Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e38332e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          sFDKJBL8bwS3z77UHvcF0wBZxu3mud9Yj0roE4Uivn4=
Subject key identifier:   76:F2:F7:79:5B:26:96:19:8D:19:9D:E8:0F:7A:2C:3B:67:A4:59:55
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       42D88B7060C149EE495EE60D24EA37146A7114C7
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:22 +0000
ROA not before:           Tue 05 Mar 2024 18:04:22 +0000
ROA not after:            Tue 04 Mar 2025 18:09:22 +0000
asID:                     22047
IP address blocks:        200.83.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d8:8b:70:60:c1:49:ee:49:5e:e6:0d:24:ea:37:14:6a:71:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:22 2024 GMT
            Not After : Mar  4 18:09:22 2025 GMT
        Subject: CN=76F2F7795B2696198D199DE80F7A2C3B67A45955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:b3:9a:6e:08:0b:36:f1:76:c7:3d:5b:91:
                    dd:2f:d5:99:b9:5d:c3:d2:db:f5:18:83:3f:88:c7:
                    e4:a9:e2:f8:04:15:0a:87:51:ed:ca:21:ef:14:c6:
                    f6:c7:b8:9b:c7:9c:47:c1:13:c5:23:84:fb:78:33:
                    1f:38:8d:68:84:fe:fb:f5:0d:53:f3:05:f9:77:d9:
                    e3:07:16:51:33:85:06:bf:cd:b5:68:03:2a:5e:86:
                    81:b5:1d:90:b3:12:46:4e:4f:69:82:19:f8:7e:ff:
                    de:2a:45:1f:83:91:ab:fb:cd:82:80:75:23:1a:ff:
                    2b:f6:1f:8e:38:0a:18:90:89:05:bd:a5:17:47:a7:
                    8c:25:3c:b6:de:ba:24:e4:7d:30:b5:61:c2:93:ef:
                    a6:4d:73:13:2a:79:40:64:30:96:60:db:a9:31:62:
                    d8:58:e1:c6:5c:5e:0c:2e:14:9c:df:57:82:4e:7f:
                    43:da:34:24:f8:e8:cd:90:03:c8:c3:16:72:e9:9d:
                    55:3c:ce:1b:cc:1e:af:5e:82:46:6b:87:0c:fe:26:
                    d0:6c:f3:df:e7:6f:75:78:4a:4c:44:19:02:13:4b:
                    87:bd:15:0c:33:32:f4:d1:60:f8:88:ef:ce:dd:d2:
                    a0:bc:60:48:5d:ea:50:71:bf:d8:b0:c2:27:cb:0b:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F2:F7:79:5B:26:96:19:8D:19:9D:E8:0F:7A:2C:3B:67:A4:59:55
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38332e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:18:80:2b:e6:ff:17:66:10:53:df:85:b8:0b:b1:44:e1:
         b9:60:da:32:f0:cc:79:f5:6d:e6:19:ab:7c:a6:5d:b6:d1:05:
         29:5a:1c:a4:c7:e2:a9:7e:f9:e5:03:de:9e:e8:d0:3a:e5:75:
         2a:d5:e9:82:86:ae:18:ba:94:8d:13:c5:dd:eb:8c:c8:cf:f3:
         e7:80:97:8b:bc:1b:cc:8f:ba:75:fc:d2:22:f7:48:61:95:f6:
         ad:62:24:9d:ca:6c:a7:78:e5:b9:9b:82:6a:74:86:d4:b9:48:
         71:b3:13:e7:23:e9:fd:f6:80:f9:de:59:69:fa:b9:ca:c1:47:
         bc:13:58:45:d5:41:e8:21:01:67:50:f9:2e:0d:01:d9:37:67:
         2c:ca:cb:1b:60:c7:c9:56:9d:20:5d:d0:bf:3f:45:ed:ed:9c:
         98:30:03:49:64:09:4b:f8:0a:18:b7:c3:43:a1:a9:49:34:17:
         6f:65:80:1d:98:e3:ab:0b:29:84:19:cf:3a:32:07:c5:89:93:
         af:88:4b:a9:dc:d3:27:39:83:8f:d2:09:6c:67:f2:77:cc:d6:
         26:41:86:46:37:82:05:65:74:5e:e4:2e:e5:44:4c:58:4a:e9:
         16:d1:2e:7e:56:79:9e:c5:f8:7a:8b:79:7b:08:30:85:e4:72:
         1b:2d:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----