Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138322e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3138322e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          7xJ5T7JclRaOBBS4eR9sAn7vzTzIUoINmw+YivYrYlQ=
Subject key identifier:   B1:CB:18:E3:3E:DF:BB:FA:21:89:BE:FB:BF:D6:93:1B:41:B5:87:ED
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3DFE647EBDF9147CFDF2A4293D63E94489D7A379
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138322e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:06:33 +0000
ROA not before:           Tue 05 Mar 2024 18:01:33 +0000
ROA not after:            Tue 04 Mar 2025 18:06:33 +0000
asID:                     27742
IP address blocks:        200.30.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:64:7e:bd:f9:14:7c:fd:f2:a4:29:3d:63:e9:44:89:d7:a3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Mar  5 18:01:33 2024 GMT
            Not After : Mar  4 18:06:33 2025 GMT
        Subject: CN=B1CB18E33EDFBBFA2189BEFBBFD6931B41B587ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:67:43:ce:d5:ba:6d:70:4d:ab:0c:38:b0:
                    b5:86:59:a5:cb:e8:77:3c:11:8a:0d:80:6d:e2:e8:
                    46:9b:46:9f:ca:97:fa:26:71:91:29:30:f3:85:79:
                    e4:35:c8:a2:3f:74:5c:56:7e:4c:cd:13:74:a0:50:
                    cb:f3:53:87:25:a2:9f:e6:06:0d:27:ec:37:f0:35:
                    e2:21:a8:0e:f3:db:9f:47:a9:71:c4:37:87:68:c0:
                    2b:b4:e7:e2:f7:57:2a:fa:36:0b:50:5b:29:b7:f9:
                    e0:24:69:48:b9:8e:8f:07:bf:9d:06:10:27:7d:2b:
                    13:a3:ed:e8:50:66:2e:4f:6b:0d:a2:3a:c5:5d:77:
                    af:91:32:08:82:71:9b:49:50:63:e5:62:d4:2e:22:
                    a2:05:13:e5:81:b2:21:6b:fa:5a:9b:a2:6d:74:d1:
                    51:27:6c:3e:c9:22:6e:63:07:02:29:2c:0e:73:8e:
                    cd:a2:3e:76:6d:bd:3b:6d:22:52:57:63:60:47:5d:
                    33:9e:9c:ca:01:50:59:a3:54:d7:85:43:75:40:36:
                    ad:e5:d9:94:6d:ce:cf:a9:00:9a:a2:c6:32:34:3c:
                    c1:ce:64:36:11:f3:2e:cc:e2:0b:08:75:2c:55:53:
                    cf:91:89:43:eb:19:4b:82:59:4f:ea:44:c3:54:a1:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:18:E3:3E:DF:BB:FA:21:89:BE:FB:BF:D6:93:1B:41:B5:87:ED
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138322e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:84:ec:4f:ff:a3:32:42:c7:7b:90:11:1c:f2:95:9f:8e:e4:
         19:82:68:60:81:fb:f6:f2:07:44:e7:ca:62:ec:b2:a1:75:e2:
         a5:7b:8b:26:13:96:cb:62:f7:18:85:f1:d4:e0:8a:5c:d5:25:
         46:00:e1:e7:a4:96:f7:c4:e1:d4:2f:34:12:a5:c5:b6:db:c4:
         68:4c:bd:54:1d:d5:a2:de:71:7e:6b:57:b6:d5:2a:8d:51:96:
         5e:60:31:27:18:0e:f3:96:15:b0:d6:7a:cd:e6:87:29:50:b1:
         db:b9:27:6d:ea:2b:4b:3f:ed:55:8e:14:65:a0:00:65:e8:fb:
         1a:90:cd:e2:d7:7f:a6:14:e5:33:5d:64:e8:2e:c9:96:47:47:
         4f:23:5c:d3:ce:3a:d2:54:18:2c:b3:81:9b:d1:cb:45:45:82:
         25:c6:fb:65:ae:f8:46:dc:77:d6:37:89:40:d8:6b:2d:60:29:
         50:62:86:30:ea:1e:6c:c2:ed:d8:5f:8e:bb:9c:d0:d8:c8:6e:
         1a:e5:6f:8a:fd:a8:4d:3a:f5:29:b9:e1:98:ad:c7:60:a4:82:
         43:11:52:e2:19:e2:b4:f4:17:de:8c:a7:a2:2b:8b:6d:9e:53:
         e0:f5:2c:7a:bc:fd:17:82:21:7d:4d:26:aa:c2:e3:5b:cb:00:
         2d:55:6f:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPf5kfr35FHz98qQpPWPpRInXo3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNDAzMDUxODAxMzNaFw0yNTAzMDQxODA2MzNaMDMxMTAvBgNV
BAMTKEIxQ0IxOEUzM0VERkJCRkEyMTg5QkVGQkJGRDY5MzFCNDFCNTg3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtmdDztW6bXBNqww4sLWGWaXL
6Hc8EYoNgG3i6EabRp/Kl/omcZEpMPOFeeQ1yKI/dFxWfkzNE3SgUMvzU4clop/m
Bg0n7DfwNeIhqA7z259HqXHEN4dowCu05+L3Vyr6NgtQWym3+eAkaUi5jo8Hv50G
ECd9KxOj7ehQZi5Paw2iOsVdd6+RMgiCcZtJUGPlYtQuIqIFE+WBsiFr+lqbom10
0VEnbD7JIm5jBwIpLA5zjs2iPnZtvTttIlJXY2BHXTOenMoBUFmjVNeFQ3VANq3l
2ZRtzs+pAJqixjI0PMHOZDYR8y7M4gsIdSxVU8+RiUPrGUuCWU/qRMNUofOjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUscsY4z7fu/ohib77v9aTG0G1h+0wHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgetjAN
BgkqhkiG9w0BAQsFAAOCAQEAZ4TsT/+jMkLHe5ARHPKVn47kGYJoYIH79vIHROfK
YuyyoXXipXuLJhOWy2L3GIXx1OCKXNUlRgDh56SW98Th1C80EqXFttvEaEy9VB3V
ot5xfmtXttUqjVGWXmAxJxgO85YVsNZ6zeaHKVCx27knbeorSz/tVY4UZaAAZej7
GpDN4td/phTlM11k6C7JlkdHTyNc08460lQYLLOBm9HLRUWCJcb7Za74Rtx31jeJ
QNhrLWApUGKGMOoebMLt2F+Ou5zQ2MhuGuVviv2oTTr1KbnhmK3HYKSCQxFS4hni
tPQX3oynoiuLbZ5T4PUserz9F4IhfU0mqsLjW8sALVVvIQ==
-----END CERTIFICATE-----