Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3232312e33322e302f31392d3234203d3e2036303537.roa
File:                     3230312e3232312e33322e302f31392d3234203d3e2036303537.roa (raw, json)
Hash identifier:          cf82obCxJwfvIcvG3jJtrGOikDSEMRTN5afmKKkIeRs=
Subject key identifier:   B6:46:5C:7E:57:69:B2:C2:44:B3:AA:F7:39:48:10:63:1A:E1:CC:90
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       7CF8EFA51F1A3560D643ECCF862692E501F57951
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3232312e33322e302f31392d3234203d3e2036303537.roa
Signing time:             Tue 05 Mar 2024 18:20:03 +0000
ROA not before:           Tue 05 Mar 2024 18:15:03 +0000
ROA not after:            Tue 04 Mar 2025 18:20:03 +0000
asID:                     6057
IP address blocks:        201.221.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f8:ef:a5:1f:1a:35:60:d6:43:ec:cf:86:26:92:e5:01:f5:79:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Mar  5 18:15:03 2024 GMT
            Not After : Mar  4 18:20:03 2025 GMT
        Subject: CN=B6465C7E5769B2C244B3AAF7394810631AE1CC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:a6:5c:40:9c:57:ed:da:c4:5d:21:28:b3:
                    69:6b:da:4d:48:74:9a:6e:10:37:60:71:38:a2:27:
                    a6:f4:ce:c7:b3:4b:22:c7:38:d3:18:b7:d7:3c:1c:
                    3d:79:58:e1:a3:be:59:3a:12:6e:de:86:8e:28:85:
                    36:eb:93:66:9d:b6:d6:e2:6e:4a:f6:d1:bf:37:52:
                    58:c0:00:59:64:5b:14:6e:e6:49:a2:1f:b9:ce:5d:
                    08:b6:76:c3:4a:97:d7:b8:ed:77:30:af:d3:dd:a3:
                    67:92:47:a1:c3:b5:43:ac:5d:15:a9:d8:d4:10:39:
                    08:7b:ca:1b:f0:78:b3:45:a4:07:1d:2a:fa:2e:ef:
                    c9:c6:a2:dc:5d:05:44:ae:e0:b2:00:62:83:a4:6a:
                    5f:2f:a1:50:9e:69:ba:e0:50:82:a7:aa:95:3b:d1:
                    18:88:2a:50:8f:56:ef:96:6b:5d:51:3b:e2:39:a7:
                    ea:76:c3:94:13:97:93:15:d3:b0:70:06:00:11:6e:
                    e2:59:f4:5f:e1:8e:bd:39:0e:57:f9:ea:01:01:63:
                    ad:55:75:8b:55:b2:94:07:f8:80:2d:1a:fb:06:01:
                    9f:0e:ea:a8:1e:13:f7:fa:e8:8c:d2:82:b9:97:ab:
                    6b:46:4d:58:6a:5d:5e:e6:ec:32:a3:c9:2f:1f:64:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:46:5C:7E:57:69:B2:C2:44:B3:AA:F7:39:48:10:63:1A:E1:CC:90
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230312e3232312e33322e302f31392d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:5b:31:7f:57:c3:fd:b6:9a:a0:d9:0e:90:a9:1c:fa:8b:
         ee:13:21:d9:0d:5c:52:5f:80:3c:6d:c5:1e:2e:e2:63:d6:26:
         f4:52:00:71:44:b0:c6:cd:a3:19:48:4d:1a:cf:11:61:71:f8:
         48:ac:26:7e:97:84:88:ff:e6:ba:49:2a:89:b4:ad:29:60:68:
         26:2e:a8:cb:6d:ef:77:fe:54:91:3b:95:58:b4:fa:4c:95:a9:
         63:27:6d:7f:7f:04:57:47:59:3b:00:ed:cb:87:41:bf:b8:bf:
         ea:69:df:ed:5f:a3:8d:55:9d:08:01:8e:43:99:53:dc:02:be:
         d4:5e:2e:ec:37:4d:c0:08:44:a5:b8:4a:a0:65:c5:7f:da:27:
         ea:f8:22:12:06:1a:f3:de:68:bc:b5:ac:d0:05:81:e8:f0:59:
         15:1a:90:ec:34:63:3a:a2:43:6b:6b:5b:75:6c:5b:36:5d:b8:
         12:c9:e2:7b:93:d8:6d:00:2b:0e:71:fc:2b:02:7a:83:07:90:
         6f:99:0e:94:82:8c:35:88:1c:ae:57:19:2e:36:37:80:c9:b4:
         6a:58:1f:7c:28:97:9c:c9:17:5e:45:52:4a:3b:b2:40:15:e0:
         05:68:81:24:34:63:2f:07:36:b5:b8:c1:b0:04:db:bd:37:5a:
         91:26:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----