Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa
File:                     3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa (raw, json)
Hash identifier:          aL59e1ABtZHL34mRrJhItrYgzZmRN0bO/2T9pJvKUkE=
Subject key identifier:   74:DC:A9:E0:80:BC:9F:E5:48:E1:77:47:03:43:31:8A:0A:64:97:91
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       2F2FD7AB701C748C75C60D03191CEF12191D9CAA
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:45 +0000
ROA not before:           Tue 05 Mar 2024 18:06:45 +0000
ROA not after:            Tue 04 Mar 2025 18:11:45 +0000
asID:                     28075
IP address blocks:        201.190.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:d7:ab:70:1c:74:8c:75:c6:0d:03:19:1c:ef:12:19:1d:9c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:45 2024 GMT
            Not After : Mar  4 18:11:45 2025 GMT
        Subject: CN=74DCA9E080BC9FE548E177470343318A0A649791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:fd:7b:22:e8:f5:6d:73:c5:d4:b4:1a:1c:
                    cc:bf:33:d6:67:68:95:df:bd:29:9c:ed:cf:a2:00:
                    1e:86:60:3a:4f:75:44:52:6d:80:17:26:2a:2c:d5:
                    bf:07:df:f2:a9:7e:bf:45:11:1b:23:47:a4:8d:13:
                    be:1a:c9:c0:c1:b1:fc:5c:cc:13:ed:71:fe:8b:90:
                    54:72:72:bc:2c:c3:43:2e:2b:0d:f2:e4:46:06:00:
                    b9:01:e1:87:32:08:4f:f8:c8:06:c0:e1:dc:27:4f:
                    3e:b6:ab:3e:b9:61:c9:b4:b9:d5:23:49:c0:81:09:
                    c2:b5:90:d0:10:f3:30:2f:7d:78:02:a0:47:90:ed:
                    63:8e:fe:72:85:4a:ba:03:c4:ce:92:fc:6f:b8:c1:
                    b7:65:68:64:e0:2a:9c:0d:73:c7:4d:7b:68:19:14:
                    8c:48:7b:fe:b2:f5:46:c1:1d:f3:1e:00:20:fa:74:
                    5e:7e:40:fc:13:40:fb:e9:10:2d:19:43:93:b5:53:
                    76:18:17:3f:a7:2d:0f:88:49:17:3d:44:d3:66:76:
                    45:8c:e1:32:11:9d:ea:11:1c:1e:eb:14:24:ac:6c:
                    e8:38:75:69:e7:a8:6e:3d:7b:5e:04:8b:45:94:89:
                    b2:a0:bd:c0:a0:99:ea:88:b7:79:bb:cc:c9:af:a7:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DC:A9:E0:80:BC:9F:E5:48:E1:77:47:03:43:31:8A:0A:64:97:91
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3139322e302f32302d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:30:94:ba:65:eb:0c:f6:a6:27:62:87:8b:bf:d2:b0:76:
         22:ee:27:ad:69:34:c2:e0:f4:6d:88:0f:62:3a:04:83:a4:a1:
         38:7f:4e:6d:0d:a3:64:6f:c7:3d:5d:f0:36:2a:57:62:65:28:
         c1:d9:38:79:cc:f8:1b:88:81:a6:e7:c7:ba:25:f9:6c:62:fb:
         60:36:52:93:a5:35:f0:09:fa:aa:79:a8:e3:f0:aa:45:5b:21:
         74:94:c6:d1:47:02:22:9d:5b:20:8a:0b:ff:a4:2a:a9:f9:6a:
         8c:08:8d:68:18:dc:2b:05:2a:f5:96:0e:e6:1d:c4:1a:b3:05:
         97:a3:5f:69:fa:1b:c2:67:15:3a:08:fb:a6:0f:19:01:9c:78:
         51:f5:20:bb:66:4d:05:b1:e9:5c:51:7b:9f:57:67:a7:2c:0d:
         32:09:5f:8b:77:53:21:4d:d8:ff:58:49:85:16:f7:37:c9:a3:
         b1:a8:7c:0c:52:0e:0b:e5:e7:ee:69:2d:1b:e9:42:0d:b4:34:
         a2:70:88:16:4e:07:c8:92:8d:29:b4:b7:c4:fb:1a:3c:b8:8e:
         8f:43:ab:cc:ae:8c:a1:e9:d9:20:7f:c0:5a:88:29:b9:a1:12:
         af:c2:77:3c:e0:3d:4b:6a:5e:b1:f6:8a:b5:ad:17:4d:79:3c:
         fe:0e:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----