Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134342e302f32322d3234203d3e203230323939.roa
File:                     3230302e33302e3134342e302f32322d3234203d3e203230323939.roa (raw, json)
Hash identifier:          ppd/SVBOe6rYgAo/9e529v8ywJdLnWyRfZG3IjCrD5o=
Subject key identifier:   E5:D4:99:FB:19:F4:69:4E:A3:D6:9E:05:59:24:6E:1C:1D:73:E0:B7
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       036F09459FCB513A8F505A15839CDD8C90726808
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134342e302f32322d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:06:26 +0000
ROA not before:           Tue 05 Mar 2024 18:01:26 +0000
ROA not after:            Tue 04 Mar 2025 18:06:26 +0000
asID:                     20299
IP address blocks:        200.30.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6f:09:45:9f:cb:51:3a:8f:50:5a:15:83:9c:dd:8c:90:72:68:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:26 2024 GMT
            Not After : Mar  4 18:06:26 2025 GMT
        Subject: CN=E5D499FB19F4694EA3D69E0559246E1C1D73E0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:8d:fc:8f:fc:49:3e:f8:f1:9d:ae:90:5c:
                    e1:8e:03:3d:44:26:4b:46:3a:5c:70:42:83:12:e8:
                    e7:c5:b6:73:37:e2:dd:64:03:7b:95:c2:83:a6:84:
                    a3:13:68:79:95:b5:de:7e:26:c8:d0:8a:54:13:99:
                    1b:51:d2:54:23:08:c6:a0:ab:57:b1:90:38:64:be:
                    88:80:30:0e:28:f4:f5:91:3b:43:1d:45:56:13:60:
                    df:34:3e:66:16:8f:37:d4:e0:3e:e2:11:0e:96:49:
                    fe:45:73:3b:57:b1:a8:ce:b2:20:af:d7:27:e3:5f:
                    de:a3:29:28:b9:43:1b:e6:38:0c:31:f9:6e:f0:fe:
                    16:84:6f:4e:79:05:51:fd:c8:28:b1:41:c7:af:ed:
                    4e:b4:07:3e:69:66:ca:e1:d2:9e:42:9b:12:4a:7a:
                    79:7b:f1:fe:b8:21:ba:ce:57:0f:9c:1b:6d:a1:10:
                    72:a9:fb:88:78:30:35:29:b3:cb:4c:18:d1:66:05:
                    4f:3e:b7:48:98:13:04:86:71:85:64:83:a3:88:2b:
                    01:95:38:ef:fc:a1:28:fa:95:f5:df:6d:52:a1:00:
                    0c:67:b1:8c:b5:8f:19:ce:dd:f1:e5:07:7c:d4:a1:
                    8d:64:33:0d:63:d4:56:3f:6e:da:ed:88:93:59:f4:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:99:FB:19:F4:69:4E:A3:D6:9E:05:59:24:6E:1C:1D:73:E0:B7
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3134342e302f32322d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f8:db:c1:40:8d:3e:6b:10:9b:a1:32:9a:7e:79:75:c2:41:
         bb:58:93:83:ad:07:01:aa:55:3a:80:e3:19:b7:20:19:f5:15:
         2b:e7:e2:55:27:aa:42:2b:5e:cc:4f:fc:26:46:5b:f6:a2:5c:
         ae:a4:bb:16:f1:96:19:5a:28:a2:ea:81:8d:12:e5:19:a6:6f:
         b7:65:47:97:ce:3a:df:9e:87:4f:f9:4d:b5:00:5f:97:e0:8c:
         44:c4:1f:84:2e:d8:a0:98:89:17:b5:15:28:f1:f2:cd:4c:b7:
         e1:f2:60:98:ec:97:a2:b0:c3:1f:50:42:8f:b4:f2:0e:f9:37:
         7b:86:28:15:0f:aa:1d:59:ab:e9:03:52:e7:e7:13:a2:38:e2:
         6d:28:36:29:4b:ac:79:14:06:ba:6a:d0:f8:99:0a:7a:60:2f:
         a5:da:cc:5c:d6:84:0f:39:b0:5f:d9:cf:48:c1:55:9e:9f:1b:
         af:9e:6f:6a:aa:c1:d8:f8:f0:11:d5:34:ec:67:cf:e2:a4:1e:
         48:68:16:3a:34:3c:09:8b:23:8b:49:03:e9:fb:f2:1d:09:6c:
         8b:9e:18:aa:8b:1d:83:2e:75:96:f0:13:5c:17:8d:43:32:78:
         92:fb:9a:c5:45:11:3c:b8:de:48:a0:8c:59:d5:1b:20:47:f9:
         49:06:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----