Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3232342e302f32302d3234203d3e203231393830.roa
File:                     3230302e37342e3232342e302f32302d3234203d3e203231393830.roa (raw, json)
Hash identifier:          F8TW+X6bX0T6LrVDjLKaZ5BrmuNNJaI3P46QsJAOYhQ=
Subject key identifier:   FB:E3:8F:94:7D:A1:EC:29:94:9C:A1:C3:90:62:65:43:4A:E3:8B:5F
Certificate issuer:       /CN=0A2389622959E128FECE7B305A77F240C49F8116
Certificate serial:       66281CA6E8ACCC88FFB29793E5C3764D8603C5F4
Authority key identifier: 0A:23:89:62:29:59:E1:28:FE:CE:7B:30:5A:77:F2:40:C4:9F:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2389622959E128FECE7B305A77F240C49F8116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3232342e302f32302d3234203d3e203231393830.roa
Signing time:             Tue 05 Mar 2024 18:11:52 +0000
ROA not before:           Tue 05 Mar 2024 18:06:52 +0000
ROA not after:            Tue 04 Mar 2025 18:11:52 +0000
asID:                     21980
IP address blocks:        200.74.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:28:1c:a6:e8:ac:cc:88:ff:b2:97:93:e5:c3:76:4d:86:03:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2389622959E128FECE7B305A77F240C49F8116
        Validity
            Not Before: Mar  5 18:06:52 2024 GMT
            Not After : Mar  4 18:11:52 2025 GMT
        Subject: CN=FBE38F947DA1EC29949CA1C3906265434AE38B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:50:a1:2d:93:6a:37:92:39:c1:ea:04:cd:
                    ee:fc:d2:2f:9a:db:99:79:cb:c7:49:27:d8:14:d0:
                    41:b2:61:a9:f1:f2:35:e7:53:85:74:c1:44:04:c3:
                    3b:f4:d7:fa:1a:8a:a2:d7:ed:7e:15:52:e9:6d:03:
                    e0:ef:07:3f:8e:5b:8d:42:6d:21:27:79:93:c2:b6:
                    91:cd:21:32:9d:d9:be:30:29:a3:dd:6d:c5:e9:cd:
                    e7:93:e4:17:87:b1:0c:a2:b3:fd:4b:85:57:a3:22:
                    56:fb:43:d5:e2:e0:49:a6:e0:99:2b:1d:36:e2:fb:
                    dc:16:e3:a2:3e:07:a7:18:1c:d1:e9:ab:c6:04:54:
                    0e:0f:f3:4d:dd:89:c0:9f:2d:67:62:3a:6f:bb:81:
                    7d:89:77:b7:52:66:04:9a:ba:6d:33:d8:2e:42:09:
                    09:b8:1c:44:8d:d7:40:9c:84:f4:3f:b2:07:22:a0:
                    7c:f7:69:42:b1:1b:05:86:26:8e:87:ff:5f:0a:71:
                    55:b0:32:0a:c2:17:f8:2f:13:31:e8:51:f9:47:66:
                    ec:93:ea:d9:ca:11:d5:c4:d9:7f:6d:8e:9d:d4:77:
                    7f:fd:76:4f:29:34:0b:e3:12:85:e5:73:e6:c7:23:
                    27:60:d2:45:3a:d2:4e:a9:68:48:60:be:58:16:a4:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:8F:94:7D:A1:EC:29:94:9C:A1:C3:90:62:65:43:4A:E3:8B:5F
            X509v3 Authority Key Identifier:
                keyid:0A:23:89:62:29:59:E1:28:FE:CE:7B:30:5A:77:F2:40:C4:9F:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/0A2389622959E128FECE7B305A77F240C49F8116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2389622959E128FECE7B305A77F240C49F8116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51853C07C8A97E9D90BF5EF192E35731C7F397322085DDED0DA373BDCA002BFB/0/3230302e37342e3232342e302f32302d3234203d3e203231393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:62:bd:e6:e5:42:13:4e:c4:2c:24:8d:82:a7:67:c0:e6:41:
         c3:f2:f3:d7:89:ae:0d:4a:34:e1:30:3e:2a:ef:a9:20:73:68:
         c9:ee:79:06:5b:af:94:af:a1:7f:33:0c:74:8c:2a:08:c0:45:
         7f:fd:1a:11:89:e2:f0:47:4f:e1:49:68:27:5d:9b:08:cd:7f:
         a9:46:78:8f:7a:55:6b:42:be:b3:bf:29:ab:1b:d4:2a:62:e1:
         6c:f0:3b:58:b2:56:b0:ae:ec:5d:8a:a6:f1:1f:0f:18:68:27:
         c9:fb:03:53:4e:07:ae:ca:ac:2d:10:2b:f1:bd:a5:87:aa:8a:
         75:e2:ef:9b:e7:ee:8d:e5:7a:84:07:a3:1c:32:d3:a6:8a:b9:
         66:ea:b6:f5:62:56:77:a6:fa:d6:a0:cd:3f:f3:5a:91:43:f7:
         06:24:1f:c7:47:81:32:a0:87:ed:d6:fc:f7:62:5c:f8:78:e6:
         3e:5d:67:2b:f7:d0:96:7b:e6:5d:d8:89:c7:68:b9:fa:ed:95:
         e9:a2:c5:2b:5b:e2:da:34:47:8c:a4:6d:94:66:5b:7a:b5:18:
         96:7b:07:e7:b9:a8:63:a6:4b:00:2d:4f:fe:e9:25:81:6a:56:
         aa:8c:39:53:fb:a2:c4:ad:ef:4c:81:f2:bd:d7:43:92:83:e3:
         58:1e:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----