Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
File:                     3230302e35352e3234362e302f32392d3239203d3e203634313138.roa (raw, json)
Hash identifier:          c48JbccxVHyUNHUJZ3AHYZ9K6A78KhhWCctY5ptMRx4=
Subject key identifier:   FA:38:18:C4:86:4B:FF:E4:9C:0C:A7:9C:AF:3F:64:B5:72:81:65:40
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       60EF715B30353D36BB6DA357E79CAC4269EF68D9
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
Signing time:             Tue 14 May 2024 19:45:00 +0000
ROA not before:           Tue 14 May 2024 19:40:00 +0000
ROA not after:            Tue 13 May 2025 19:45:00 +0000
asID:                     64118
IP address blocks:        200.55.246.0/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ef:71:5b:30:35:3d:36:bb:6d:a3:57:e7:9c:ac:42:69:ef:68:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: May 14 19:40:00 2024 GMT
            Not After : May 13 19:45:00 2025 GMT
        Subject: CN=FA3818C4864BFFE49C0CA79CAF3F64B572816540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5e:88:56:ea:c6:e3:c6:2e:30:09:e9:34:e8:
                    69:5e:16:4c:04:ba:79:0f:c0:63:31:e9:f6:b7:89:
                    fa:26:52:29:a0:be:70:a6:16:ed:64:61:84:b2:42:
                    4d:67:1a:b5:68:34:b8:f8:56:0e:a9:4f:34:2c:00:
                    c8:4f:51:4d:1d:d6:41:45:bd:77:dd:f4:28:ab:f0:
                    6e:33:f5:6a:da:04:72:e7:3e:1b:02:0b:71:23:37:
                    26:c0:6f:ba:ef:47:ef:51:c1:03:4b:a5:92:41:0b:
                    d2:c4:ba:c6:c5:c8:3b:50:36:5c:38:f1:0e:a5:5d:
                    e9:2a:2f:09:5a:d1:6d:18:1d:c8:a9:d8:10:35:1c:
                    38:cd:68:fb:34:ec:78:6f:1f:7c:71:f9:70:a3:1e:
                    62:0a:1c:6e:36:b3:3e:a6:8b:db:49:87:69:ef:f3:
                    42:c5:b2:a3:fd:e8:a1:d3:f9:ea:5a:4a:ca:c8:3f:
                    3b:f7:ff:97:d4:00:28:27:e8:e8:47:c5:13:cf:c2:
                    c5:44:58:dc:48:26:99:6f:6e:aa:98:61:0f:e3:77:
                    2c:54:9f:fd:7c:30:1d:d2:1c:a4:1b:cb:d4:c5:4e:
                    5b:49:3a:8d:24:7c:9b:66:0d:ca:30:cd:f3:d8:fc:
                    3b:c1:3c:d3:d3:04:64:96:4a:f5:44:f3:61:fc:f0:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:18:C4:86:4B:FF:E4:9C:0C:A7:9C:AF:3F:64:B5:72:81:65:40
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.246.0/29

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:b9:8d:b0:bd:eb:78:99:84:8c:62:38:93:94:f3:e9:25:
         fa:90:d8:92:64:60:37:7a:e6:28:e4:55:da:af:92:b9:b0:0a:
         05:ed:24:ca:28:0b:0f:94:cf:b1:0b:10:47:13:4f:8d:af:fc:
         54:a9:ae:28:32:a8:8c:a7:13:fa:76:72:46:e6:72:c9:cf:b4:
         8a:df:2b:74:da:a9:dc:e4:0c:3a:b6:68:84:2b:58:cb:81:a3:
         ec:ff:60:51:dd:ae:83:59:4b:3a:9b:e3:9b:b3:dd:39:a5:f1:
         80:4a:6e:2c:28:ed:47:64:37:25:e4:65:dc:4e:e0:6c:6c:bc:
         99:d5:98:74:3b:05:71:ab:28:79:41:b1:42:c0:f7:dc:06:87:
         b5:d8:d6:3e:0a:a6:82:18:49:27:e2:0b:00:bf:76:8b:8d:71:
         5a:45:23:ef:91:f3:a2:5c:c9:3b:27:10:b4:24:b8:e6:e5:ae:
         e0:32:66:f8:df:b2:10:a7:51:a6:7f:19:ea:ef:0c:e4:f6:3d:
         0b:30:87:84:1d:d9:21:f9:49:e5:57:62:66:b0:f8:a0:43:6a:
         d6:4a:14:cd:ef:cf:c3:71:22:45:02:39:e2:c2:82:8d:79:0e:
         fe:95:b3:a8:fc:fb:a4:74:d2:73:c9:1e:d9:f6:13:bb:e9:06:
         4d:29:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----