Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
File:                     3230302e302e38382e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          LcXNy07Jdx55gczqvwHNigJlCBbdxkz+s/Ut7v4g2S8=
Subject key identifier:   32:D6:B5:2D:AB:2F:0C:AD:E5:C3:48:3D:DA:E8:85:F5:2A:C6:F3:FA
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       27B71BCD428B5C45BFCBC4A17C1D0BB1182329FD
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     52224
IP address blocks:        200.0.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b7:1b:cd:42:8b:5c:45:bf:cb:c4:a1:7c:1d:0b:b1:18:23:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=32D6B52DAB2F0CADE5C3483DDAE885F52AC6F3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:ed:7b:44:8a:c5:8b:1a:5c:16:38:e9:9d:
                    2c:bc:d6:2b:99:29:e6:92:c5:0f:75:50:7a:75:7b:
                    28:56:69:56:2d:ed:be:02:a8:c6:2d:2a:67:07:ae:
                    9e:6c:b1:e4:2b:e5:75:05:16:97:20:0e:34:95:d2:
                    1a:d3:55:2b:d5:b1:6d:00:8e:87:98:34:51:ac:7e:
                    a2:b5:50:9a:a1:9b:31:61:51:0a:de:1a:1c:ab:83:
                    17:a2:53:f0:ab:05:af:7d:d7:64:8c:24:96:63:88:
                    da:9a:b5:0d:4d:43:30:ec:ec:16:3e:f4:80:34:2a:
                    ab:bb:41:5a:7d:3e:a4:dc:c7:db:25:f1:8d:99:91:
                    a2:27:4b:d6:fb:b5:53:1b:b4:bc:f1:4d:f2:9e:ec:
                    a1:25:58:8b:fb:f4:98:a8:53:5e:fd:77:d4:3a:2e:
                    85:98:e7:8d:a8:3e:03:75:7a:c2:99:ab:35:71:21:
                    4a:93:ef:e7:66:33:6c:5a:af:eb:9c:cf:0b:b8:03:
                    ce:11:46:0f:d5:7e:e3:1f:81:8e:6b:65:30:ac:20:
                    6f:7c:c1:fd:3b:2a:ef:64:25:87:4a:47:99:93:74:
                    00:df:3e:09:54:29:fa:fa:c8:d3:b7:58:44:65:cf:
                    7c:0a:09:59:d4:0e:db:57:10:34:a1:ea:44:fa:2c:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D6:B5:2D:AB:2F:0C:AD:E5:C3:48:3D:DA:E8:85:F5:2A:C6:F3:FA
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38382e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:d4:88:0b:87:c5:2f:0e:e4:0e:43:18:03:d3:6e:f9:5b:
         4d:f8:c1:16:4a:ea:67:e1:c1:a6:e3:01:41:84:e7:5e:ab:c2:
         12:00:16:e1:49:40:96:f2:1e:30:3b:63:47:ab:96:58:a5:85:
         b5:30:95:6e:f5:34:14:2b:35:da:2c:7e:32:84:6b:9d:98:48:
         64:fb:2e:82:53:bc:2a:34:e0:6c:9e:13:cf:4e:d1:07:f2:8a:
         41:9b:45:a3:b2:de:7d:5f:5d:95:26:d2:67:86:3a:30:1a:0d:
         ee:f0:cf:19:90:37:c2:ac:24:2a:c9:a5:9d:a2:b6:50:0e:a6:
         e5:3e:98:c0:65:2d:e5:9d:74:3e:fb:ab:3f:63:c4:f0:f3:3b:
         71:50:ed:13:21:57:b1:79:ca:7c:a8:0d:09:1f:b6:ea:4c:3b:
         49:f7:88:46:a4:b8:fb:4d:9b:07:dd:f6:79:d9:d1:1a:be:54:
         07:f4:f8:6b:67:20:22:8c:06:09:c6:d4:90:9c:50:f2:a4:2b:
         6f:6b:64:2a:73:a0:a1:d5:fb:d1:25:ab:bd:88:d5:9d:28:eb:
         62:df:0a:76:a4:32:6b:8d:35:02:20:24:28:34:0c:b1:00:cc:
         e1:07:63:c9:3c:cf:ee:17:3a:4f:fd:d7:74:e8:79:3c:a4:ea:
         9e:b3:49:85
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJ7cbzUKLXEW/y8ShfB0LsRgjKf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTRaFw0yNTAzMDQxNzM5NTRaMDMxMTAvBgNV
BAMTKDMyRDZCNTJEQUIyRjBDQURFNUMzNDgzRERBRTg4NUY1MkFDNkYzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYe17RIrFixpcFjjpnSy81iuZ
KeaSxQ91UHp1eyhWaVYt7b4CqMYtKmcHrp5sseQr5XUFFpcgDjSV0hrTVSvVsW0A
joeYNFGsfqK1UJqhmzFhUQreGhyrgxeiU/CrBa9912SMJJZjiNqatQ1NQzDs7BY+
9IA0Kqu7QVp9PqTcx9sl8Y2ZkaInS9b7tVMbtLzxTfKe7KElWIv79JioU179d9Q6
LoWY542oPgN1esKZqzVxIUqT7+dmM2xar+uczwu4A84RRg/VfuMfgY5rZTCsIG98
wf07Ku9kJYdKR5mTdADfPglUKfr6yNO3WERlz3wKCVnUDttXEDSh6kT6LIPPAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUMta1LasvDK3lw0g92uiF9SrG8/owHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDJlMzAyZTM4MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyABYMA0GCSqG
SIb3DQEBCwUAA4IBAQAbntSIC4fFLw7kDkMYA9Nu+VtN+MEWSupn4cGm4wFBhOde
q8ISABbhSUCW8h4wO2NHq5ZYpYW1MJVu9TQUKzXaLH4yhGudmEhk+y6CU7wqNOBs
nhPPTtEH8opBm0Wjst59X12VJtJnhjowGg3u8M8ZkDfCrCQqyaWdorZQDqblPpjA
ZS3lnXQ++6s/Y8Tw8ztxUO0TIVexecp8qA0JH7bqTDtJ94hGpLj7TZsH3fZ52dEa
vlQH9PhrZyAijAYJxtSQnFDypCtva2Qqc6Ch1fvRJau9iNWdKOti3wp2pDJrjTUC
ICQoNAyxAMzhB2PJPM/uFzpP/dd06Hk8pOqes0mF
-----END CERTIFICATE-----