Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/3230302e31362e31362e302f32302d3234203d3e203237373930.roa
File:                     3230302e31362e31362e302f32302d3234203d3e203237373930.roa (raw, json)
Hash identifier:          +kXQ6TXB4D2+Taic/7LNVAXgE+aeRrYa7VjpGtlTg8M=
Subject key identifier:   D1:39:1A:D6:33:E5:4D:9F:09:E9:75:D8:41:19:A6:37:8D:18:1E:0F
Certificate issuer:       /CN=9C0595683D0FFF0E900C6C19AF389CA806D73B88
Certificate serial:       50F58DAFB81D65ED8511DD08F3C4AEF037A883AF
Authority key identifier: 9C:05:95:68:3D:0F:FF:0E:90:0C:6C:19:AF:38:9C:A8:06:D7:3B:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/3230302e31362e31362e302f32302d3234203d3e203237373930.roa
Signing time:             Tue 05 Mar 2024 17:57:00 +0000
ROA not before:           Tue 05 Mar 2024 17:52:00 +0000
ROA not after:            Tue 04 Mar 2025 17:57:00 +0000
asID:                     27790
IP address blocks:        200.16.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:8d:af:b8:1d:65:ed:85:11:dd:08:f3:c4:ae:f0:37:a8:83:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0595683D0FFF0E900C6C19AF389CA806D73B88
        Validity
            Not Before: Mar  5 17:52:00 2024 GMT
            Not After : Mar  4 17:57:00 2025 GMT
        Subject: CN=D1391AD633E54D9F09E975D84119A6378D181E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:d5:aa:60:44:2e:c5:43:74:97:31:fc:29:
                    36:9a:14:95:45:de:1c:e3:36:a0:a6:6f:53:f1:5a:
                    ee:c0:8c:cb:6f:b7:26:d1:6e:42:70:f4:3f:37:a9:
                    7c:46:02:6c:62:9e:47:9a:d5:b1:4d:e8:d9:21:15:
                    6e:cb:1d:39:53:8a:fd:a2:f9:c8:8c:4c:26:f5:b9:
                    77:94:30:ae:d6:7a:6a:8b:09:18:64:7c:7b:f9:7f:
                    67:b7:ee:46:01:c7:49:48:a0:21:a9:4a:1e:39:67:
                    f5:2c:76:e9:dd:c9:02:91:2c:16:3f:04:e2:bf:42:
                    01:29:2e:3d:31:9d:4f:dc:b0:f7:fc:7f:9f:af:b1:
                    79:57:19:4f:29:de:3d:32:6e:dc:dc:44:7c:1c:99:
                    ae:4a:7a:b3:19:10:0a:c4:e0:38:7b:9f:d1:01:17:
                    f3:34:e2:fb:25:e0:1f:f1:8a:48:31:16:5d:8b:c0:
                    94:6d:6b:db:b6:d7:8d:92:34:87:8f:12:52:62:1c:
                    1c:80:2d:3b:3b:3b:6d:ab:f6:9e:ba:48:d2:81:31:
                    14:6e:4f:c2:43:55:c2:b5:bf:c0:b4:44:c8:41:46:
                    51:f7:de:25:97:5f:47:13:70:9d:4c:36:2c:97:b5:
                    2e:ef:e7:46:3c:cf:b4:af:7e:e2:44:10:2f:10:1e:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:1A:D6:33:E5:4D:9F:09:E9:75:D8:41:19:A6:37:8D:18:1E:0F
            X509v3 Authority Key Identifier:
                keyid:9C:05:95:68:3D:0F:FF:0E:90:0C:6C:19:AF:38:9C:A8:06:D7:3B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C0595683D0FFF0E900C6C19AF389CA806D73B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0628711B23CA72AF445EEAC587157FF997ED0A06D172B8A12CDDE399A05FE90/0/3230302e31362e31362e302f32302d3234203d3e203237373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:c8:20:4f:d3:5a:75:3f:86:13:2b:f2:5b:0e:f2:4f:f7:
         db:6d:ad:da:14:11:8e:17:c2:74:dc:05:85:85:26:ed:90:97:
         c9:73:9e:d2:db:74:7c:de:a4:ed:1d:c6:46:94:7e:a5:b1:60:
         40:68:6c:8b:4f:32:a2:7d:15:2b:aa:17:49:e6:96:33:e0:57:
         a7:4e:2c:4c:81:58:c5:5f:89:12:6c:c9:19:70:07:28:6f:68:
         a4:ec:fe:a5:f3:c3:bc:c4:af:b0:14:c0:a5:f1:23:be:6d:3d:
         88:c1:0c:0f:5d:ef:71:f0:85:01:0a:a8:1e:72:ae:4d:42:27:
         5a:02:44:de:00:19:ef:ce:aa:8f:bd:e6:68:0f:fb:d5:69:e3:
         f0:2d:fd:88:83:a0:8e:f1:06:ec:13:af:a5:36:95:a9:59:6b:
         d7:b5:86:78:14:3b:d4:cc:50:a7:d6:02:4f:68:79:d3:bd:a5:
         7d:24:f3:81:ed:97:10:6f:7f:32:52:df:83:d1:e1:7e:87:32:
         02:96:f0:59:94:dc:5e:76:51:dd:bf:5f:d2:87:c2:f9:ab:df:
         d2:1d:6c:11:87:c3:df:5f:0d:2f:ac:51:0c:35:0f:14:17:97:
         2e:ca:fc:20:cc:c5:5e:8b:8a:3c:ec:93:d0:cf:66:5d:05:7e:
         a2:cb:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----