Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa
File:                     3230302e31332e31362e302f32302d3234203d3e203139333332.roa (raw, json)
Hash identifier:          SvsNSA6b8/vDK4dYg14lOWmNVlIK5gRGK+GwI6wHmxA=
Subject key identifier:   60:BC:F0:E5:48:B2:C4:A0:3B:C1:F0:C2:B1:8B:24:11:D6:60:C2:D0
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       613DABFA69EFFF8BC20DE5FF11967D28CD147BA8
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa
Signing time:             Tue 05 Mar 2024 18:05:43 +0000
ROA not before:           Tue 05 Mar 2024 18:00:43 +0000
ROA not after:            Tue 04 Mar 2025 18:05:43 +0000
asID:                     19332
IP address blocks:        200.13.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3d:ab:fa:69:ef:ff:8b:c2:0d:e5:ff:11:96:7d:28:cd:14:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Mar  5 18:00:43 2024 GMT
            Not After : Mar  4 18:05:43 2025 GMT
        Subject: CN=60BCF0E548B2C4A03BC1F0C2B18B2411D660C2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:79:0e:78:06:3a:44:29:8b:d0:a4:f9:76:
                    b3:89:a4:1c:8f:79:80:2c:2a:85:25:df:79:d4:0f:
                    ef:ab:7f:8b:73:64:8d:73:c2:9f:16:d7:d6:e4:a1:
                    f3:78:6e:71:1c:c9:6b:c9:31:6c:94:f9:f7:c7:6e:
                    f5:1f:e8:3e:39:ee:06:91:b3:07:82:38:b4:8b:12:
                    b5:6a:5f:bb:fa:db:27:72:fd:1c:2f:3b:45:2b:77:
                    45:53:64:d7:7c:f0:f2:92:20:9c:89:72:4b:4d:7a:
                    b9:c4:b8:bd:12:f8:3e:97:67:22:fb:20:5d:da:e4:
                    05:c2:49:5c:90:be:42:84:42:5a:eb:a3:42:62:79:
                    5e:05:3d:7c:a7:5d:1f:c2:a1:e8:fa:51:16:14:83:
                    6a:5a:f4:77:5f:b5:dd:89:3a:f2:ef:0a:a8:2d:f3:
                    0b:e9:17:d4:19:c8:bb:05:3b:49:f7:bf:90:a1:31:
                    fa:45:ae:06:49:ea:8b:62:d6:bb:d2:48:82:9c:22:
                    9f:2a:57:19:4a:cf:df:79:e4:41:2b:c8:9d:41:ba:
                    6c:dc:53:0f:97:33:b9:ac:16:c0:47:43:94:d4:7d:
                    3a:e1:9a:3d:6c:a4:54:a2:b7:a3:26:54:3c:ad:57:
                    40:4a:6e:8d:eb:19:fe:c8:c5:26:b3:ea:8c:e2:13:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:F0:E5:48:B2:C4:A0:3B:C1:F0:C2:B1:8B:24:11:D6:60:C2:D0
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:8d:62:75:4a:31:52:4f:83:02:ef:47:79:d7:20:38:34:
         fd:67:0a:89:32:79:c0:3d:af:f3:17:18:d9:20:07:a8:ba:5e:
         bc:51:b3:62:07:e2:4d:da:9e:f5:2f:07:ab:f5:79:6f:6c:14:
         39:ca:80:44:9b:2f:40:98:a7:61:9b:8d:bf:12:3d:ab:f4:14:
         80:5b:6f:c6:45:27:05:70:96:0d:3b:ee:85:b3:9a:7e:58:9b:
         6b:e9:0c:13:55:1a:d5:0a:96:3a:ae:12:a1:47:18:e7:ec:f1:
         4f:2c:3b:f4:bf:f2:a9:e4:77:62:df:6d:c8:08:c1:d4:be:af:
         50:cf:17:d9:38:c5:4a:3a:f6:9c:17:65:b1:aa:46:4c:b0:e0:
         73:87:26:22:79:cc:a4:b7:2e:b8:23:bf:eb:56:58:67:d8:07:
         7d:6e:50:41:44:8f:25:53:e4:4f:45:51:6b:64:12:e3:92:70:
         c9:f0:2f:91:1a:91:d3:bf:04:6b:15:93:e5:ef:0c:2e:98:65:
         97:2f:5a:0b:a3:df:5d:63:27:4d:20:95:d9:b3:91:af:ad:07:
         67:52:a7:2a:74:c3:46:49:68:41:b8:42:d7:7b:bb:c8:6a:98:
         b6:21:b3:70:ef:42:0d:e9:73:fd:7f:f7:24:c0:6b:b6:ef:a5:
         e7:af:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----