject key identifier:   D4:0B:E1:55:6F:BE:1B:6C:74:90:01:F5:FD:6B:0E:92:E3:ED:EA:64
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       765695167346D6CB956ED7B6150899259ED070F8
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 17:41:35 +0000
ROA not before:           Tue 05 Mar 2024 17:36:35 +0000
ROA not after:            Tue 04 Mar 2025 17:41:35 +0000
asID:                     22927
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:56:95:16:73:46:d6:cb:95:6e:d7:b6:15:08:99:25:9e:d0:70:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:35 2024 GMT
            Not After : Mar  4 17:41:35 2025 GMT
        Subject: CN=D40BE1556FBE1B6C749001F5FD6B0E92E3EDEA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:c4:00:e3:43:16:3a:fe:32:11:5b:25:89:
                    6d:ef:cb:a2:00:e6:bc:d0:03:9b:ea:0e:e2:76:3e:
                    80:59:e9:d8:da:18:12:84:d4:6e:6c:d0:35:68:a0:
                    f3:8d:62:b7:06:17:70:d8:bb:ed:71:03:73:b8:62:
                    5f:66:ef:03:09:7f:08:69:2d:75:9b:fd:ed:42:79:
                    97:a7:3a:13:bb:a9:d3:ae:22:7f:27:76:de:88:c9:
                    24:21:00:d5:87:de:a4:5a:09:89:e4:81:4a:52:e1:
                    36:4d:d5:47:a8:b2:3b:21:81:74:35:5f:8f:61:bf:
                    97:96:ae:86:87:fd:ff:f5:ee:b4:13:36:19:87:c2:
                    49:3b:91:6c:1c:d3:5d:51:e5:d2:bb:04:d8:e9:c6:
                    bc:e1:bb:45:56:02:b5:ab:21:1e:05:8e:d4:f1:3e:
                    97:09:82:c9:a4:92:eb:b6:c0:66:ed:ea:02:04:1a:
                    47:f2:1e:9d:73:5d:42:b4:9c:5b:da:11:9c:e1:7a:
                    a1:45:e6:6d:d1:88:67:e1:83:38:f3:aa:53:d6:68:
                    17:28:29:75:ed:8c:11:79:4d:5e:76:be:32:ee:88:
                    78:c9:7b:0b:59:56:4f:ff:71:f2:59:00:a4:d2:0a:
                    d9:3d:4b:d9:84:ae:7d:c3:83:04:3d:c0:e8:a4:20:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:E1:55:6F:BE:1B:6C:74:90:01:F5:FD:6B:0E:92:E3:ED:EA:64
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:4b:c8:8a:cb:ad:80:c5:9b:63:02:93:4d:8d:5c:ad:c5:
         9c:9a:3f:61:c3:bd:ea:5b:74:e0:f8:6c:39:0e:78:27:16:b6:
         89:20:de:1c:13:fc:99:83:7f:65:c0:1f:a3:f4:37:ea:ad:2b:
         dc:a5:17:cc:6e:b7:e9:87:e7:ce:fa:b3:1c:09:f9:27:d6:77:
         95:f9:c1:d5:fd:b9:da:68:90:f6:2a:2a:44:67:48:45:7f:63:
         a2:ad:84:72:3b:1f:e3:02:47:9d:f3:9c:02:cf:4c:32:f4:f9:
         b4:b2:e1:7b:9c:e4:b0:3e:b0:d4:23:90:cb:c7:0a:7f:a5:5b:
         06:77:59:19:a3:55:e1:bc:f2:d8:4c:d5:ae:b6:47:18:96:33:
         09:20:1d:2c:f8:26:80:c7:09:be:6c:e8:79:03:a2:29:eb:23:
         15:a3:66:31:f4:69:d9:5b:eb:db:4a:c8:8c:ce:07:6f:71:16:
         81:18:cf:cf:69:8e:3a:fa:12:e0:9a:13:b4:83:cc:93:bf:12:
         4e:46:41:b4:05:87:44:65:35:46:5c:f8:4d:df:15:2c:21:fd:
         ab:bc:34:4d:59:fa:53:f4:3e:7f:db:5c:09:01:ed:13:fe:ad:
         ae:69:30:b8:5b:f8:c1:2d:98:95:82:e8:26:f7:d9:73:df:e2:
         3d:1e:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----