Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa
File:                     3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          ynSKZiYjPAymiW4QpRIYl/9Vs/YKsxA1uusgA4Wi+Yg=
Subject key identifier:   75:DA:5B:57:CA:E0:C0:E6:E1:5A:8E:CC:F3:E3:D1:5F:4E:7C:D3:00
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       09BB93352D15A53DAC505AC986CC268D2F01AA6B
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     262206
IP address blocks:        200.30.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:93:35:2d:15:a5:3d:ac:50:5a:c9:86:cc:26:8d:2f:01:aa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=75DA5B57CAE0C0E6E15A8ECCF3E3D15F4E7CD300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d4:02:0b:57:af:83:93:fd:b9:96:3c:c5:7e:
                    a8:da:79:4e:1c:65:b9:56:9d:e4:64:a2:1e:16:e6:
                    67:60:6e:89:3d:e9:98:e8:1f:1d:4d:1b:a7:24:50:
                    d8:f3:6f:7f:83:ea:29:9a:34:5e:6e:d1:0f:f0:22:
                    01:79:cd:95:49:2d:75:cd:5e:c7:a1:df:9c:01:ba:
                    e4:a9:fa:f1:65:5c:b6:b8:0d:67:a3:84:c6:28:a3:
                    4e:9b:4a:03:77:3b:6d:57:2a:e8:9c:d2:4a:db:c0:
                    50:c8:e5:1a:2e:04:52:6a:50:3f:b2:83:b0:d7:be:
                    b8:41:d2:b4:57:ec:18:1c:73:dc:c5:fd:38:9b:ea:
                    34:51:18:64:ab:d2:6e:d3:1f:6f:3f:f1:8e:0d:54:
                    cc:0c:0a:1d:1d:c3:78:b0:27:99:c8:c1:28:d5:2f:
                    4e:45:c9:54:e1:ec:14:08:a0:2d:a5:8b:19:86:d7:
                    ed:60:66:c1:fe:d8:d8:65:cb:0f:39:ef:fa:66:e6:
                    21:64:d8:27:c0:1d:ff:fa:62:20:8e:14:47:b6:a7:
                    8c:2d:36:1d:56:79:d4:40:19:56:4e:3c:60:33:06:
                    5c:85:ac:c8:c5:2e:8f:2a:88:81:5b:e6:dd:b3:34:
                    3d:00:53:f5:e6:6d:3c:f4:de:cf:6c:69:25:93:f0:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:5B:57:CA:E0:C0:E6:E1:5A:8E:CC:F3:E3:D1:5F:4E:7C:D3:00
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:be:70:9c:35:01:34:a1:8c:5b:10:2b:15:fe:5b:e4:f3:b9:
         70:9c:6f:3b:4d:73:98:39:55:7f:8d:a7:7b:5f:fb:a4:61:6d:
         70:d1:64:a7:0a:d0:33:58:a7:4b:1b:33:bf:32:f9:31:3b:4b:
         ef:c4:2e:51:df:ee:37:e7:5e:9f:e4:c3:fe:24:dc:c5:f1:97:
         0e:a0:d3:4a:25:0e:63:c8:ed:ba:bc:7e:d8:e5:82:6c:fa:93:
         b7:fe:78:37:cb:39:38:97:3f:e6:1d:c2:f0:ed:3a:4e:16:6a:
         9c:39:87:05:a1:a8:60:bd:0e:11:c9:f7:b3:12:ab:86:c1:a7:
         f7:f5:69:36:b5:82:59:13:14:39:34:c2:1d:a4:4a:cd:85:53:
         e8:b2:73:f2:db:f6:7c:fc:76:59:c1:76:d0:ba:74:1f:c8:85:
         18:a4:46:33:dd:01:6d:19:67:9a:e6:2d:3f:9c:f9:94:29:2a:
         24:ba:7e:d0:22:ce:dd:4e:90:f3:2b:15:e9:d5:87:bf:1e:86:
         22:02:d2:a8:ec:8f:a7:e5:40:52:d5:e4:7b:c1:79:c7:51:78:
         6b:2c:9f:ce:f0:27:94:41:9f:19:3c:80:40:71:bf:8b:6c:18:
         46:59:c2:bf:e1:15:8d:ad:11:84:44:6b:c8:23:e1:ab:1f:95:
         91:4f:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----