Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
File:                     3230302e39312e33322e302f32312d3234203d3e203238303438.roa (raw, json)
Hash identifier:          UKRK2L4D5egvvd6QamDF0F/ORUg1YQYn2mxvqnrp2Kg=
Subject key identifier:   C1:25:69:AA:44:7B:4A:54:FC:42:EA:11:4F:46:A9:6D:AE:8E:EB:70
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       49DE48DE179DA3FDECA0C3CDEB41471A57339C1A
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa
Signing time:             Tue 05 Mar 2024 18:04:53 +0000
ROA not before:           Tue 05 Mar 2024 17:59:53 +0000
ROA not after:            Tue 04 Mar 2025 18:04:53 +0000
asID:                     28048
IP address blocks:        200.91.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:48:de:17:9d:a3:fd:ec:a0:c3:cd:eb:41:47:1a:57:33:9c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Mar  5 17:59:53 2024 GMT
            Not After : Mar  4 18:04:53 2025 GMT
        Subject: CN=C12569AA447B4A54FC42EA114F46A96DAE8EEB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:b7:b4:c6:ba:12:b2:09:50:ae:b0:e7:28:
                    69:79:58:63:15:6e:ab:6f:05:95:23:86:f0:03:a9:
                    b2:1f:28:d5:1d:2b:ad:23:ce:3d:84:7e:00:37:3d:
                    ad:ab:82:76:8b:59:d9:0a:5f:06:b6:b5:30:e1:67:
                    7c:be:2d:18:cf:92:eb:c3:a4:12:87:88:96:72:3e:
                    bf:7a:1e:b3:1b:34:68:d3:be:90:10:ea:eb:ca:7e:
                    1e:45:eb:ba:86:d8:29:19:f0:44:3c:2a:19:5d:8c:
                    f7:bb:4c:d5:2e:2d:7b:45:19:ad:d9:5c:26:0a:c3:
                    70:b5:b2:26:09:82:15:fc:d6:53:83:69:a1:ba:08:
                    4e:9e:c4:2e:66:98:a1:79:7c:82:57:2b:74:52:91:
                    91:08:d2:a2:51:35:0a:ee:f4:42:75:de:00:aa:c3:
                    4a:e5:eb:2a:86:fb:b6:4c:5a:5f:4f:20:29:ae:2a:
                    14:d7:7c:a5:be:b4:dd:b8:59:d3:ee:b4:01:9c:f2:
                    b8:c5:7c:2d:59:c4:4f:89:8f:fa:3c:e3:62:59:c7:
                    d1:09:0c:dd:65:a7:30:e9:05:bd:e4:6f:74:6c:6c:
                    9b:1f:fe:a3:9f:c2:0f:b0:83:63:01:dc:f6:49:71:
                    7a:64:4e:5c:99:08:7f:29:6a:3e:50:c9:81:12:3b:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:69:AA:44:7B:4A:54:FC:42:EA:11:4F:46:A9:6D:AE:8E:EB:70
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3230302e39312e33322e302f32312d3234203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:6e:52:db:b1:27:6d:39:43:3a:32:9c:c4:5b:f1:fe:e3:
         96:1f:1b:0e:cd:38:04:77:8b:10:29:17:92:9d:9c:40:18:0f:
         88:84:36:80:58:97:8a:fa:1f:7f:75:5f:1e:8f:c9:01:4f:db:
         44:6f:e8:8d:fc:4c:ab:ea:83:64:1d:1a:33:bb:0b:71:3e:9a:
         8c:c9:7e:97:8e:99:49:1a:1e:09:63:0e:c2:c7:21:2f:6a:08:
         d2:33:0c:96:43:3e:52:77:e3:40:47:5c:b5:48:61:96:d8:ad:
         3c:fe:15:15:c0:b7:dc:ed:e0:a2:2a:d7:de:d7:97:72:24:b0:
         b6:0d:8e:be:59:8a:6b:14:ad:c1:ca:ba:6a:91:c2:17:32:48:
         58:f6:7d:ac:3a:ec:7c:02:96:40:5c:ae:5e:de:28:18:4c:95:
         7f:10:69:bc:74:69:a2:16:9f:4f:65:8f:fe:e8:f8:36:a4:50:
         37:1e:32:3d:a1:49:bc:98:0e:94:94:de:7b:d8:f5:fa:f4:55:
         bb:c5:a9:2f:b2:d5:7f:f2:eb:37:a4:25:61:cd:56:5f:7e:b9:
         ef:4c:f9:f9:3a:81:f4:50:b2:e8:9a:ea:f8:8a:48:34:13:ac:
         ba:75:4d:b3:65:66:89:3a:e9:8c:ce:ff:7c:d3:dd:e9:59:72:
         45:e1:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----