Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
File:                     3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          IhHspk5o5lAmbH7DPc9dqyuGDPsKIW/3mHkTyNo9cBI=
Subject key identifier:   39:E4:0D:C4:D1:8A:18:1B:B7:7F:11:F2:47:A0:06:35:46:4A:F7:1B
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       5458D852EE7AB75D2FD53224176797B0F55EFD81
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 11 Sep 2024 14:35:01 +0000
ROA not before:           Wed 11 Sep 2024 14:30:01 +0000
ROA not after:            Wed 10 Sep 2025 14:35:01 +0000
asID:                     26426
IP address blocks:        200.115.162.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:d8:52:ee:7a:b7:5d:2f:d5:32:24:17:67:97:b0:f5:5e:fd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Sep 11 14:30:01 2024 GMT
            Not After : Sep 10 14:35:01 2025 GMT
        Subject: CN=39E40DC4D18A181BB77F11F247A00635464AF71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:53:6f:84:d9:53:4b:4a:d6:8e:bd:61:98:
                    19:e6:82:37:bf:ce:5a:8b:5e:76:bb:b7:7f:5b:a5:
                    ee:4f:2e:e9:b3:d1:57:82:bf:9f:5c:5d:09:57:ff:
                    e0:8c:81:0c:65:28:3a:a2:13:4b:34:95:05:2b:20:
                    60:ad:68:fe:ee:0e:d3:88:28:d2:38:7b:e8:a5:ef:
                    81:37:a0:cf:85:b3:ae:86:b0:cf:b6:06:74:54:9c:
                    bd:36:1d:b4:5a:c8:d6:67:d7:82:27:c3:31:ff:55:
                    b0:bf:eb:13:e7:c6:61:39:d1:01:5b:6d:26:e9:33:
                    73:88:86:74:19:4c:7f:6b:81:6c:88:70:26:cc:4e:
                    30:23:f2:de:a9:25:18:40:e6:df:a0:6c:74:f0:23:
                    ef:a9:72:da:ce:4d:ea:b2:02:dc:b8:8c:56:2a:a8:
                    f0:74:08:d3:02:cc:79:57:e0:ef:03:cc:77:f3:21:
                    30:78:7a:b7:95:8a:71:7f:0b:10:b6:64:8c:75:47:
                    21:8b:ba:ec:9b:5a:06:b5:18:f8:47:f0:70:05:13:
                    15:ef:48:41:71:bc:25:7f:af:b4:44:ee:75:df:cd:
                    00:4e:d3:62:90:e6:d2:eb:4c:4e:68:bf:b8:fa:7c:
                    2a:c7:1b:b1:10:5c:94:05:0c:6a:8b:a5:3c:cd:20:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:0D:C4:D1:8A:18:1B:B7:7F:11:F2:47:A0:06:35:46:4A:F7:1B
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:44:80:84:4d:00:74:2a:dc:da:99:f4:c0:73:96:4d:c9:28:
         46:b9:da:a1:6d:da:5c:58:f5:bb:06:e1:f8:a9:2a:14:88:ff:
         a2:d8:8f:5d:c4:2f:53:79:5a:4c:17:1f:a6:28:7a:5c:07:de:
         45:b3:c3:55:aa:03:0a:d9:1e:21:45:88:b1:0b:f9:32:94:cf:
         6c:09:7b:51:45:00:90:e6:56:fa:ec:fe:c9:0e:4f:b5:e1:64:
         77:4b:f8:0d:94:87:6b:07:15:8b:5d:4d:af:9b:7b:a2:57:31:
         96:1c:c7:89:55:0e:94:17:38:63:ed:8c:49:b2:dc:5b:6f:29:
         50:4a:ed:b7:dc:1b:34:1d:a1:ea:4c:73:e3:ac:5b:82:5c:af:
         90:d5:61:00:3b:cf:b8:10:dd:94:31:a5:94:33:57:86:51:72:
         01:4d:0f:11:69:cd:43:4c:12:96:92:09:61:71:b1:d9:d9:6f:
         ab:95:5b:af:e7:1d:d6:89:88:a2:3a:5c:72:0f:3d:d9:d7:02:
         13:96:8a:29:d6:b6:92:53:ec:53:74:60:40:60:93:be:ee:51:
         d7:a2:5c:84:f6:af:59:54:ea:f6:8f:a8:e5:70:07:cd:4c:8b:
         ba:bb:f1:0c:ae:f3:62:cc:76:bc:0a:00:e9:5b:34:9f:3c:aa:
         b9:38:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----