Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa
File:                     3230312e3234312e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          9vilY9EpUZGrrVvwh+JOtGuoEY4mzL0SCl1nV5xZ6nI=
Subject key identifier:   C7:45:C0:96:5B:8F:D4:28:57:34:9E:BA:F1:A1:22:BB:6E:CF:4F:D0
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       5C9BC68A25F61CC1AE8179476E158828E99C8F58
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:18 +0000
ROA not before:           Tue 05 Mar 2024 18:04:18 +0000
ROA not after:            Tue 04 Mar 2025 18:09:18 +0000
asID:                     22047
IP address blocks:        201.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9b:c6:8a:25:f6:1c:c1:ae:81:79:47:6e:15:88:28:e9:9c:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:18 2024 GMT
            Not After : Mar  4 18:09:18 2025 GMT
        Subject: CN=C745C0965B8FD42857349EBAF1A122BB6ECF4FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:a4:c5:86:9f:ee:59:b5:d3:7e:af:c5:ff:
                    50:2d:6f:ef:ed:05:a2:62:87:72:cd:53:98:6d:b6:
                    17:a6:41:00:37:66:8d:d4:f8:77:f1:5c:4f:99:b2:
                    3e:2b:26:b0:15:c8:88:45:51:c0:a3:bb:19:7e:fe:
                    48:3f:7b:e6:c9:bd:5f:40:77:98:18:2e:a9:c0:d9:
                    c4:94:73:6b:df:d0:d2:14:55:e7:b5:d0:c3:22:a1:
                    eb:84:ec:5a:70:ae:35:80:8c:10:aa:ae:f9:8a:12:
                    d0:8a:64:e7:f7:61:60:04:21:89:4f:c1:61:88:1b:
                    cc:ce:0e:26:d2:fc:e8:5d:90:2f:56:22:b8:f5:84:
                    29:83:ed:81:9a:5e:f0:7e:7c:e7:a3:b0:6e:40:8d:
                    23:32:a6:7f:28:87:8d:75:04:ab:f3:9a:2d:25:53:
                    26:33:60:96:0a:04:c8:03:9d:f2:4d:5d:32:b7:53:
                    24:46:47:18:ba:1d:95:e8:10:36:24:89:48:08:a3:
                    5d:da:8b:9c:d5:84:b1:cf:72:54:3a:ac:cb:e9:38:
                    93:08:17:fa:47:2c:bb:bf:f8:16:46:ce:90:92:75:
                    5c:77:66:d9:31:37:80:51:89:35:7f:a2:cd:3c:a1:
                    0d:ea:07:1a:30:a9:e8:bc:21:63:a2:fc:0b:9b:6b:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:C0:96:5B:8F:D4:28:57:34:9E:BA:F1:A1:22:BB:6E:CF:4F:D0
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3234312e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:51:5b:67:85:95:af:54:65:81:68:d2:c9:fa:e1:ff:86:
         08:91:09:92:35:16:27:71:bd:c1:d9:3c:2b:01:80:ac:a9:1d:
         61:41:00:2c:c3:0a:89:47:48:07:5d:c2:70:ad:72:6a:06:1c:
         18:6e:08:35:8c:c0:8d:58:55:68:47:1d:5e:4b:03:dd:0a:19:
         77:69:db:b8:4a:0b:9f:db:15:56:62:35:8c:fd:0a:d6:7e:97:
         06:c6:04:e2:9f:1f:08:0b:11:eb:4a:8b:8b:cc:ab:11:ed:52:
         cb:de:46:1c:39:56:9e:9e:e1:ae:91:7f:b0:05:54:0d:37:73:
         9b:28:38:79:a3:b5:f7:2e:ab:30:a3:48:da:78:61:52:26:68:
         d1:42:bb:ce:1b:06:4a:f8:f3:50:53:dd:16:2e:fb:f7:c7:4a:
         04:23:c2:26:52:f9:51:e4:ad:e1:d3:95:ab:ae:bf:db:90:5a:
         1a:b3:f0:c6:d3:2c:40:fd:4a:a3:b9:c1:08:41:55:71:22:4b:
         49:b3:0a:70:69:f6:c8:56:52:58:36:24:87:9d:2b:40:7a:12:
         3a:85:69:5e:6d:2a:6c:c3:9e:24:29:bb:3e:5e:7d:c4:03:e0:
         bb:49:62:b6:61:8c:ca:4c:f2:03:36:2e:a8:60:19:ea:d8:4f:
         3b:ec:a4:d9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXJvGiiX2HMGugXlHbhWIKOmcj1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNDAzMDUxODA0MThaFw0yNTAzMDQxODA5MThaMDMxMTAvBgNV
BAMTKEM3NDVDMDk2NUI4RkQ0Mjg1NzM0OUVCQUYxQTEyMkJCNkVDRjRGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcqTFhp/uWbXTfq/F/1Atb+/t
BaJih3LNU5htthemQQA3Zo3U+HfxXE+Zsj4rJrAVyIhFUcCjuxl+/kg/e+bJvV9A
d5gYLqnA2cSUc2vf0NIUVee10MMioeuE7FpwrjWAjBCqrvmKEtCKZOf3YWAEIYlP
wWGIG8zODibS/OhdkC9WIrj1hCmD7YGaXvB+fOejsG5AjSMypn8oh411BKvzmi0l
UyYzYJYKBMgDnfJNXTK3UyRGRxi6HZXoEDYkiUgIo13ai5zVhLHPclQ6rMvpOJMI
F/pHLLu/+BZGzpCSdVx3ZtkxN4BRiTV/os08oQ3qBxowqei8IWOi/Auba0j/AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUx0XAlluP1ChXNJ668aEiu27PT9AwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzAzMTJlMzIzNDMxMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzIzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDJ8TANBgkq
hkiG9w0BAQsFAAOCAQEAH9FRW2eFla9UZYFo0sn64f+GCJEJkjUWJ3G9wdk8KwGA
rKkdYUEALMMKiUdIB13CcK1yagYcGG4INYzAjVhVaEcdXksD3QoZd2nbuEoLn9sV
VmI1jP0K1n6XBsYE4p8fCAsR60qLi8yrEe1Sy95GHDlWnp7hrpF/sAVUDTdzmyg4
eaO19y6rMKNI2nhhUiZo0UK7zhsGSvjzUFPdFi7798dKBCPCJlL5UeSt4dOVq66/
25BaGrPwxtMsQP1Ko7nBCEFVcSJLSbMKcGn2yFZSWDYkh50rQHoSOoVpXm0qbMOe
JCm7Pl59xAPgu0litmGMykzyAzYuqGAZ6thPO+yk2Q==
-----END CERTIFICATE-----