Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa
File:                     3230302e38312e36322e302f32332d3234203d3e20323633313939.roa (raw, json)
Hash identifier:          RDXr93zPUduP0aFwR3x3qCcqwLScxxzFn0FMuDlbGPg=
Subject key identifier:   6B:A4:14:18:A6:28:6F:A9:D7:5C:35:8E:D5:86:7B:06:F6:EA:78:2B
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       2B558C0D286FB06E411194492E726EFA08A917B8
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa
Signing time:             Fri 12 Jul 2024 06:25:00 +0000
ROA not before:           Fri 12 Jul 2024 06:20:00 +0000
ROA not after:            Fri 11 Jul 2025 06:25:00 +0000
asID:                     263199
IP address blocks:        200.81.62.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:55:8c:0d:28:6f:b0:6e:41:11:94:49:2e:72:6e:fa:08:a9:17:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: Jul 12 06:20:00 2024 GMT
            Not After : Jul 11 06:25:00 2025 GMT
        Subject: CN=6BA41418A6286FA9D75C358ED5867B06F6EA782B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:72:76:79:a2:12:34:15:28:5f:2a:d3:5d:
                    d6:28:e3:7c:6d:f7:ff:47:82:2e:1d:ef:0d:26:32:
                    80:9f:b6:a5:cd:6c:fa:a8:91:10:e7:1e:fa:94:fa:
                    59:12:35:05:66:ce:6e:88:62:c4:9f:89:99:28:78:
                    01:7f:43:15:42:63:19:ae:f2:aa:bf:9c:dc:8d:25:
                    74:87:dc:4d:d1:7e:ac:e2:af:9f:0f:65:c8:33:5f:
                    11:27:3a:40:a7:05:96:03:a0:ff:a4:cf:cb:9f:bc:
                    06:b6:71:08:4b:75:4a:d6:16:65:97:7a:b5:d7:4e:
                    c1:9a:22:03:df:e6:76:de:e0:e7:5e:13:b4:e7:31:
                    7a:6e:09:13:63:6a:90:13:f2:b6:ee:89:40:3d:55:
                    7c:91:e1:c2:f7:e8:f1:d4:be:4c:05:d3:c2:99:25:
                    15:cd:ce:93:2f:6d:64:65:6b:a1:5c:24:b8:ee:41:
                    cc:68:ba:80:dd:75:dd:45:26:52:6c:ba:44:98:1d:
                    12:18:c4:73:d1:5e:84:4c:a1:39:54:95:dd:db:97:
                    c3:db:bc:f7:f6:a3:4d:7c:af:a1:d6:ea:4e:68:3e:
                    08:2e:c5:dc:de:f3:7a:46:f9:46:4d:3b:f6:01:41:
                    bc:40:84:35:06:9e:6b:32:92:36:46:8d:34:e7:1f:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:14:18:A6:28:6F:A9:D7:5C:35:8E:D5:86:7B:06:F6:EA:78:2B
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e36322e302f32332d3234203d3e20323633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:23:67:94:12:6b:5c:74:f1:be:5d:bf:e9:82:9b:f9:5e:
         3b:30:e2:ac:3c:f7:f2:f8:55:3f:ae:96:73:bc:51:3d:be:b5:
         ca:ec:4d:01:bd:71:5e:7d:90:c8:7a:0b:98:43:08:2e:8e:1a:
         fc:d3:c6:2c:9e:16:f3:ac:c3:f0:b2:7e:5f:03:1e:00:b7:95:
         c4:bc:aa:35:5a:9c:7f:36:95:bd:33:9d:d2:b0:5d:ad:65:2f:
         a3:38:5e:e7:b1:77:0e:bf:1c:50:34:23:e5:66:4f:13:5f:a5:
         ff:07:2d:ac:d5:51:09:b7:80:52:3c:16:b0:bf:fb:e2:41:7e:
         15:d1:5a:38:dd:40:d7:55:21:53:6d:c6:d4:51:33:07:0f:4f:
         ad:8b:74:10:30:6b:42:e3:a3:b6:16:d2:f1:95:1a:80:12:17:
         29:58:aa:ac:dc:5c:40:e1:5b:d6:52:66:a9:fa:44:70:ff:51:
         ff:5e:0c:ad:c0:a4:91:f4:ea:32:b5:ed:cf:e8:89:0b:9c:8d:
         80:f4:ff:e2:3f:b7:54:a3:5b:b0:5c:c4:89:39:34:12:e6:15:
         08:3e:eb:52:42:ba:a5:7f:1c:83:13:e1:80:62:e7:c6:67:30:
         f8:29:ad:df:bc:f2:58:9f:9a:32:90:af:49:fe:d1:48:7e:d8:
         51:d0:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----