Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa
File:                     3230302e3131302e34382e302f32302d3234203d3e203237383339.roa (raw, json)
Hash identifier:          ART1f3aJSF2gF3tstKF1QXfGj4MUChsxWfIdRQWVk88=
Subject key identifier:   6C:F6:AF:9A:0F:84:AD:9A:3F:5E:A7:B8:F7:FA:81:A9:68:F1:23:4C
Certificate issuer:       /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial:       1EDF3014BB685E571231C0C8A352E0EF6279B090
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 17:57:28 +0000
ROA not before:           Tue 05 Mar 2024 17:52:28 +0000
ROA not after:            Tue 04 Mar 2025 17:57:28 +0000
asID:                     27839
IP address blocks:        200.110.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:df:30:14:bb:68:5e:57:12:31:c0:c8:a3:52:e0:ef:62:79:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
        Validity
            Not Before: Mar  5 17:52:28 2024 GMT
            Not After : Mar  4 17:57:28 2025 GMT
        Subject: CN=6CF6AF9A0F84AD9A3F5EA7B8F7FA81A968F1234C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:d4:bc:3b:e6:61:61:61:32:34:87:cb:28:
                    84:56:ac:93:98:8a:8f:5d:f9:39:04:81:e0:77:f9:
                    db:38:31:c5:db:51:98:50:8a:32:87:0a:3c:77:67:
                    7d:03:77:ea:0d:22:12:a3:07:d3:8c:9f:54:43:71:
                    ef:65:db:9e:86:4b:dc:69:0f:b7:85:d4:18:f4:4f:
                    16:e4:c6:8b:ed:31:a0:f3:ca:20:c9:b4:b5:30:9e:
                    13:31:bc:9d:88:48:02:90:e3:1b:00:46:87:4d:ae:
                    c8:62:97:5d:ed:fd:d9:82:b0:26:6e:5e:cb:ff:ab:
                    35:62:b0:4d:e7:e9:28:f5:c7:d2:19:7e:a6:71:80:
                    73:4d:ac:7c:ae:3c:1e:d1:9c:93:c2:4f:37:8e:88:
                    6b:2b:04:5b:88:bd:73:1f:8d:c3:3b:85:5c:29:91:
                    37:13:cc:35:62:ae:db:67:5e:e2:3d:a5:9b:6d:75:
                    df:08:28:ac:13:fa:bc:17:0b:c6:1c:7f:d9:85:3a:
                    a0:cc:06:2e:bf:dd:f5:54:93:63:d9:3e:42:ce:03:
                    13:61:37:67:79:e5:77:5e:e3:50:29:91:01:d7:fc:
                    01:db:68:59:83:6f:0a:6e:7f:84:f3:c0:31:31:04:
                    3d:7c:d6:9f:2a:64:fb:61:a9:5b:75:a2:8f:f8:76:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:AF:9A:0F:84:AD:9A:3F:5E:A7:B8:F7:FA:81:A9:68:F1:23:4C
            X509v3 Authority Key Identifier:
                keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:84:04:f1:c2:e2:92:a7:f8:77:9d:26:d9:b7:25:32:d7:
         71:52:f6:e8:97:44:82:77:d2:6a:94:ec:04:f3:b4:2e:c9:c7:
         94:bf:22:f3:ab:33:b2:31:27:2c:1f:51:6a:af:80:94:10:95:
         56:74:2d:69:14:00:24:35:d9:b7:cd:55:e2:36:62:db:4c:05:
         7a:e3:64:5f:de:b2:e4:36:6d:c3:e8:b5:57:a3:86:6c:2a:f6:
         bd:45:6b:0f:c0:e3:36:0a:1a:dd:32:a1:26:5f:61:96:b5:e6:
         7f:9a:fb:a8:19:7d:4f:65:35:b0:45:a3:20:cb:6d:de:af:82:
         cf:1d:5a:b3:5a:da:c5:5f:19:c2:dc:f3:20:5b:bf:a3:f6:0b:
         c2:72:0d:5f:64:c4:fc:99:f2:fa:2c:11:c2:1a:23:eb:24:50:
         ce:fe:9b:4f:f2:20:c7:2e:4a:95:6c:81:22:78:0c:1a:d4:7d:
         df:51:ea:a3:c7:2b:77:c3:e6:63:b3:8e:52:6b:83:7c:28:ba:
         60:ba:ee:3e:68:a1:f2:40:99:68:95:65:42:b4:be:47:8c:83:
         53:31:b2:a5:25:84:e3:f6:6c:ca:81:d3:5d:9e:07:8e:82:27:
         b3:dc:b7:22:59:40:b7:f8:46:f6:5d:f9:44:23:fc:e8:3e:a2:
         13:0a:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----