Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203631343638.roa
File:                     3230302e31302e3134382e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          mjb4p5azWM9SK5Pg1IDRM0UiQCD364flrrSJR5LDy5Y=
Subject key identifier:   A4:7C:6A:AE:56:56:F1:47:AA:6A:39:0D:B8:6B:06:15:BC:79:9F:17
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       5B6E5FCE0B84837184FC1EBE031F2F6C06AB0B5F
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203631343638.roa
Signing time:             Wed 13 Nov 2024 16:30:01 +0000
ROA not before:           Wed 13 Nov 2024 16:25:01 +0000
ROA not after:            Wed 12 Nov 2025 16:30:01 +0000
asID:                     61468
IP address blocks:        200.10.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6e:5f:ce:0b:84:83:71:84:fc:1e:be:03:1f:2f:6c:06:ab:0b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Nov 13 16:25:01 2024 GMT
            Not After : Nov 12 16:30:01 2025 GMT
        Subject: CN=A47C6AAE5656F147AA6A390DB86B0615BC799F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:0f:45:96:c7:2c:fb:16:7b:fd:cb:65:47:
                    68:79:d7:86:06:41:fb:0b:11:e0:1e:19:28:cb:05:
                    1c:38:ff:b4:5d:25:60:54:66:3d:14:64:37:48:11:
                    e4:be:4a:44:11:df:e3:5a:78:05:57:4d:e4:a1:a1:
                    d5:98:54:50:a9:9c:91:3a:d2:10:c2:b1:eb:fc:aa:
                    53:b2:6a:1b:a5:b8:75:fe:4d:da:fa:28:ea:bc:8c:
                    b0:ef:c1:1b:a0:a4:52:a0:91:1b:01:af:3a:bf:8c:
                    de:4a:1d:bb:f0:ef:cb:43:51:37:48:0b:fb:35:97:
                    09:5d:b0:83:0a:f8:7f:99:db:20:25:66:9b:e4:74:
                    33:79:74:9a:c1:05:78:c3:93:8b:3e:ed:b0:cd:9e:
                    12:ec:e2:e0:41:9f:e4:33:b9:54:bf:0b:55:43:d8:
                    d0:0a:13:d8:6d:96:3c:3a:df:23:7b:7f:3a:ab:3f:
                    c0:82:af:30:91:27:4c:d9:51:c0:01:02:1a:68:0d:
                    09:b6:7d:7b:55:11:6f:de:7d:de:80:05:34:aa:1d:
                    e7:27:5d:b7:a3:e0:52:71:fa:91:a4:9a:1d:21:91:
                    b7:89:b5:80:d6:4c:a5:51:df:26:fc:bb:32:f1:7e:
                    91:08:b3:1a:7d:32:93:87:d5:de:f7:93:23:7a:3e:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:6A:AE:56:56:F1:47:AA:6A:39:0D:B8:6B:06:15:BC:79:9F:17
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:7f:22:d5:ac:f2:42:ae:9a:b6:1c:04:1f:eb:42:37:e6:96:
         68:9f:04:f5:47:2a:80:2e:24:65:7e:cd:3e:1d:f1:18:a6:ef:
         62:70:38:e8:ae:ac:c6:09:54:80:8e:f3:46:ac:86:20:09:21:
         e5:88:4a:2a:75:b1:2a:f3:ff:2b:7b:33:95:c6:05:89:2c:a5:
         ca:6d:cf:5f:b9:a0:78:26:b7:2c:2a:81:1e:dc:b2:c6:de:46:
         a4:d7:fb:07:45:3a:ed:5f:d6:fc:19:51:ef:f8:5f:0b:da:8b:
         32:a0:2f:eb:b1:0b:f7:ba:1f:4e:5f:35:05:15:18:c7:d7:f5:
         79:2f:7e:43:78:85:9d:86:5d:2d:ed:5a:0a:ea:41:0b:74:54:
         ff:8c:e7:30:e3:97:88:f7:aa:27:72:08:8a:42:cc:68:44:44:
         bc:2b:ef:57:76:f4:d5:46:7d:aa:d9:4f:f5:9a:0d:8d:5a:ec:
         c6:c1:0e:24:4e:ff:66:e8:d0:51:48:c6:fd:02:0b:e7:e0:d1:
         03:90:5d:be:90:ab:9f:11:f4:c0:f3:aa:67:e6:57:ad:f4:83:
         ef:82:83:96:10:ff:ff:53:dc:39:9a:6e:af:aa:81:a7:58:9a:
         23:8f:ab:03:57:11:77:59:a4:df:86:2f:6e:bc:b8:ed:bd:35:
         cf:a5:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----