Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa
File:                     3230302e31302e36322e302f32332d3234203d3e203238303030.roa (raw, json)
Hash identifier:          MOsBxXF4gr/352FrZRDKesI/R3bHFnLTWFOmwrkSG7M=
Subject key identifier:   BC:1D:52:FC:26:BD:3C:55:D4:CC:98:E7:92:DD:7F:D2:97:73:46:80
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7F72007A5BAE6B122A8AFB5CCAE7EFFD9646DB96
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:59 +0000
ROA not before:           Tue 05 Mar 2024 17:34:59 +0000
ROA not after:            Tue 04 Mar 2025 17:39:59 +0000
asID:                     28000
IP address blocks:        200.10.62.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:00:7a:5b:ae:6b:12:2a:8a:fb:5c:ca:e7:ef:fd:96:46:db:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:59 2024 GMT
            Not After : Mar  4 17:39:59 2025 GMT
        Subject: CN=BC1D52FC26BD3C55D4CC98E792DD7FD297734680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:a3:c1:ec:91:21:1f:92:a6:87:3d:c2:ca:
                    64:23:aa:65:86:67:4b:e6:ad:bc:d9:43:3a:3b:11:
                    74:18:44:13:90:a9:78:55:d7:98:23:36:0b:33:11:
                    2a:36:89:5b:f1:a4:e8:35:8c:f6:7d:b7:4e:72:87:
                    95:94:b4:9b:b9:18:89:bc:56:b3:fa:36:37:e7:00:
                    48:53:99:89:4f:0c:02:e8:74:56:46:bb:84:34:91:
                    45:70:db:94:da:6c:a2:0f:b0:d6:04:04:46:3d:66:
                    8d:41:91:80:07:aa:b5:5b:a7:83:d1:ee:b5:54:b3:
                    49:04:3d:a4:17:e1:ad:91:3d:86:51:52:34:e8:1f:
                    d5:c7:9f:01:8f:5e:7f:71:85:2b:09:e7:fb:34:d6:
                    39:31:56:fc:2c:39:1a:b7:d1:c5:0c:72:73:8f:a6:
                    5a:cf:30:1d:12:84:ca:c2:2f:db:51:28:22:6f:8c:
                    2e:f0:d9:7c:4f:18:c1:d3:25:bf:58:39:91:a9:25:
                    d2:c0:ff:af:d1:00:36:22:eb:60:78:f6:d6:63:fe:
                    2f:6f:b1:d5:d2:67:dd:ec:be:b2:2c:b4:52:16:55:
                    dd:78:db:94:a5:8f:fe:73:98:44:ed:58:2e:0f:0d:
                    a3:8e:6c:33:d5:86:c0:b3:ae:74:ae:b2:9d:e6:c7:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:52:FC:26:BD:3C:55:D4:CC:98:E7:92:DD:7F:D2:97:73:46:80
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:af:f4:50:bb:4c:1a:16:ef:92:97:19:d6:8f:c7:15:b6:
         8e:13:8c:8f:28:b3:d2:96:51:c8:57:6e:ed:83:0c:fe:c0:af:
         88:82:94:9f:12:3f:7c:60:11:38:91:e3:25:46:42:77:95:51:
         ea:bb:f9:66:b4:25:63:fb:8e:fe:27:ea:7a:b2:e0:b9:1d:f7:
         ce:58:58:d6:4b:45:60:ce:07:56:92:d4:bc:bc:66:64:44:b2:
         d4:00:b0:01:55:63:c4:05:85:24:09:fa:aa:f1:d8:e5:9d:a6:
         8f:1f:1b:1f:d1:e5:f5:ca:d3:60:2b:47:35:89:c5:9c:62:dc:
         69:a3:06:b3:68:5b:69:db:dc:6c:24:b0:4f:05:f4:47:ea:3b:
         ce:ca:71:32:47:98:51:ce:f2:86:66:2d:5e:05:95:12:88:21:
         67:59:4e:11:47:e2:93:a4:f0:90:b4:0d:79:8a:54:3d:4c:30:
         68:5c:f7:89:09:28:55:0a:7b:7b:66:a1:7c:f3:4d:f6:82:40:
         bf:7d:31:3e:77:a2:0c:b1:55:72:eb:8a:e6:95:c7:8e:a6:51:
         1f:8c:10:42:a8:cb:95:69:e1:9f:1a:60:34:ae:c7:25:ee:c1:
         fb:78:38:95:95:d0:9b:85:ec:ad:bd:44:ac:d1:1b:a8:bf:84:
         a6:fa:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----