Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa
File:                     3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          B2d0Z2JDf1XxU0k6MyFabzTfjbhTL1aLFigmGUuByck=
Subject key identifier:   37:F4:FB:2C:E6:57:32:11:DF:32:6D:D4:B4:1C:56:D9:BA:A0:C8:ED
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       16B37D1655F28B00648B2FE19EC8BAF3F7922324
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:14 +0000
ROA not before:           Tue 05 Mar 2024 17:50:14 +0000
ROA not after:            Tue 04 Mar 2025 17:55:14 +0000
asID:                     11014
IP address blocks:        200.110.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:7d:16:55:f2:8b:00:64:8b:2f:e1:9e:c8:ba:f3:f7:92:23:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:14 2024 GMT
            Not After : Mar  4 17:55:14 2025 GMT
        Subject: CN=37F4FB2CE6573211DF326DD4B41C56D9BAA0C8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:4e:79:d5:84:71:b3:f7:65:03:fe:41:58:
                    21:83:90:f0:c8:93:b4:35:48:40:f0:5c:76:73:fe:
                    38:b3:17:71:a7:a5:ae:e7:40:85:91:b7:d0:a6:1e:
                    be:21:37:46:9b:ed:cf:f5:65:0a:fa:42:9e:99:64:
                    00:92:fc:d1:fe:ba:f4:53:66:90:16:0a:a3:b1:b1:
                    aa:b5:24:ed:0c:2f:c5:f4:25:86:1d:b6:b1:ed:a2:
                    ab:a1:6a:31:d2:25:61:27:df:08:30:71:b3:c6:c4:
                    e2:e7:37:d8:11:5a:d9:78:e9:d1:79:69:a8:7a:b4:
                    7b:8d:6a:07:e4:c6:6b:ab:e5:fa:69:01:89:1a:d4:
                    88:13:43:43:62:65:11:cf:5c:04:eb:84:03:e2:40:
                    00:a1:cd:25:13:75:c2:f1:42:3a:d6:ba:b3:6e:85:
                    7c:29:a3:5e:1b:0b:96:81:7f:5e:d6:f9:c1:56:2f:
                    c2:19:2c:6f:53:c9:74:bf:9b:a3:95:0d:ee:f7:54:
                    02:46:56:b0:5e:89:ae:95:63:1d:fb:c4:ad:c0:54:
                    e3:c3:86:91:ee:4a:b8:0b:cf:8a:7e:5c:c4:9d:59:
                    10:bc:70:3e:40:c2:a9:5e:73:12:be:9f:82:5c:92:
                    8b:ca:e4:89:02:e8:16:52:ff:72:44:4d:08:7b:23:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:FB:2C:E6:57:32:11:DF:32:6D:D4:B4:1C:56:D9:BA:A0:C8:ED
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:99:28:83:a6:9e:da:01:67:93:bb:77:26:68:07:a1:37:b3:
         f8:c1:1d:5a:b6:16:07:09:ec:c9:28:9c:17:15:ea:bd:7a:c2:
         1e:31:dc:ed:41:a2:25:b7:4b:cf:bf:39:15:1f:ea:a5:23:af:
         97:c2:d6:c0:c2:af:4e:5e:13:93:7c:6d:ef:3b:63:81:49:60:
         bd:2c:44:db:1f:9d:00:a1:5d:06:8e:4b:37:88:25:23:2f:a7:
         a6:42:97:98:d3:03:83:21:85:2d:06:37:1f:ef:7b:a1:a4:31:
         9d:78:c4:6e:4f:8f:16:4b:95:30:10:2f:5e:3e:3f:0b:e9:62:
         94:75:b1:37:00:f1:70:38:67:2c:15:47:8d:ff:a2:fb:8f:4a:
         e8:e8:aa:0b:e8:82:33:27:28:dd:ef:19:8e:4b:e4:20:df:dc:
         07:ac:61:0c:03:fa:2c:f4:f8:87:74:3b:c2:5c:c3:cb:d4:79:
         86:d6:62:65:20:ce:92:56:7c:cd:85:93:87:32:45:d7:9b:42:
         f4:2a:e7:6d:5c:10:d4:d5:eb:98:d3:a5:0b:a2:13:16:b9:04:
         4d:0f:a0:b3:50:7e:5d:a4:2d:cf:0f:9e:c3:85:9d:a4:4b:71:
         5b:cf:9c:08:41:7c:e5:f1:91:aa:6e:a9:67:8b:a5:54:fc:bd:
         c6:5b:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----