Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa
File:                     3230312e3233302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          6rc6FwiEEWfTJM81gQW54Rtwhw7HuRRRWtUplGH7Ei0=
Subject key identifier:   F7:71:A9:9F:CF:68:53:09:7C:E4:C8:A5:89:E8:C6:12:D2:5C:E6:CB
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       019DA73D935B05376AF3B98D54054305F6B9C9E1
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 05 Mar 2024 18:20:58 +0000
ROA not before:           Tue 05 Mar 2024 18:15:58 +0000
ROA not after:            Tue 04 Mar 2025 18:20:58 +0000
asID:                     6147
IP address blocks:        201.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:3d:93:5b:05:37:6a:f3:b9:8d:54:05:43:05:f6:b9:c9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:58 2024 GMT
            Not After : Mar  4 18:20:58 2025 GMT
        Subject: CN=F771A99FCF6853097CE4C8A589E8C612D25CE6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:f6:3f:60:f6:0d:32:9f:75:1a:03:4e:70:
                    c3:41:27:2a:79:88:93:45:8f:11:ef:72:b7:b5:9e:
                    c3:0b:b2:40:6b:cc:81:0f:c7:b9:35:09:38:7f:58:
                    07:f8:73:87:a0:cc:f6:29:4c:85:b2:d9:9d:50:5f:
                    66:0d:ef:76:16:ad:56:1b:9e:42:07:d9:bd:b9:02:
                    96:b6:de:df:ce:b1:a6:64:be:3e:8b:20:5b:f6:96:
                    b9:ea:4e:3c:29:c6:3e:b7:46:99:7e:00:62:aa:81:
                    ab:42:aa:e9:4c:4a:d3:fd:04:69:48:b3:73:ed:9e:
                    b5:05:13:75:14:f8:74:05:62:43:0e:15:72:54:28:
                    df:a4:c5:13:6d:b5:bc:04:d5:b9:48:23:ff:81:60:
                    b4:e3:08:9c:25:a3:9f:9b:db:23:5a:6b:09:e7:95:
                    e9:26:6e:2a:5e:76:72:2e:2b:fa:60:c1:b5:df:3e:
                    6b:08:5a:f8:19:36:d5:e5:38:00:29:53:35:05:0a:
                    b2:67:2e:3d:85:b3:9f:7d:bf:a4:18:4b:03:43:cc:
                    10:a3:0b:4b:4d:9f:ca:4c:38:99:21:ac:d4:73:be:
                    a5:f2:1d:47:d0:ad:1b:9c:bc:73:76:22:e0:85:8f:
                    5e:76:e6:5d:51:6f:95:fe:14:49:5b:3f:50:96:b2:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:71:A9:9F:CF:68:53:09:7C:E4:C8:A5:89:E8:C6:12:D2:5C:E6:CB
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:39:65:6d:07:2a:36:99:f7:dd:e5:1b:06:f1:b0:99:6e:
         cd:50:7b:5d:78:2b:32:67:e4:c7:2a:34:47:13:57:57:8b:89:
         f8:e1:13:4c:e9:5d:56:62:1c:ea:eb:e8:df:b7:6a:63:d3:54:
         fb:41:23:04:42:e3:8f:2b:b6:27:40:7e:0a:d0:34:78:81:42:
         9b:90:f3:29:ac:40:82:31:9a:83:52:f3:7d:3a:b8:18:2d:bc:
         a4:30:5b:dd:b5:75:d0:50:e1:89:92:29:26:31:31:b7:8b:8d:
         f3:bd:b4:2a:06:b5:ff:fd:c1:d6:00:ba:c7:b8:d9:aa:b5:b7:
         5d:f1:5d:27:3b:17:9e:35:9a:ff:95:e1:9d:45:91:61:44:a4:
         67:c0:04:1e:23:59:52:31:f6:93:5f:3c:80:25:52:70:f4:7d:
         86:f3:ff:50:3e:e1:98:d2:69:7c:0d:06:26:fe:fe:95:e9:91:
         eb:aa:be:39:ff:cc:ec:ba:3a:4b:db:24:f4:20:fc:31:86:68:
         f5:66:0b:bf:1b:96:ce:43:e7:9a:5f:d0:08:2f:03:6e:5f:d8:
         b3:4b:d1:e9:3b:32:93:5b:a5:5f:60:63:d8:5d:7e:3e:a4:9c:
         9a:03:ca:53:9e:7e:94:3c:9e:de:bd:31:e4:6e:6b:34:41:7a:
         51:a8:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----