Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3130362e302e302f31372d3234203d3e2036313437.roa
File:                     3230302e3130362e302e302f31372d3234203d3e2036313437.roa (raw, json)
Hash identifier:          cvGb0Rskumb/MKfkjcDNbeyA38vY98gzunKbhgDxp4A=
Subject key identifier:   77:D0:3E:4B:CE:B8:90:41:6E:3A:44:FC:C0:D9:4D:95:9A:BD:15:A5
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       4F03F41EF106439FED20D7AE042407072E908F28
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3130362e302e302f31372d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:55 +0000
ROA not before:           Tue 05 Mar 2024 18:15:55 +0000
ROA not after:            Tue 04 Mar 2025 18:20:55 +0000
asID:                     6147
IP address blocks:        200.106.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:f4:1e:f1:06:43:9f:ed:20:d7:ae:04:24:07:07:2e:90:8f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:55 2024 GMT
            Not After : Mar  4 18:20:55 2025 GMT
        Subject: CN=77D03E4BCEB890416E3A44FCC0D94D959ABD15A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:db:16:25:b2:ea:e5:e2:6e:ff:cf:ed:9b:
                    c2:9d:7d:56:fc:f9:a7:7c:91:c4:f3:95:12:01:71:
                    c1:62:d6:91:cd:65:19:f5:8f:3f:07:c2:90:93:cd:
                    6d:e4:60:2d:8b:05:74:88:da:6f:2f:36:1f:72:9b:
                    a9:15:05:60:c8:24:67:2c:6d:f2:43:22:f6:91:07:
                    6b:23:40:bd:9f:7c:f1:22:1b:e8:c1:08:a4:82:3e:
                    50:f2:64:1f:e9:e9:69:4a:29:40:e9:f4:61:8f:02:
                    a9:9e:73:0a:c7:fe:15:1d:26:9c:49:10:94:bb:01:
                    68:db:58:70:51:b4:8d:01:d6:c5:75:17:7d:a8:6d:
                    bf:9f:96:31:86:7e:2c:cc:f4:7f:54:52:21:17:5a:
                    e2:c3:3c:10:21:94:74:f6:0c:f5:6f:59:1f:4c:95:
                    c5:cd:55:25:3c:01:43:8d:20:7a:8e:ef:d4:c0:3c:
                    ee:db:05:a5:e8:5a:84:de:71:ff:99:0d:fc:29:60:
                    5d:2c:36:0c:b4:90:8d:a8:8d:11:95:b4:12:37:2d:
                    e3:d5:fb:bd:cf:58:01:c3:fe:ed:f8:3e:d3:d6:38:
                    fc:cc:d7:e0:3c:9c:4f:fa:e4:a1:e2:da:43:05:f9:
                    15:6d:6b:74:c6:80:04:f2:e8:e2:4b:37:f5:ff:e7:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D0:3E:4B:CE:B8:90:41:6E:3A:44:FC:C0:D9:4D:95:9A:BD:15:A5
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3130362e302e302f31372d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:52:06:0e:5e:c7:d8:f7:db:e1:a1:b8:47:b9:ee:84:55:
         93:9e:59:a3:11:8a:b5:99:95:5c:57:c8:1f:7f:dc:25:25:1e:
         ff:ad:c8:78:9b:ba:20:4a:cf:2c:6c:24:16:15:39:c1:a5:c7:
         8f:da:aa:30:d2:6b:93:ba:1f:b4:e8:b3:b2:67:3f:64:e4:b1:
         53:1a:e2:2c:b8:df:18:34:d0:ac:7c:a6:95:23:9c:be:a3:3a:
         62:64:15:70:04:24:35:0d:d9:36:3d:77:b9:2d:dc:3a:5a:64:
         2c:cd:4b:77:1d:e9:8d:04:05:e8:a5:0e:f2:52:51:c3:39:33:
         e4:51:6a:f3:f7:77:79:62:05:0e:e8:5b:7b:3d:9e:9e:50:b2:
         b2:a2:e6:73:23:68:4c:dd:af:3d:e2:d8:e5:54:2d:1b:24:26:
         0e:d5:6c:84:92:b1:e5:ac:a9:a8:95:a7:96:02:07:55:65:4f:
         45:f8:e9:c6:e1:93:47:43:e7:90:43:2c:45:f5:8c:35:58:35:
         95:ee:b8:da:48:4a:bc:8b:e2:23:0f:e0:0f:24:df:a4:55:1b:
         b3:7b:ce:78:cd:d3:63:71:f1:ab:3a:c3:6c:43:ae:30:13:90:
         37:40:10:e6:74:fe:45:9d:67:bf:97:7f:5c:fc:e7:22:72:19:
         c8:52:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----