Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133312e302f32342d3234203d3e203237373733.roa
File:                     3230302e33302e3133312e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          yTqfaNYxY3sz0SEruA5eipsK9GJoaYT5Qh4PB5e69bU=
Subject key identifier:   D0:48:0C:E3:C9:B8:74:26:60:31:97:F2:05:6D:AC:11:C6:03:12:87
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       307479BC1EFB9BAE7A0ED9B41D9984655A3B9065
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133312e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:06:33 +0000
ROA not before:           Tue 05 Mar 2024 18:01:33 +0000
ROA not after:            Tue 04 Mar 2025 18:06:33 +0000
asID:                     27773
IP address blocks:        200.30.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:79:bc:1e:fb:9b:ae:7a:0e:d9:b4:1d:99:84:65:5a:3b:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:33 2024 GMT
            Not After : Mar  4 18:06:33 2025 GMT
        Subject: CN=D0480CE3C9B87426603197F2056DAC11C6031287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:c5:f4:a0:46:2a:5b:e3:54:da:8d:0c:39:
                    3a:c8:ab:49:c9:80:39:82:0c:1f:49:3c:5d:6a:e8:
                    94:05:75:ca:98:66:ef:b3:7c:7f:ba:20:bc:6e:7e:
                    83:a0:53:8c:d1:69:ea:39:02:bd:05:a5:82:73:ba:
                    e6:04:a7:2e:ec:21:33:84:7e:42:f4:b0:a6:b2:e2:
                    64:a2:73:aa:e9:b0:51:19:8e:36:b2:61:e9:8a:09:
                    ca:e0:40:84:0d:a9:ce:e6:5d:9e:59:db:fa:85:9f:
                    ce:15:47:1b:da:bf:7e:66:a1:63:2e:30:44:3a:ce:
                    84:62:41:57:d7:b4:e6:07:b7:5c:f9:a5:2b:ba:eb:
                    f8:be:00:92:82:e1:d6:fb:58:7a:a2:23:f7:d2:f4:
                    22:75:04:8c:8d:a5:9b:8d:06:1e:63:16:cd:76:b1:
                    d4:5d:d5:e5:09:60:82:c3:ee:1c:49:f7:fe:ab:86:
                    f8:89:ca:bc:fa:e9:81:ee:bd:b5:d1:3b:f7:fe:c2:
                    6e:fe:35:48:6a:9a:cd:37:c9:3a:25:ae:ac:2e:be:
                    76:1c:33:27:53:62:6c:5f:7b:c8:78:d1:6f:22:1a:
                    83:b0:81:c8:cc:8a:6d:a9:36:f9:6d:75:69:1e:44:
                    5b:08:18:f1:16:c4:9e:11:f9:fa:e5:1f:12:0d:03:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:48:0C:E3:C9:B8:74:26:60:31:97:F2:05:6D:AC:11:C6:03:12:87
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133312e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:db:12:62:32:10:c2:6f:8e:bc:75:58:73:f2:10:54:2f:67:
         df:ca:4f:4d:1e:48:16:4a:af:4e:8e:94:09:5e:2b:38:36:0e:
         3f:e1:9f:e6:45:18:50:9d:0a:0f:33:7c:df:66:ae:ce:41:b7:
         a6:55:ae:08:5e:bb:15:44:77:92:2d:f0:bd:af:8a:ad:bb:a0:
         0e:2f:46:0c:9d:36:74:a2:00:32:d8:80:0b:ce:0e:0d:5e:31:
         14:44:85:77:70:3c:d6:26:3b:68:f9:5e:9a:40:80:85:88:a6:
         7c:bf:2c:7d:20:b6:c3:0e:e0:af:0c:f4:21:fd:eb:6d:01:60:
         7a:53:2b:b2:45:08:0b:63:1a:24:46:22:d1:78:7a:67:33:63:
         16:d2:d5:13:74:e5:11:0b:dd:64:2f:a3:1d:3d:ce:1d:8e:a2:
         e0:67:00:5f:f6:03:6b:07:3a:6f:69:ae:0e:4e:e4:7f:2f:ed:
         56:1d:6d:62:73:2b:b9:f9:8f:c1:1a:28:89:ae:3d:85:39:08:
         bf:e0:ea:30:b1:59:4c:1b:85:d5:74:6c:e0:33:5e:6a:9a:e3:
         f8:49:f0:93:6b:39:93:54:91:ae:8c:0e:24:01:e7:25:f8:23:
         72:55:43:8b:e1:eb:5c:85:54:f8:b7:12:83:d5:06:be:8e:f6:
         4f:df:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----