Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139322e302f32302d3234203d3e203131303831.roa
File:                     3230302e32362e3139322e302f32302d3234203d3e203131303831.roa (raw, json)
Hash identifier:          mkjNVlI4IV7m3fv+wGReQbcvrnIvLf92UEG7pCg6nCk=
Subject key identifier:   B0:FB:C0:20:6E:82:30:2A:CA:11:C7:58:97:1B:F8:A9:5B:CC:30:78
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2D89FF94228DA72945FEE93E49ED87EAB92FBAA3
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139322e302f32302d3234203d3e203131303831.roa
Signing time:             Tue 05 Mar 2024 17:42:08 +0000
ROA not before:           Tue 05 Mar 2024 17:37:08 +0000
ROA not after:            Tue 04 Mar 2025 17:42:08 +0000
asID:                     11081
IP address blocks:        200.26.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:89:ff:94:22:8d:a7:29:45:fe:e9:3e:49:ed:87:ea:b9:2f:ba:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:08 2024 GMT
            Not After : Mar  4 17:42:08 2025 GMT
        Subject: CN=B0FBC0206E82302ACA11C758971BF8A95BCC3078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:c6:b1:da:47:a5:77:e0:ab:c8:c0:cc:41:
                    f4:7a:2d:1f:e5:d1:cf:5e:83:e0:cc:fe:d5:eb:94:
                    71:b2:23:11:bc:10:96:7e:30:60:c7:27:a9:ac:4f:
                    f8:cb:af:01:a8:3c:7e:a9:bc:2c:bb:6d:62:19:3f:
                    bd:8f:47:08:79:dc:ad:59:71:6c:4f:d8:2a:8c:56:
                    85:8d:bd:00:da:76:7d:40:68:5e:d8:ae:27:8a:69:
                    03:16:8b:f9:f4:6e:67:d7:e4:98:69:44:df:b4:90:
                    16:5c:23:94:5a:10:ec:f3:0a:ba:62:8a:3f:25:eb:
                    dc:70:89:78:85:12:e4:76:0c:fb:12:00:b5:9e:9f:
                    be:ce:06:1a:e8:7d:75:75:59:bf:1f:ef:9b:05:17:
                    ec:3d:5d:4c:6b:f7:c0:01:e6:67:a4:1a:8f:bd:e3:
                    27:94:1a:fa:88:16:4b:d8:46:bd:c7:34:c5:44:f7:
                    8b:b2:68:50:b0:cb:d3:3b:1c:2a:af:a8:86:f2:21:
                    6f:55:5f:a5:37:a2:d2:f1:5f:00:55:e9:fc:44:ed:
                    92:cb:68:82:5c:75:3d:d0:62:22:e8:37:15:a0:55:
                    24:09:94:b0:3b:0c:6b:7f:b5:ef:a3:5c:0c:93:fd:
                    a9:8a:72:06:fe:b8:5c:7a:92:14:0a:86:cd:ed:6a:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:C0:20:6E:82:30:2A:CA:11:C7:58:97:1B:F8:A9:5B:CC:30:78
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3230302e32362e3139322e302f32302d3234203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:82:df:cd:f3:ad:96:d7:fc:36:48:ac:30:9a:65:c4:94:4a:
         0e:9a:f5:27:b5:16:c2:fc:98:44:44:6b:a3:18:3a:fc:cb:e9:
         24:6a:be:b3:50:ed:1f:cf:ce:2d:33:30:09:28:aa:67:54:88:
         41:ff:dd:9a:4b:16:45:d6:58:49:ec:33:55:6a:74:af:1b:8d:
         01:0f:e6:b5:a8:32:c9:ef:50:ec:db:03:82:19:88:37:54:a1:
         7f:a4:88:71:fd:7c:2f:47:f4:42:f8:84:23:ea:51:3d:cc:d3:
         c6:b8:2f:eb:f0:16:78:b5:6e:25:95:6c:c3:9e:46:2a:5b:fe:
         a1:38:62:ee:a4:bd:84:4f:fc:29:7a:f1:a3:dc:e9:6a:61:6c:
         75:2f:54:12:32:75:ff:36:5e:27:82:2d:68:42:65:2b:59:ae:
         d5:5e:be:1f:ba:5b:e4:fc:cd:f9:18:59:12:1b:3b:d4:3c:9e:
         97:3c:14:ce:d5:ef:77:80:e3:7c:46:04:dd:6d:41:44:7d:ce:
         51:3c:f7:c0:df:2f:ea:59:b2:3f:da:58:a3:13:21:8e:51:e4:
         15:fa:fc:5e:1b:3d:47:8e:36:ef:00:09:67:91:3f:4e:75:51:
         85:df:70:ee:79:c2:0b:78:a9:c9:a3:c6:fd:7f:a7:ba:48:24:
         e3:61:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----