Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
File:                     3230302e34322e3232342e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          yRb9K8HgRqopnpiMlAG0ExwTAqD5YLRn9Wphr2hsee0=
Subject key identifier:   66:DC:E4:B2:CF:15:E8:98:E3:A5:1C:D5:6F:BA:60:7D:98:CD:12:B3
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       62C9B78B2AF92F0D5A146D878DF67A15E6E13501
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 18:09:19 +0000
ROA not before:           Tue 05 Mar 2024 18:04:19 +0000
ROA not after:            Tue 04 Mar 2025 18:09:19 +0000
asID:                     12066
IP address blocks:        200.42.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c9:b7:8b:2a:f9:2f:0d:5a:14:6d:87:8d:f6:7a:15:e6:e1:35:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:19 2024 GMT
            Not After : Mar  4 18:09:19 2025 GMT
        Subject: CN=66DCE4B2CF15E898E3A51CD56FBA607D98CD12B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:cd:23:a7:88:1a:c4:26:9e:6c:69:ed:57:
                    03:02:b4:c6:03:ab:b0:2c:cc:9a:e4:1d:f7:45:9e:
                    b8:ab:b5:4c:de:5d:62:7b:2c:c3:26:76:5a:d6:bc:
                    61:fa:6c:c8:6d:88:55:c5:a5:a5:c6:5c:99:46:07:
                    77:c2:17:e0:ff:24:12:a2:b0:05:7c:ec:2d:e1:d2:
                    9f:aa:13:fd:f3:00:e3:2f:44:3e:47:84:c0:73:61:
                    65:65:73:36:5c:d2:88:43:b2:93:61:ca:d5:72:fa:
                    4d:c5:79:41:6b:62:7c:00:59:e9:56:a7:fd:77:f7:
                    e0:77:57:f5:f4:83:26:ca:78:59:90:87:a6:f7:f2:
                    d2:96:e6:f0:64:6d:43:c3:6e:38:02:ab:cf:8e:4b:
                    88:5a:30:60:9e:92:a4:1c:c6:b1:02:02:66:53:41:
                    1b:25:91:b2:92:ee:95:7c:5b:d3:b8:f4:b4:3a:dc:
                    af:21:3c:e0:70:eb:42:91:9d:74:d9:fb:b7:e1:c4:
                    c4:6b:37:e8:4c:a7:26:f2:e6:95:a8:a9:b4:5d:de:
                    1c:fc:01:4b:8e:d9:c8:6e:ac:98:17:1c:f3:8b:a4:
                    c9:52:48:4d:b9:b8:0c:69:79:55:5a:ac:0a:f4:86:
                    4a:5e:a2:49:0b:3c:d7:6d:57:15:ce:9f:a1:fb:03:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:E4:B2:CF:15:E8:98:E3:A5:1C:D5:6F:BA:60:7D:98:CD:12:B3
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:6a:66:c9:77:19:89:37:11:a9:d4:b0:6b:66:42:d3:a1:
         07:1c:ca:46:ae:b9:2f:fc:40:7d:a3:64:d4:19:d2:f4:50:07:
         d3:93:43:43:d9:6e:a1:9a:e6:9d:8d:87:ac:23:dd:04:c1:0d:
         4f:ed:ce:2c:7e:f2:56:43:f1:59:32:24:30:4c:dc:e4:ba:7e:
         a1:0f:7a:00:b4:6a:4b:84:cb:ba:08:e0:29:28:e9:b5:44:b4:
         3e:3a:ea:4f:b1:b7:16:9b:ec:e6:dc:35:b0:07:8e:d4:e6:ca:
         12:b6:0e:66:92:4d:0d:96:69:f8:76:48:69:6c:3d:71:59:68:
         a1:d5:a4:2c:f2:f7:01:2a:66:1f:3d:eb:a2:74:1d:2f:82:f0:
         5f:b0:9a:08:fd:08:f5:d7:84:a8:40:8a:e0:7b:34:de:fb:eb:
         12:ba:bd:61:24:01:26:db:b8:de:e2:3a:07:07:65:4a:f8:b5:
         08:c1:44:e1:97:b0:3e:80:f3:c2:20:b7:16:8f:ea:69:06:3f:
         4c:5e:93:58:ee:0e:7d:20:56:02:52:ec:e2:22:20:35:44:ef:
         47:54:2c:18:a3:e0:fe:a7:2e:0c:96:d2:a6:e2:8e:af:f1:b3:
         ab:19:58:11:0a:da:fe:b1:07:25:be:9c:3f:7c:8b:91:28:37:
         d7:60:82:4b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYsm3iyr5Lw1aFG2HjfZ6FebhNQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNDAzMDUxODA0MTlaFw0yNTAzMDQxODA5MTlaMDMxMTAvBgNV
BAMTKDY2RENFNEIyQ0YxNUU4OThFM0E1MUNENTZGQkE2MDdEOThDRDEyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyc0jp4gaxCaebGntVwMCtMYD
q7AszJrkHfdFnrirtUzeXWJ7LMMmdlrWvGH6bMhtiFXFpaXGXJlGB3fCF+D/JBKi
sAV87C3h0p+qE/3zAOMvRD5HhMBzYWVlczZc0ohDspNhytVy+k3FeUFrYnwAWelW
p/139+B3V/X0gybKeFmQh6b38tKW5vBkbUPDbjgCq8+OS4haMGCekqQcxrECAmZT
QRslkbKS7pV8W9O49LQ63K8hPOBw60KRnXTZ+7fhxMRrN+hMpyby5pWoqbRd3hz8
AUuO2churJgXHPOLpMlSSE25uAxpeVVarAr0hkpeokkLPNdtVxXOn6H7A6JVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZtzkss8V6JjjpRzVb7pgfZjNErMwHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMyMzAzMDJlMzQzMjJlMzIzMjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMjMwMzYzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgq4DAN
BgkqhkiG9w0BAQsFAAOCAQEAFj9qZsl3GYk3EanUsGtmQtOhBxzKRq65L/xAfaNk
1BnS9FAH05NDQ9luoZrmnY2HrCPdBMENT+3OLH7yVkPxWTIkMEzc5Lp+oQ96ALRq
S4TLugjgKSjptUS0PjrqT7G3Fpvs5tw1sAeO1ObKErYOZpJNDZZp+HZIaWw9cVlo
odWkLPL3ASpmHz3ronQdL4LwX7CaCP0I9deEqECK4Hs03vvrErq9YSQBJtu43uI6
BwdlSvi1CMFE4ZewPoDzwiC3Fo/qaQY/TF6TWO4OfSBWAlLs4iIgNUTvR1QsGKPg
/qcuDJbSpuKOr/GzqxlYEQra/rEHJb6cP3yLkSg312CCSw==
-----END CERTIFICATE-----