Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
File:                     3230302e35322e3134342e302f32302d3234203d3e203237393332.roa (raw, json)
Hash identifier:          gkME6AFKZC3iAt8tZzSgulR2Uw6vcWz1AfbNjH06VUY=
Subject key identifier:   EB:C2:7C:9D:D9:90:D6:AD:7C:59:D4:F9:B3:01:36:DC:12:AD:8B:24
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       1DAFDE9144A1D27AFBC1ACFAB105062A0801F867
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 17:54:26 +0000
ROA not before:           Tue 05 Mar 2024 17:49:26 +0000
ROA not after:            Tue 04 Mar 2025 17:54:26 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:af:de:91:44:a1:d2:7a:fb:c1:ac:fa:b1:05:06:2a:08:01:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Mar  5 17:49:26 2024 GMT
            Not After : Mar  4 17:54:26 2025 GMT
        Subject: CN=EBC27C9DD990D6AD7C59D4F9B30136DC12AD8B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:a4:d2:5f:2c:25:65:4e:f4:84:0c:f0:aa:
                    28:a4:f1:64:39:af:f5:14:30:27:2b:af:fe:68:13:
                    c4:44:cd:d3:5a:5f:4e:2d:6e:de:e7:f3:dc:56:76:
                    23:ae:dc:11:da:e8:6d:ab:a8:79:9e:dc:e8:50:b5:
                    d2:fa:27:cb:63:e6:88:24:2f:b8:14:d5:82:ff:97:
                    75:b7:d9:6b:9a:e6:a4:9b:c3:1c:89:0a:4a:14:fb:
                    92:8d:cf:ac:a8:84:2f:26:65:7e:02:22:54:22:0d:
                    10:3a:eb:d3:dd:6a:56:af:e6:25:f2:e2:49:61:00:
                    0e:e9:91:6b:91:e7:49:75:f5:ba:13:1f:aa:33:87:
                    89:96:b0:31:c2:35:ca:86:93:48:60:94:ce:03:67:
                    fa:25:1f:82:d7:36:0a:ef:97:d6:d0:13:14:ff:15:
                    63:10:eb:da:75:46:d9:00:fe:39:92:d8:2f:a1:48:
                    12:04:2f:24:e9:b1:dd:90:b9:5c:00:cc:99:f6:99:
                    4f:69:d4:fa:ba:43:4f:f8:75:c5:fd:08:ee:91:de:
                    c1:74:17:9d:43:ce:66:79:4e:8e:56:14:d8:cb:3f:
                    c4:97:e1:40:26:19:8a:1a:61:b6:da:1f:30:40:cd:
                    06:43:dd:05:e0:4d:f7:5d:91:dc:a4:84:bf:f1:3a:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C2:7C:9D:D9:90:D6:AD:7C:59:D4:F9:B3:01:36:DC:12:AD:8B:24
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:20:8c:2f:e3:ff:89:76:ed:44:48:cb:84:4c:b9:4a:63:b1:
         15:d8:1a:96:b1:b0:cb:a7:28:ff:2a:12:1d:a1:26:a5:f9:b8:
         f2:24:dc:99:35:df:85:aa:43:03:c2:76:fa:67:c5:9d:b7:12:
         6b:25:78:71:2a:a3:c1:de:b5:47:39:9d:37:ea:a9:f8:5d:79:
         f1:1e:ef:87:da:9d:7f:48:f1:0c:8d:e5:c3:0f:2e:ca:ad:1e:
         6d:c9:ec:27:c6:d7:38:49:52:d0:3e:4a:d8:b6:31:e1:ae:27:
         f2:f5:91:92:cb:9f:39:4c:59:ad:10:e3:5d:d1:ae:58:97:0b:
         8a:7f:cc:94:ab:b6:30:1e:92:c5:78:91:9a:d3:3e:f4:8f:e3:
         a8:52:94:f6:96:f0:4e:a7:ac:41:f7:8f:4f:54:90:b0:8f:19:
         d1:9c:98:a3:20:82:d4:f9:bb:32:ff:16:2a:fb:1d:94:0f:f5:
         fa:b6:f4:fb:dc:7d:bb:11:ac:54:82:34:c9:5e:29:e8:ca:fb:
         4f:f1:7a:41:a7:5d:4a:95:10:94:c7:fe:ed:5e:59:39:af:2b:
         5d:1a:ef:f5:ec:93:6e:7d:4f:ac:eb:48:b0:4d:e4:c3:c2:81:
         c2:58:99:28:cb:2a:8e:21:e7:49:74:e3:a8:f5:c5:90:ac:2d:
         af:bd:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----