Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139393035.roa
File:                     3230302e33312e39362e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          hrd7wWzozljiMsVEXYiB12Li03hq0vJOm7gsEW0/Dyc=
Subject key identifier:   42:78:0A:1F:FB:AD:7A:40:A2:1A:D0:17:55:01:1C:5E:67:9C:FB:CF
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       69A62B917251AAFF7EC3F4703250244B90CC75A3
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 18:20:13 +0000
ROA not before:           Tue 05 Mar 2024 18:15:13 +0000
ROA not after:            Tue 04 Mar 2025 18:20:13 +0000
asID:                     19905
IP address blocks:        200.31.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a6:2b:91:72:51:aa:ff:7e:c3:f4:70:32:50:24:4b:90:cc:75:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:13 2024 GMT
            Not After : Mar  4 18:20:13 2025 GMT
        Subject: CN=42780A1FFBAD7A40A21AD01755011C5E679CFBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:0c:0e:55:76:02:61:18:b6:7e:f8:a7:fa:
                    06:b1:d9:3f:66:fa:4b:65:43:66:c3:78:40:c7:ba:
                    1a:1b:df:43:a4:c4:1c:61:5b:2e:f6:5f:ed:ed:0c:
                    a2:27:0b:cf:df:bf:74:ba:35:a9:e4:fd:fe:1e:17:
                    3c:21:9c:b5:ee:2e:8d:3d:d6:5e:b7:ae:52:e2:99:
                    52:ad:4c:22:b0:1d:bf:91:cc:51:9b:b7:a8:3e:38:
                    71:06:96:d9:9b:40:87:78:8a:80:f4:09:38:e3:b5:
                    ab:8a:ea:36:99:f3:bf:a2:c7:87:91:07:14:2a:4c:
                    a7:9a:83:c3:65:e8:62:76:6e:82:fd:db:90:3d:42:
                    d4:df:02:4e:38:58:0f:ad:66:7a:46:86:94:72:aa:
                    34:2b:c5:a5:54:b9:69:50:e7:41:c8:bc:68:2d:34:
                    20:0d:68:47:88:4e:ac:e4:dd:aa:22:eb:5a:71:04:
                    87:40:99:88:e3:8f:ee:65:7f:ba:f1:af:a6:0a:cb:
                    7b:1b:35:45:6a:b0:31:af:03:09:e3:b0:ce:22:ea:
                    99:8f:c3:de:f6:81:6b:46:0c:4c:c8:5f:cc:11:b0:
                    63:76:3c:9e:dc:21:7f:ce:74:ff:82:d1:74:4c:b8:
                    0c:ee:0f:6e:93:37:05:e4:02:d2:c1:dd:2b:d1:46:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:0A:1F:FB:AD:7A:40:A2:1A:D0:17:55:01:1C:5E:67:9C:FB:CF
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3230302e33312e39362e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:07:2a:f8:b5:d7:01:dd:26:c3:ce:6e:d6:2f:19:db:e3:
         1c:e6:1a:f8:9b:3c:41:58:48:7c:f2:24:08:04:b5:32:36:fc:
         9e:30:6d:71:14:d3:a2:97:4c:bc:ec:4b:88:6a:78:fb:db:65:
         2c:47:7a:78:45:95:22:a8:51:dc:1a:7f:b9:fc:2e:51:e9:1e:
         e3:f9:71:cf:a5:29:a6:7f:27:4a:c6:ad:84:cb:1c:d4:1c:31:
         e5:2a:58:3e:59:9f:2f:c7:0c:96:45:98:61:3a:68:55:9e:e2:
         c8:19:6b:b0:54:91:98:11:c6:b7:5c:59:96:6c:83:30:a8:97:
         8f:36:ac:4c:b8:e6:56:4e:43:21:ea:93:6e:eb:14:de:52:54:
         fc:0b:df:05:38:44:5d:1c:2f:c8:52:75:1c:ed:2f:78:a3:03:
         b8:55:8c:ae:75:c4:a1:5f:8f:38:20:1d:7b:04:48:74:ce:c3:
         0e:38:13:c3:02:57:2c:ee:76:27:8d:07:30:3c:fb:36:cb:e6:
         d9:d6:2b:88:fd:fc:a9:5d:7d:9a:6d:4c:c0:6b:f7:74:4c:86:
         5a:9f:be:5c:62:62:2e:dc:7a:bb:ac:21:b5:4d:5b:a0:18:cb:
         db:e8:1c:67:34:7b:14:74:2e:63:d7:eb:d7:4e:e2:b8:ed:d3:
         ef:3e:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----