Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
File:                     3230302e3131302e33322e302f32302d3234203d3e203139393035.roa (raw, json)
Hash identifier:          L6/nOT5my1nG9VqBz1ljtzCtzRS9YXPpJnNwc1ugUoY=
Subject key identifier:   E3:2B:B5:0F:DE:23:1B:D9:2D:B7:13:4D:F8:00:54:0B:DA:07:5A:A3
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       21E03A911A75BFDF995267623B61E3AD32B69CFF
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:44 +0000
ROA not before:           Tue 05 Mar 2024 17:51:44 +0000
ROA not after:            Tue 04 Mar 2025 17:56:44 +0000
asID:                     19905
IP address blocks:        200.110.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:3a:91:1a:75:bf:df:99:52:67:62:3b:61:e3:ad:32:b6:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:44 2024 GMT
            Not After : Mar  4 17:56:44 2025 GMT
        Subject: CN=E32BB50FDE231BD92DB7134DF800540BDA075AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:c0:2e:a6:4c:f6:ff:3f:48:37:e5:bf:f2:
                    41:92:80:85:a2:9d:3c:c6:5f:53:c7:77:6c:ea:83:
                    79:f4:39:e7:d3:82:7a:07:d8:20:fd:1f:1d:26:f1:
                    bb:dc:b0:0d:ec:c4:28:9c:85:96:e7:ba:72:f3:f7:
                    0d:e4:a1:66:df:a8:ae:3c:8d:2f:9a:dd:68:f2:de:
                    bf:e1:32:3f:74:77:81:67:ba:c5:12:87:66:5f:ad:
                    17:9e:b4:52:75:4a:9f:12:52:74:ff:17:72:a5:43:
                    e2:a3:fd:cc:15:1a:4c:81:ff:b5:32:d8:ad:83:f8:
                    35:f3:6a:44:51:bf:e9:f5:87:63:38:32:bc:d9:a2:
                    06:e5:0a:8c:03:13:ca:d4:4f:ea:a0:ec:e7:bc:aa:
                    e0:e6:ea:62:4b:0b:77:09:50:5b:aa:87:a4:07:de:
                    c9:07:8a:da:4b:8d:a5:ae:cb:39:0a:05:00:c3:c4:
                    81:0f:89:81:52:13:65:b4:57:b1:44:3a:09:49:8b:
                    d2:ef:8b:2c:54:b9:fa:ed:fc:44:42:9c:8c:40:fe:
                    f5:ff:b9:f4:50:87:9b:dc:9e:0d:70:e4:43:fa:ae:
                    f8:69:0e:2b:2b:11:f2:49:2d:9f:46:0d:e0:ec:0f:
                    36:19:44:fa:b4:8f:06:49:29:80:d1:05:12:91:5c:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:B5:0F:DE:23:1B:D9:2D:B7:13:4D:F8:00:54:0B:DA:07:5A:A3
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:90:62:20:76:cb:6f:e0:c8:1c:a9:00:52:72:36:cc:d8:9d:
         25:f4:84:60:c5:1a:50:ab:db:13:b1:29:8a:d4:95:e2:5b:f4:
         36:7d:61:5b:cc:27:57:06:57:4f:ae:4a:6b:9d:93:93:af:24:
         9b:ae:70:7b:45:ab:59:28:3e:9a:e2:ca:46:53:c9:e8:75:c5:
         22:dd:a3:75:15:bc:f9:7c:e8:2d:59:bd:35:d3:7b:fc:9d:9c:
         18:e4:46:67:00:dc:9f:03:2c:58:c0:20:a3:c1:69:a6:67:d3:
         9b:8d:9b:bb:42:de:56:a5:58:85:4c:10:d9:f4:e5:23:a9:47:
         17:43:45:9a:2b:47:57:08:03:78:00:9c:42:47:88:39:5e:c7:
         d2:df:34:fe:90:c5:80:a4:f9:39:b9:02:35:18:f8:e2:25:e4:
         ce:9f:81:07:ec:a7:e0:d8:38:62:1e:b2:f9:f5:26:32:46:9b:
         c9:87:32:1a:ad:22:39:1c:5f:06:60:59:44:f6:18:a8:54:17:
         92:8c:81:3c:ee:d9:f6:e0:81:25:4a:5c:a8:5a:40:65:a0:4f:
         d5:43:7c:d5:e8:43:c0:e7:85:e6:c5:0d:2e:d7:ca:78:c6:aa:
         ee:a4:00:00:9a:41:7f:5d:48:e9:60:ab:2d:6a:7a:01:ee:d6:
         b8:ed:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----