Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
File:                     3230302e35302e3234302e302f32312d3234203d3e203237393634.roa (raw, json)
Hash identifier:          V583W4eODyrr3oZ+SmDLUkNm+wnjjC7IjwTHPro4qrY=
Subject key identifier:   B6:08:19:29:61:EF:4F:2B:ED:D5:BC:84:81:FA:B4:0D:B7:4B:BA:C9
Certificate issuer:       /CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
Certificate serial:       69D8EBC4F04BB74B3E902F74D756A9E03BDF39E1
Authority key identifier: 80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
Signing time:             Tue 05 Mar 2024 18:09:11 +0000
ROA not before:           Tue 05 Mar 2024 18:04:11 +0000
ROA not after:            Tue 04 Mar 2025 18:09:11 +0000
asID:                     27964
IP address blocks:        200.50.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:eb:c4:f0:4b:b7:4b:3e:90:2f:74:d7:56:a9:e0:3b:df:39:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
        Validity
            Not Before: Mar  5 18:04:11 2024 GMT
            Not After : Mar  4 18:09:11 2025 GMT
        Subject: CN=B608192961EF4F2BEDD5BC8481FAB40DB74BBAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:a0:c9:04:15:d0:e7:e5:83:c5:16:6b:7b:
                    a0:eb:b6:9d:ae:e9:d7:f0:40:b6:c4:6b:10:05:4a:
                    38:c8:0d:84:4c:36:19:95:6d:4a:d1:f0:b2:bd:52:
                    64:df:52:20:8c:c0:fb:9c:2a:3c:35:b5:d7:e3:1e:
                    04:da:a5:d5:4e:39:d0:5b:27:41:20:97:87:8e:55:
                    2e:12:84:c1:f0:40:c9:e8:3f:3a:4b:77:ff:51:2a:
                    b2:d9:ad:6e:69:c8:39:d8:ba:fb:1a:4e:3b:17:cb:
                    63:7d:17:57:43:4d:fc:bd:40:a7:ee:42:60:3e:c3:
                    41:5d:e4:d4:36:1e:c6:46:fe:a2:4b:c6:2c:c0:d8:
                    fe:c0:96:29:7c:17:e3:9a:5a:dc:b4:ea:50:3d:b6:
                    84:d1:05:04:f0:ff:96:d1:04:60:fd:62:92:56:ca:
                    3a:be:0b:ce:a2:1e:f2:4d:0e:07:cf:27:7d:3a:d7:
                    46:87:de:92:bf:1e:b9:95:37:3b:7c:62:0f:74:cc:
                    91:c3:dd:4f:98:3c:8d:1c:bf:83:06:69:a9:d8:b4:
                    1a:a3:a9:a7:55:84:e2:24:68:67:94:c8:1c:73:ac:
                    b5:23:37:78:c1:44:3c:84:f5:8c:e1:02:e7:4b:d0:
                    18:18:5a:bc:da:e2:17:94:1e:85:dc:96:da:e0:5b:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:19:29:61:EF:4F:2B:ED:D5:BC:84:81:FA:B4:0D:B7:4B:BA:C9
            X509v3 Authority Key Identifier:
                keyid:80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:53:af:04:f5:fa:57:49:94:6f:bd:3c:58:0d:52:68:7e:
         df:75:fc:c0:58:7c:d2:31:3e:31:e7:18:8a:e8:48:1d:88:16:
         ee:ea:18:a1:96:6b:9e:a9:b7:b3:3c:6d:10:e4:4a:6f:17:a4:
         f3:57:5f:e4:03:55:e5:0f:6a:22:33:73:27:ba:17:22:77:fa:
         a6:01:8d:ed:ae:8a:04:88:e5:b4:48:8f:b0:1c:60:90:76:78:
         ee:40:c6:72:09:fe:0b:96:28:36:3b:99:ba:46:33:d8:1c:39:
         b7:c2:e7:e4:27:e5:cb:5b:8f:20:c9:07:14:bf:bd:06:cf:7c:
         ec:0b:17:68:94:34:a8:6b:96:01:b5:3f:2f:77:e3:b2:44:df:
         a1:7e:a4:fe:f9:2f:df:ab:ff:c2:37:00:2b:a7:4c:ea:71:83:
         a1:2b:7b:d2:06:ae:98:6d:51:0f:bb:0b:29:29:94:be:ee:c5:
         b5:33:e9:ed:0b:a9:f1:3f:ca:e2:f1:e5:c2:35:c2:9e:58:d0:
         88:8d:c0:c9:74:b1:df:80:3e:44:d0:9f:82:f5:1a:07:d8:1e:
         4e:d2:05:49:ae:05:53:6b:bf:43:1d:64:18:5c:67:c4:6b:27:
         34:09:ce:b9:bb:8d:d3:12:35:f5:89:ec:dd:3f:d3:25:10:4c:
         7c:74:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----