Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa
File:                     3230302e36382e302e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          NS1mdaZ1M1VXSdE7sdRmVww2tyIP3i3X/1eOtQKt7QU=
Subject key identifier:   D5:F0:63:7A:4A:27:90:23:72:5B:B1:4B:BE:73:A9:78:7A:FB:9C:AD
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       43441D17A5582A94C6DCF46CB5EB4D5CE9791E4B
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:51:50 +0000
ROA not before:           Tue 05 Mar 2024 17:46:50 +0000
ROA not after:            Tue 04 Mar 2025 17:51:50 +0000
asID:                     16629
IP address blocks:        200.68.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:44:1d:17:a5:58:2a:94:c6:dc:f4:6c:b5:eb:4d:5c:e9:79:1e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:50 2024 GMT
            Not After : Mar  4 17:51:50 2025 GMT
        Subject: CN=D5F0637A4A279023725BB14BBE73A9787AFB9CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:4c:5a:5a:94:7d:b6:5a:c2:56:1e:2b:73:
                    63:83:a6:e1:0e:f8:22:f4:8f:55:c5:89:69:b3:c0:
                    b8:63:6b:af:34:58:c9:5d:d1:24:6b:1c:d4:15:e6:
                    d0:15:67:c8:ff:3c:e2:74:ac:fb:60:03:0d:c0:b2:
                    c6:40:04:f7:ca:86:5b:2a:02:ef:2c:41:64:e3:94:
                    12:4a:89:86:c6:ce:16:b3:9c:63:4f:50:05:3a:25:
                    cd:b5:3e:a7:a9:db:e5:30:08:2c:ec:82:60:0a:f2:
                    2c:e2:bd:d6:2f:02:af:a5:ec:71:14:01:df:28:f1:
                    8c:b2:60:b0:1a:30:31:71:eb:0e:65:f4:2b:c2:71:
                    79:88:a8:52:0b:7e:9d:7f:f6:a6:c4:1f:20:42:e6:
                    77:8b:33:65:71:d3:34:62:9a:32:bc:d4:4c:8c:ea:
                    0f:1a:ab:61:35:2c:90:56:c1:45:0e:7c:37:19:89:
                    65:de:97:2b:10:30:60:db:76:45:75:07:1a:20:7b:
                    ba:42:06:6e:8b:25:fc:3e:57:2d:a2:04:91:29:52:
                    02:3d:5b:46:db:9e:08:ed:14:d0:42:65:4e:d5:5d:
                    fe:04:e6:48:f6:35:79:b1:c2:ea:31:46:85:24:7f:
                    ca:0f:29:0d:e7:72:b6:52:7b:fd:ed:21:d6:c6:93:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F0:63:7A:4A:27:90:23:72:5B:B1:4B:BE:73:A9:78:7A:FB:9C:AD
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:0b:bb:49:2d:55:43:5d:1f:c2:3f:71:1a:47:30:f2:a7:2d:
         ba:46:20:eb:85:97:78:16:0c:33:90:39:41:4b:59:c3:7d:90:
         e9:43:33:25:2e:f5:4b:46:24:a0:05:ee:f4:ef:a2:f6:53:a5:
         32:e1:c5:2f:50:71:c7:89:da:43:3a:4c:1c:74:56:44:dd:67:
         5f:b1:ef:54:2b:83:5d:ce:bd:1d:54:81:2b:fa:97:8e:e6:e7:
         1b:fd:09:3f:48:1c:95:c3:15:6d:ff:fb:a5:fc:99:a8:09:ac:
         5a:cf:04:e1:fd:07:10:b8:2b:25:8d:6a:d9:13:ef:e7:d2:21:
         9a:4b:51:ff:0a:50:ea:5a:9e:2e:d5:ac:ae:32:47:69:46:b2:
         76:8c:9a:50:7a:fc:c9:79:8c:15:0c:3d:a2:07:84:26:92:31:
         e6:89:1d:51:07:3d:83:c8:98:2f:99:41:d3:f6:db:8b:72:e9:
         95:3d:3d:45:17:ca:1a:60:33:79:2f:03:e0:0a:5d:cf:28:44:
         1d:38:75:ae:1d:df:3d:d6:40:d6:c1:61:ea:f7:c7:c2:60:61:
         ef:e2:fc:37:fc:71:e1:15:a1:4f:eb:e4:7e:19:c1:1a:92:c5:
         1c:9d:18:8b:91:80:b3:e4:14:60:0c:d1:cc:b2:c8:d0:15:82:
         85:f6:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----