Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa
File:                     3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          /Ukxo/WVRca/dgQD5Yaxt5+aczlYaNqgcrNU6Rhaebw=
Subject key identifier:   86:10:31:AA:88:9D:55:CD:08:18:6E:D9:87:7D:48:AE:65:F4:6D:7E
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       411C032D522330352889AB109645DC506A18887D
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:51:22 +0000
ROA not before:           Tue 05 Mar 2024 17:46:22 +0000
ROA not after:            Tue 04 Mar 2025 17:51:22 +0000
asID:                     394684
IP address blocks:        200.125.184.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1c:03:2d:52:23:30:35:28:89:ab:10:96:45:dc:50:6a:18:88:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:22 2024 GMT
            Not After : Mar  4 17:51:22 2025 GMT
        Subject: CN=861031AA889D55CD08186ED9877D48AE65F46D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:02:f1:90:93:76:91:f0:c0:13:00:1a:cd:
                    f1:d3:c5:49:b4:16:e0:b3:12:c5:2e:d3:f4:92:f2:
                    7c:eb:f6:92:7f:0e:c7:a9:e4:46:d2:94:89:d6:80:
                    16:5a:ea:41:d1:8c:b6:d0:7a:c0:be:1c:e2:79:fa:
                    64:b9:5d:29:9c:fe:a4:15:62:55:6f:f8:ef:42:43:
                    73:5e:63:02:c5:70:0f:c2:03:92:59:b4:68:2b:75:
                    e6:19:7f:dc:d3:f0:ad:f5:b3:16:55:ec:a9:da:a7:
                    3b:8f:30:d7:8f:f8:dc:9f:63:86:8b:bd:3b:eb:20:
                    96:09:99:a7:2d:70:98:b2:87:3a:a6:89:f0:47:5e:
                    75:26:6a:0d:54:aa:ec:91:de:39:3b:96:a6:fe:7a:
                    25:14:b7:da:bb:44:68:d9:79:17:0e:5c:b2:52:db:
                    e8:8c:43:77:6b:e0:2c:50:27:f3:d3:e4:a1:71:68:
                    19:1c:59:77:66:5c:d3:5a:d4:61:9d:a8:38:d0:59:
                    6a:26:9d:e8:82:af:f7:62:80:dc:78:40:f6:53:1b:
                    13:de:83:6d:6c:da:ae:12:2b:18:dd:8b:30:1b:94:
                    8a:1c:c7:c3:4f:7e:3c:67:1c:74:d7:f7:17:f4:b0:
                    6d:27:c5:05:ee:3e:37:2f:57:7b:5d:83:33:f2:63:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:31:AA:88:9D:55:CD:08:18:6E:D9:87:7D:48:AE:65:F4:6D:7E
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:8f:76:74:72:d6:a3:61:57:ba:2c:57:58:04:fa:2f:fc:
         3c:60:64:cd:fb:05:76:63:d7:e9:ad:a0:ec:35:86:36:52:c8:
         06:c3:15:52:bb:8f:76:e7:46:50:53:e2:9c:04:c5:ff:37:9e:
         75:06:95:1a:8e:8f:8a:fc:a0:72:b5:ee:b4:69:d8:70:8f:b6:
         08:bf:ca:0e:45:ea:5f:78:d2:05:0b:78:b6:2e:9d:80:a4:2f:
         41:34:f2:61:62:aa:01:13:b8:65:17:0d:ad:52:21:53:52:54:
         d9:51:f5:26:22:36:a6:da:06:c3:82:41:9b:b3:d2:fe:46:66:
         6f:25:2f:0c:19:b9:a9:7b:46:c2:9c:45:e2:5f:24:1d:b8:e9:
         63:cd:d6:58:10:0c:f2:b1:20:b9:52:0b:4d:ce:be:6c:32:30:
         b2:fa:a5:f8:60:c0:8b:8a:f9:56:ee:53:fa:d5:3c:84:e3:bb:
         fe:c0:84:6c:40:fb:a7:72:ac:20:d9:22:f4:b5:bc:7c:6e:1e:
         8f:96:7f:d0:0a:0a:2e:54:3c:c3:60:60:e0:03:5f:78:0b:b7:
         39:ba:90:95:2f:c3:83:7a:88:57:9f:08:85:5b:96:ad:b7:3c:
         98:77:d3:b9:96:1f:2b:88:75:90:1c:44:02:e7:d2:6c:50:91:
         1f:06:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----