Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
File:                     3230302e372e38362e302f32342d3234203d3e203238303031.roa (raw, json)
Hash identifier:          amrE+ChazJk2pSK4m/bShM783Tlm6TyYG/WfrvIgMec=
Subject key identifier:   EE:5C:4F:08:EE:89:36:A3:16:FD:FB:E0:7E:33:51:52:4E:EF:53:16
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       795D8B8EA882E32EF9856B9D764C2A0553BA470D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     28001
IP address blocks:        200.7.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5d:8b:8e:a8:82:e3:2e:f9:85:6b:9d:76:4c:2a:05:53:ba:47:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=EE5C4F08EE8936A316FDFBE07E3351524EEF5316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:ba:38:a2:48:8e:f2:ff:0d:cb:94:c1:1f:
                    22:6a:43:22:09:65:e4:73:89:77:f5:8b:05:06:67:
                    56:e1:cd:82:58:c6:2e:56:84:23:cb:f0:1a:92:01:
                    33:5d:29:d9:bd:15:86:da:dc:56:3e:ff:bb:35:a3:
                    91:01:e2:4a:cf:7d:a7:8a:15:64:33:8e:c1:ec:0f:
                    5e:04:11:98:8a:d9:91:32:fc:a1:a5:e6:92:8d:16:
                    03:b6:31:27:f0:93:4e:5c:a3:be:6d:a6:f1:5e:33:
                    32:0c:82:60:27:88:01:00:51:9b:5a:16:2e:e9:b2:
                    98:b8:da:0d:c6:4a:53:03:a0:f3:2b:30:5d:e9:9b:
                    1c:f7:ef:dd:45:24:59:72:7a:14:3a:ef:81:85:74:
                    3e:2d:ab:51:1f:53:bb:8b:e9:85:2a:56:c6:41:1e:
                    eb:0f:d4:3c:f6:4a:a0:57:5d:82:4f:85:fb:10:d6:
                    ba:cb:47:f7:0b:50:c8:8f:b6:54:fb:4e:98:e9:01:
                    21:0e:6f:5c:a8:e1:fd:25:ca:c7:19:b5:d2:23:43:
                    8c:97:44:41:e4:27:56:77:c6:bb:b0:a5:87:16:c5:
                    ef:04:ca:7b:0d:42:b4:79:cc:51:15:f8:d2:e6:46:
                    31:90:43:85:01:41:0b:8f:a4:e6:2d:c9:c7:da:fa:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:4F:08:EE:89:36:A3:16:FD:FB:E0:7E:33:51:52:4E:EF:53:16
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:82:91:f3:bc:4a:bc:68:a7:3e:8f:fc:32:c5:1d:ce:df:
         1f:8b:2f:5f:ff:c4:18:20:ef:3b:11:75:fd:74:24:30:5e:b8:
         37:9c:6d:a5:55:c3:f5:8d:e4:2e:65:5c:64:88:b3:23:86:9c:
         55:3e:0a:8e:6e:d5:c1:3c:5f:64:fa:a9:f7:8d:dd:df:8c:16:
         f7:61:af:8e:5a:e7:a2:60:d4:9d:08:10:d1:05:32:f8:4c:ed:
         0b:27:97:af:ea:7f:dd:6c:28:a6:8f:b9:b4:1b:38:ba:fc:1d:
         a9:0a:0d:db:58:e4:5a:b4:bd:91:4f:f9:19:fa:15:f0:f0:a0:
         39:ed:ec:0d:b1:24:db:e4:41:10:4e:b5:ab:ea:9f:4b:17:f5:
         ba:15:bf:fa:1b:2e:65:6d:19:62:9c:5a:9d:9c:81:31:71:dd:
         06:a2:6d:8e:dd:6a:ed:09:f3:b0:ce:4b:aa:0f:fb:e3:f7:a0:
         12:80:e4:48:7b:51:d4:db:3f:f9:64:d6:52:3f:d6:d3:37:b6:
         4f:f5:e6:77:8d:d1:86:8f:b2:70:c3:ee:9f:13:c1:df:df:0f:
         4f:9d:af:14:42:8d:ae:53:ca:1a:96:67:82:47:88:67:a8:53:
         13:0a:18:45:ea:3c:b0:2d:14:96:c5:1a:f6:6a:86:32:8b:8d:
         e9:73:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----