Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136322e302f32332d3234203d3e203133373734.roa
File:                     3230302e302e3136322e302f32332d3234203d3e203133373734.roa (raw, json)
Hash identifier:          wSyS0N1FSPL7penaQ1+5Ba8e3mwDRsTErOvqGMY/550=
Subject key identifier:   7F:A2:A2:89:17:E0:0E:96:EE:A3:10:7F:5C:E3:43:F8:2B:6E:DC:5A
Certificate issuer:       /CN=9E0418640D343DF276C373FC40288E6ABD81458E
Certificate serial:       0CF00EDD0B1006C6F2B127E9DA1C3DD11051E7C2
Authority key identifier: 9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136322e302f32332d3234203d3e203133373734.roa
Signing time:             Fri 08 Nov 2024 03:40:00 +0000
ROA not before:           Fri 08 Nov 2024 03:35:00 +0000
ROA not after:            Fri 07 Nov 2025 03:40:00 +0000
asID:                     13774
IP address blocks:        200.0.162.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:0e:dd:0b:10:06:c6:f2:b1:27:e9:da:1c:3d:d1:10:51:e7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0418640D343DF276C373FC40288E6ABD81458E
        Validity
            Not Before: Nov  8 03:35:00 2024 GMT
            Not After : Nov  7 03:40:00 2025 GMT
        Subject: CN=7FA2A28917E00E96EEA3107F5CE343F82B6EDC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:c5:85:f8:38:80:15:3d:a3:6f:54:29:57:
                    1e:c5:90:a5:35:9c:25:c3:5a:91:27:95:39:c6:e9:
                    23:d9:41:76:a7:f9:15:07:67:48:35:47:6a:4e:9f:
                    05:5a:23:8e:51:8d:01:26:ba:26:a6:af:6c:39:a8:
                    96:94:68:57:47:de:ee:99:a9:57:d4:82:09:b0:09:
                    3b:6b:c2:5f:5c:73:3e:ae:db:13:3d:73:af:c2:7e:
                    09:dd:fd:59:cc:5b:b1:6d:66:70:d1:49:78:4e:38:
                    33:52:1a:9e:5c:1e:67:3b:03:9b:a9:81:bc:3c:77:
                    a1:db:15:2c:e5:fc:4d:79:62:fa:31:6c:91:d0:68:
                    31:e4:a4:19:f2:85:89:d5:8e:56:40:99:01:a7:f2:
                    4a:b4:ee:5e:7a:53:1f:09:40:55:c4:c8:ec:d4:b6:
                    41:a9:aa:2a:80:0d:cc:60:a8:52:39:f8:4e:8a:91:
                    f1:28:cb:f2:20:1b:81:b1:06:88:1d:4d:c2:0a:8a:
                    dd:0c:f6:f8:c0:34:f8:e9:0f:63:03:94:54:57:88:
                    90:db:01:0b:d3:26:8b:9f:af:08:a3:8a:2e:a8:4d:
                    5f:c5:26:d8:16:c3:11:7b:59:6c:56:86:44:56:3d:
                    e1:d2:a1:20:3a:96:43:9e:65:dc:7a:4c:5b:6c:97:
                    dd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A2:A2:89:17:E0:0E:96:EE:A3:10:7F:5C:E3:43:F8:2B:6E:DC:5A
            X509v3 Authority Key Identifier:
                keyid:9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136322e302f32332d3234203d3e203133373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:f5:79:04:ea:c8:9c:10:3f:52:e2:7f:50:38:cc:28:70:
         88:f3:f7:77:65:4b:16:69:c8:80:92:26:01:56:83:54:0b:4b:
         86:8b:f8:7c:68:5f:87:51:ff:76:fd:74:5f:c0:98:74:c1:8c:
         d6:53:7b:4d:43:2e:5a:ef:ae:b3:f2:ce:df:25:3d:c0:8c:2c:
         d4:8f:c5:d8:a5:bb:6a:cf:f1:02:be:4c:35:0d:e4:cd:ac:a5:
         0d:6c:92:fe:3d:d8:50:47:d4:ab:33:b4:71:31:4e:d4:d2:e8:
         6c:62:6a:99:50:8c:7c:95:26:61:bb:81:2b:60:9e:04:3f:1e:
         5e:38:20:13:47:38:f1:f7:15:f4:af:af:25:da:28:34:6d:6e:
         ec:20:29:f9:46:e2:05:fd:46:7d:09:d6:09:09:2a:f3:45:91:
         a4:91:60:ff:31:77:3d:12:25:6f:52:31:3a:bf:fd:9f:02:da:
         96:2b:a7:f4:d7:43:62:73:d9:fa:13:b0:7f:a7:9d:6c:c4:6a:
         89:ad:3c:44:c0:82:80:53:2a:30:37:8e:77:63:dd:06:19:dd:
         84:cf:c4:6f:ad:17:06:5d:e3:cd:ae:6d:9e:ae:8c:6a:8b:79:
         ae:65:78:05:9b:2c:e4:12:c2:86:db:fd:e2:c1:fb:0a:bd:a5:
         94:68:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----