Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e37322e302e302f31362d3234203d3e2036343731.roa
File:                     3230302e37322e302e302f31362d3234203d3e2036343731.roa (raw, json)
Hash identifier:          afQn/qXM1E5Y0NzsYxg0T/p2KTdREuTjUrk94xdh0XA=
Subject key identifier:   BB:1E:0C:84:72:7E:F2:38:16:6E:9C:1A:85:40:D3:0A:B1:F0:7B:27
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       67ABF8B7C1AA0C766C933D7A6C6C65211BFBF0D4
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e37322e302e302f31362d3234203d3e2036343731.roa
Signing time:             Tue 05 Mar 2024 18:14:58 +0000
ROA not before:           Tue 05 Mar 2024 18:09:58 +0000
ROA not after:            Tue 04 Mar 2025 18:14:58 +0000
asID:                     6471
IP address blocks:        200.72.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ab:f8:b7:c1:aa:0c:76:6c:93:3d:7a:6c:6c:65:21:1b:fb:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:58 2024 GMT
            Not After : Mar  4 18:14:58 2025 GMT
        Subject: CN=BB1E0C84727EF238166E9C1A8540D30AB1F07B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:6c:8f:53:2c:9e:0e:88:21:9c:e9:3e:ee:
                    86:4d:f7:2c:91:83:66:a4:0b:34:de:9e:9d:f2:3d:
                    09:bf:12:a6:fb:56:be:4b:5c:a6:8f:e3:96:ad:07:
                    c9:22:73:31:9b:f8:5a:b2:2b:c3:d1:14:b1:04:af:
                    e4:51:76:78:42:f0:2f:38:a9:58:ee:74:99:14:eb:
                    7a:f4:fb:ba:5c:fb:36:01:29:77:66:6f:02:05:4d:
                    bd:56:95:93:6e:22:e6:e4:97:d1:27:e3:27:bb:c9:
                    aa:d1:82:f4:e0:5e:b9:c8:3d:14:f0:76:48:da:a3:
                    81:01:e6:24:66:12:21:75:0a:f6:82:c5:6c:00:a2:
                    fd:b3:bf:ba:d6:28:aa:95:6f:37:60:bf:52:e8:62:
                    b3:e0:db:e7:bc:2c:ac:47:ce:b3:06:d4:ae:09:bc:
                    f9:4b:97:8d:2e:06:13:de:91:dd:38:04:d4:7b:3c:
                    da:67:1c:c0:0b:19:2a:f5:e6:cf:0f:39:c1:62:74:
                    85:58:2d:24:d9:dc:2c:5d:4d:17:5b:39:f7:0d:a2:
                    db:b7:63:f5:63:2c:62:b3:82:9a:46:be:1a:d0:9a:
                    27:6a:70:5f:7c:c5:64:28:84:04:e5:e1:d1:34:62:
                    26:79:ca:1c:c1:55:33:2e:b9:17:4c:7b:80:50:5a:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:0C:84:72:7E:F2:38:16:6E:9C:1A:85:40:D3:0A:B1:F0:7B:27
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e37322e302e302f31362d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:18:1e:a7:94:62:f0:d9:b8:7f:9d:2d:bf:3c:ad:b5:5d:68:
         d2:ba:7d:25:7b:30:8d:f0:2f:31:0a:ad:62:17:11:69:8f:fb:
         3b:98:fb:1e:2d:46:40:9e:1c:ea:5a:c1:bd:47:23:01:dd:ff:
         c5:40:e8:42:68:1b:6d:7e:ca:a0:08:21:5d:4c:52:63:e5:98:
         4b:45:19:ce:5b:45:47:bd:81:8f:76:93:30:c7:03:20:1e:cd:
         8a:09:15:3e:d9:68:d6:68:79:0e:1e:85:f5:e1:ae:5c:1a:ef:
         f9:49:63:da:da:a5:bd:08:d3:d6:90:b8:bc:9e:9f:e4:50:db:
         b4:3d:d0:e7:2b:d3:23:48:1c:78:7a:0a:f7:76:12:91:3a:95:
         ad:c2:ad:28:b8:67:11:cd:e7:0c:60:10:c1:c6:14:82:ce:6e:
         b7:d3:9d:4a:73:69:35:e4:0e:d4:c8:b5:f5:03:18:d1:7e:a3:
         60:75:7c:63:ff:a3:f7:0f:5b:37:af:5a:c1:61:cb:a9:91:da:
         bf:06:f2:0c:cc:6e:51:4e:fe:18:0f:05:71:0d:54:b4:dd:c1:
         4d:3a:ec:a4:94:5d:66:49:03:c3:f9:32:f0:ef:9c:e5:8b:9d:
         ba:22:9b:76:5e:64:62:1e:c6:c1:bd:c4:11:6e:8f:78:56:b0:
         73:a1:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----