Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e3130392e302e302f31362d3234203d3e2038303438.roa
File:                     3230302e3130392e302e302f31362d3234203d3e2038303438.roa (raw, json)
Hash identifier:          tUHARVIJMsPuwn10+1qkPrWT9tiKXyuZNrA8l1PiXRk=
Subject key identifier:   54:D7:C2:53:D1:77:79:15:01:74:0C:49:36:D1:ED:0A:91:6B:B3:CB
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       7FDAF97F639FB8F67C10DB2E5F4110975EE44574
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e3130392e302e302f31362d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:15:05 +0000
ROA not before:           Tue 05 Mar 2024 18:10:05 +0000
ROA not after:            Tue 04 Mar 2025 18:15:05 +0000
asID:                     8048
IP address blocks:        200.109.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:da:f9:7f:63:9f:b8:f6:7c:10:db:2e:5f:41:10:97:5e:e4:45:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Mar  5 18:10:05 2024 GMT
            Not After : Mar  4 18:15:05 2025 GMT
        Subject: CN=54D7C253D177791501740C4936D1ED0A916BB3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:68:ab:87:10:74:35:1c:bb:3e:f2:26:68:
                    1e:36:fe:26:56:8c:fb:43:b9:dc:f7:24:fb:ca:24:
                    b2:d2:eb:38:ff:3c:c2:d9:39:f3:2f:45:7d:ad:f6:
                    31:87:a4:ab:38:cc:66:a0:4c:d7:82:c6:6b:21:d3:
                    16:1a:f9:5f:c3:05:5e:7a:5f:f9:ea:99:14:24:e9:
                    69:93:dc:35:a3:bb:d4:8b:13:73:ef:c1:74:e8:b1:
                    ed:0b:73:9e:29:c2:ad:1a:ff:c2:3a:d0:a0:9d:4c:
                    d9:1d:c3:a9:69:b8:d7:27:9b:37:ea:96:56:f9:71:
                    f7:cc:fb:02:60:1d:96:32:b3:a4:42:aa:a8:ba:62:
                    14:d4:b6:64:64:57:f2:c1:3f:d3:e5:7c:bb:26:96:
                    69:44:ce:46:2c:07:48:60:7b:86:ac:c7:e4:8c:75:
                    8e:75:ba:7f:de:7c:b5:29:3b:9c:2f:30:4d:ed:f5:
                    41:ae:e5:36:4f:29:b5:f1:61:de:63:dc:f2:c4:b2:
                    bd:b2:b9:0e:66:48:5e:e2:6d:b6:e7:2d:34:94:86:
                    c7:d4:08:9f:7e:b7:77:7e:d0:6a:a3:ef:b9:11:bd:
                    e6:bb:0a:a2:27:94:47:6d:31:d1:82:ff:ec:9a:25:
                    69:b5:f4:b4:f0:e0:a6:fa:1e:d1:15:f6:32:ce:35:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:C2:53:D1:77:79:15:01:74:0C:49:36:D1:ED:0A:91:6B:B3:CB
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e3130392e302e302f31362d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:1e:0a:5d:a6:8e:46:28:0b:8e:13:c5:4a:b6:f7:3e:54:a5:
         a2:88:d1:75:37:29:e2:f7:67:f1:ea:27:57:b8:d9:65:17:d2:
         29:87:82:c2:8a:96:5a:1b:37:0e:96:a1:c2:f4:a5:d6:e3:3e:
         54:30:06:2b:27:05:2b:e5:ae:9f:1e:30:f4:31:8b:2c:aa:58:
         84:da:58:91:59:9c:e4:23:8f:45:46:e9:3b:76:c4:3c:c1:f1:
         66:9c:7f:a4:bb:fc:64:f6:dd:4e:50:20:2d:85:5c:f2:a8:16:
         4d:c1:61:b7:75:d5:05:08:e3:ba:83:ac:ee:a3:7c:be:ca:ea:
         58:b1:49:de:9d:8d:4d:5a:28:8e:53:51:55:6d:ec:f2:d8:4f:
         e7:e0:4c:c4:b5:9c:58:3f:91:94:1e:b6:ac:d7:22:8d:50:85:
         9f:a2:1e:52:27:8a:15:e7:9e:38:4c:33:7a:ed:95:11:f4:2b:
         b6:65:3c:68:4e:cf:c1:91:2c:56:34:40:fe:99:9a:be:7a:03:
         53:a8:b2:b7:6a:bf:12:9f:9b:d0:09:e3:f6:8f:28:d5:da:9b:
         0a:91:ca:6f:d5:dc:3c:59:9f:cd:33:06:15:4b:74:07:39:2e:
         ab:6f:84:78:b3:65:2c:1b:43:34:77:90:bb:61:c5:fe:37:11:
         d2:6b:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----