Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e342e3139322e302f31382d3234203d3e2036313437.roa
File:                     3230302e342e3139322e302f31382d3234203d3e2036313437.roa (raw, json)
Hash identifier:          TpluO9RfFcAm4UQUaoLyRsHw9KaEY5hfbV+nDLMkKl8=
Subject key identifier:   FC:7E:ED:BF:88:B7:52:73:87:55:FE:C3:D7:79:61:23:CC:EE:FA:28
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       4DC893BD2E24C71A924D390FC536DCDCEFCD350B
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e342e3139322e302f31382d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     6147
IP address blocks:        200.4.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c8:93:bd:2e:24:c7:1a:92:4d:39:0f:c5:36:dc:dc:ef:cd:35:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=FC7EEDBF88B752738755FEC3D7796123CCEEFA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a2:72:4d:59:da:26:5a:43:44:ef:94:19:51:
                    fe:2b:61:35:06:a4:11:a3:2f:51:88:19:14:f9:a2:
                    35:fc:8c:11:af:e5:9c:56:de:1f:49:09:9e:11:b9:
                    f4:fc:b9:9f:52:86:70:47:a5:3e:4e:2b:62:c6:5b:
                    96:50:9d:bb:d9:00:d7:a5:f1:5d:8a:d1:42:a6:81:
                    fe:1f:57:cc:c2:8a:a0:57:fb:91:be:6c:7d:3d:62:
                    bb:18:56:b2:d9:2b:32:13:33:21:d3:34:2c:97:13:
                    04:f4:44:54:b5:24:16:f9:71:2c:2c:94:21:6e:84:
                    dc:31:14:2c:9a:df:cb:52:ce:6b:83:66:ec:ab:27:
                    2c:fd:1d:40:dd:eb:6d:b5:af:a7:72:db:79:cc:06:
                    15:08:32:1a:e1:45:59:56:f9:ab:77:18:aa:68:42:
                    cc:9d:74:ab:47:6d:74:a3:97:f7:6d:76:54:b4:dc:
                    fb:78:c4:c6:bc:1c:42:c4:2f:5a:8f:4a:3a:3f:35:
                    3f:ce:6d:6d:08:09:cf:b2:0c:e8:89:4b:8c:ac:d1:
                    c2:54:d4:b5:80:ad:66:bf:25:14:ae:91:9c:dc:cd:
                    6c:c6:0a:2e:0f:5b:16:19:9b:a2:82:cd:07:86:7e:
                    0a:02:57:71:ac:9d:3d:85:42:8e:7f:a3:f9:38:12:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:ED:BF:88:B7:52:73:87:55:FE:C3:D7:79:61:23:CC:EE:FA:28
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e342e3139322e302f31382d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:87:68:16:5c:5a:9d:1a:a3:ff:b8:f2:75:69:9f:4d:2d:
         eb:6f:af:41:33:04:c3:56:bb:d3:3f:fe:f0:c0:49:78:4a:c7:
         74:eb:0b:1a:04:c7:f3:b0:7f:30:7f:4f:2b:cf:65:b9:df:74:
         98:9b:e2:d7:d2:de:fa:0f:51:18:0d:f5:91:21:88:d6:5c:13:
         28:1f:33:b2:8a:c2:b3:f9:d3:23:7f:94:e8:62:cd:73:07:c4:
         50:ee:c5:9d:cf:e5:37:92:1c:75:0f:5b:89:f5:d9:e4:9e:8c:
         e2:94:43:7b:aa:80:d6:4c:ce:04:99:0a:59:fc:44:6f:82:14:
         d3:ed:07:78:72:e4:e7:d8:16:10:33:15:d4:ad:89:63:ca:3f:
         c4:eb:5b:98:f8:4e:74:c8:11:a1:ce:2d:dd:0f:d4:63:7f:e4:
         b6:b9:c1:88:ab:c5:fe:36:b1:f8:fe:be:28:45:97:32:eb:2b:
         cf:c5:51:57:e5:34:cf:f5:ff:31:4b:4c:96:41:a0:29:b4:61:
         96:63:2d:6a:66:ca:f3:93:8c:97:4d:e1:69:d0:92:ec:d8:d5:
         39:1a:d2:4b:52:3d:ad:ed:9d:54:e8:4d:86:ff:58:bd:ca:71:
         4c:c1:2c:5c:e3:2b:77:f9:74:49:84:56:a7:f7:33:81:dc:65:
         eb:63:8d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----