Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133342e302f32342d3234203d3e203233333833.roa
File:                     3230302e33302e3133342e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          4+iEjq3LB6kcfXj//qrTeNGQyBfxXcd+eSjTkWSE27M=
Subject key identifier:   69:83:F8:81:46:60:A6:75:52:62:6C:A3:9E:7C:EB:35:29:9C:11:3F
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       5967085D2792AF03C93DABBAAFB9A659ABC6C325
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133342e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 18:06:26 +0000
ROA not before:           Tue 05 Mar 2024 18:01:26 +0000
ROA not after:            Tue 04 Mar 2025 18:06:26 +0000
asID:                     23383
IP address blocks:        200.30.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:67:08:5d:27:92:af:03:c9:3d:ab:ba:af:b9:a6:59:ab:c6:c3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:26 2024 GMT
            Not After : Mar  4 18:06:26 2025 GMT
        Subject: CN=6983F8814660A67552626CA39E7CEB35299C113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:fe:d6:1f:d9:42:87:9f:99:c9:5e:92:95:
                    9b:8f:ae:e4:09:de:c0:04:35:a5:2d:8b:ac:9c:fd:
                    52:73:3e:af:90:8a:5c:5c:d4:70:01:df:17:d9:c3:
                    25:7f:47:b4:b3:fb:a3:8c:63:6a:85:e1:40:a5:69:
                    1d:98:ad:80:17:b7:7d:00:31:8a:6c:80:74:89:eb:
                    ad:5d:de:73:90:ec:fe:ac:11:f2:4e:5b:7f:b8:3c:
                    3a:93:43:17:f0:fa:ea:5c:c9:bc:c8:93:f2:34:f7:
                    b5:96:eb:4a:a5:e5:5d:6d:41:b8:60:75:a6:db:30:
                    5b:43:ac:09:c4:b2:43:6d:0a:83:6f:7a:6c:67:ab:
                    d3:eb:3b:f8:70:f4:e3:55:b4:0d:5c:bd:b1:bd:24:
                    62:a4:0a:78:29:61:13:2f:bf:70:91:a3:ad:80:e9:
                    05:23:f3:cd:41:28:9a:53:48:0f:aa:c5:ff:e2:e5:
                    0f:3d:36:b5:b4:89:74:2a:47:1b:78:eb:24:61:1f:
                    fd:36:6a:5e:ee:71:b7:cd:24:b4:dc:59:92:e6:9d:
                    45:eb:45:24:7e:55:8a:11:82:24:5f:a3:97:cd:cd:
                    7f:71:5a:59:07:f3:11:df:f6:0c:a8:f7:6c:1f:b5:
                    bb:83:d2:96:7c:ca:ed:1c:da:d5:14:37:db:23:fc:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:F8:81:46:60:A6:75:52:62:6C:A3:9E:7C:EB:35:29:9C:11:3F
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133342e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:57:39:a5:36:fe:15:11:1d:7a:a4:b2:e7:74:b6:5d:07:58:
         0a:ef:f0:7a:2a:66:f4:95:8b:71:a6:be:4c:cc:d2:75:3f:99:
         7d:e4:e4:1d:33:05:4a:5a:de:94:ce:de:0e:44:28:93:b3:22:
         b8:06:fc:f6:7a:fb:c0:9b:76:46:cc:f7:49:72:c1:0f:0d:8d:
         eb:52:29:fd:6d:0c:88:e2:f3:77:12:05:78:12:ff:d0:e4:55:
         9e:73:b4:81:8c:ff:c1:8e:30:6c:7c:ea:33:55:c1:b3:08:8d:
         ff:4c:aa:24:92:85:3e:ca:21:b9:eb:6a:7d:d4:45:0b:0a:db:
         08:3d:5d:9d:5e:17:5f:50:89:88:5b:b9:c0:64:2b:f1:d7:92:
         c5:96:ab:af:24:e3:72:e8:41:22:ee:2a:cb:c9:17:a0:23:dd:
         a0:d2:6b:22:44:ea:e0:e0:8d:d1:15:0c:27:1b:cb:9e:99:a1:
         0e:25:f5:6c:8e:ae:82:e0:e5:19:b9:db:12:9d:6b:17:8e:ea:
         fc:b0:bf:d8:12:68:37:74:39:ca:03:70:3e:4c:35:14:81:f8:
         9d:3e:ae:d7:be:b3:49:5c:59:71:f7:49:04:ee:af:98:5d:25:
         a0:74:78:d9:55:c9:10:38:1b:cf:73:e6:5f:eb:a3:f8:1a:48:
         27:39:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----