Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e34392e3139322e302f31392d3234203d3e203131333135.roa
File:                     3230302e34392e3139322e302f31392d3234203d3e203131333135.roa (raw, json)
Hash identifier:          t5ciltyrcFr7fI0Xyjq3+kBGphFSPY0VOA5CA2MCG8o=
Subject key identifier:   B3:90:C6:75:46:0E:95:38:8A:4C:4B:68:44:7F:E1:97:AF:CC:84:35
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       7E69CCF5C73670F495CB01837A8854E7C38196C1
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e34392e3139322e302f31392d3234203d3e203131333135.roa
Signing time:             Tue 05 Mar 2024 18:07:38 +0000
ROA not before:           Tue 05 Mar 2024 18:02:38 +0000
ROA not after:            Tue 04 Mar 2025 18:07:38 +0000
asID:                     11315
IP address blocks:        200.49.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:cc:f5:c7:36:70:f4:95:cb:01:83:7a:88:54:e7:c3:81:96:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Mar  5 18:02:38 2024 GMT
            Not After : Mar  4 18:07:38 2025 GMT
        Subject: CN=B390C675460E95388A4C4B68447FE197AFCC8435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:e3:dd:b7:13:f5:e5:48:83:63:03:79:8a:
                    6b:62:01:71:e8:7b:9d:17:c8:da:4f:09:b9:67:c9:
                    73:4b:1e:8f:59:41:fb:39:ce:50:a5:13:fe:02:a1:
                    65:fc:20:30:57:c3:7e:b5:97:80:b1:cb:b4:8c:49:
                    a5:da:d9:7b:9c:64:55:d3:61:46:a8:85:dd:dd:c6:
                    e5:3a:7d:f0:03:45:79:77:dd:ab:f2:e1:a1:49:55:
                    85:73:49:6a:3c:92:62:e5:93:3e:6e:37:be:cd:5f:
                    9d:5e:22:a1:29:a3:1e:37:da:53:e6:ec:0f:10:ac:
                    2b:37:24:7e:d5:93:8b:8e:a3:32:65:47:23:79:e9:
                    f6:7a:4b:fc:9d:71:c3:d8:51:59:ed:6e:58:21:84:
                    45:5a:19:32:b7:48:1a:9e:3c:fa:19:ce:9f:2a:4c:
                    6d:3f:c7:00:9f:e0:a1:02:6f:ff:33:a1:59:00:5f:
                    5a:b7:6f:8f:2b:3e:c8:5a:eb:a3:f2:de:d7:d5:8f:
                    28:88:82:f5:fa:08:0e:a4:01:d1:a5:13:a7:1b:2c:
                    28:82:8e:ee:fa:c5:ee:eb:10:03:d3:ab:22:2a:b4:
                    57:f9:4e:44:73:8d:70:0a:44:78:00:b9:d5:fc:6a:
                    45:71:b7:d0:5e:fb:b3:48:53:87:7a:2b:e5:4a:a6:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:C6:75:46:0E:95:38:8A:4C:4B:68:44:7F:E1:97:AF:CC:84:35
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e34392e3139322e302f31392d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:1e:c1:01:50:a7:e3:2d:10:d6:8e:7f:f0:0e:5f:32:00:
         93:6f:41:43:57:c6:da:c3:6b:c8:40:8d:14:8d:d2:44:11:2b:
         41:8c:26:19:3d:82:f6:0f:a2:60:16:fd:7c:99:a2:17:99:c7:
         ec:ae:d9:7f:c4:a6:20:af:66:6e:9c:4a:b7:07:81:6b:ad:07:
         74:03:d6:87:3b:79:3c:9e:84:52:b4:04:e9:59:cd:39:c5:e2:
         54:0c:e5:b6:27:09:c9:69:ff:26:a5:60:60:4d:2d:09:f1:72:
         a5:e9:9e:2c:c5:db:0f:44:2f:79:e6:b9:70:c8:5d:e6:52:bb:
         60:e3:ae:5b:18:63:cf:f7:13:44:15:73:60:cd:84:64:3a:41:
         af:f4:6a:bf:db:81:86:a1:72:68:3a:b1:07:54:ef:14:13:1e:
         1e:a5:7c:eb:78:f1:64:4f:b1:f7:a5:ff:1b:a6:fd:68:25:f2:
         9d:6a:72:ce:de:f1:6c:8e:d0:4f:c7:f0:ee:1f:6a:0e:26:65:
         49:d6:54:de:1f:41:07:e3:e0:fe:b2:33:77:b3:51:4c:e9:b2:
         9f:8c:ff:71:67:98:4c:bb:d8:3f:80:00:57:63:34:18:d2:83:
         2a:35:29:d6:60:a5:d7:f4:a6:aa:90:c5:03:74:f2:9d:fa:c9:
         59:79:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----