Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131322e302e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          ggx2MqHQutV441G9CS0dZ3yBsETVrWnlNut+OtA382A=
Subject key identifier:   2E:45:FD:A8:17:B6:3B:5A:9E:11:BC:68:AC:62:8C:11:41:27:40:2E
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       5181708C8C1EDBE86EEFC7124E817E9FB098DDE5
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:25 +0000
ROA not before:           Tue 05 Mar 2024 17:47:25 +0000
ROA not after:            Tue 04 Mar 2025 17:52:25 +0000
asID:                     7418
IP address blocks:        200.112.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:70:8c:8c:1e:db:e8:6e:ef:c7:12:4e:81:7e:9f:b0:98:dd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:25 2024 GMT
            Not After : Mar  4 17:52:25 2025 GMT
        Subject: CN=2E45FDA817B63B5A9E11BC68AC628C114127402E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:2b:55:c7:df:c9:1e:8e:b0:df:dd:01:7c:
                    99:f0:a3:d9:51:7e:be:7e:46:fa:bd:55:c1:28:78:
                    5b:75:1c:dd:c2:15:20:08:56:1d:a0:03:6f:38:46:
                    7b:08:97:09:d8:2a:93:9c:0a:a5:db:e9:69:b9:fb:
                    dd:ec:9d:4d:96:1c:d8:d7:5a:61:a1:28:8c:03:ed:
                    a0:1b:35:d9:a2:90:ca:5b:db:8f:db:ea:c7:89:9b:
                    29:b7:1d:18:75:31:5a:92:04:e2:1c:08:6d:ff:9a:
                    8b:3d:a4:45:25:30:96:56:1a:cd:7c:2a:ea:78:35:
                    03:46:67:4d:95:5f:05:68:a4:c7:36:83:fb:01:45:
                    7b:b4:67:4c:78:3a:9a:f4:e2:2a:e6:b0:1e:1e:7e:
                    78:08:ce:38:7d:5f:5e:da:61:fd:16:a3:66:cc:05:
                    c7:0c:cb:77:7c:b7:5d:3d:da:4b:d1:76:a1:3a:02:
                    be:9d:86:5a:c6:23:82:4d:0f:29:f9:2c:28:bf:af:
                    f0:8b:d6:96:85:44:60:f0:de:35:a7:a6:ed:54:d1:
                    9b:46:f8:5b:c0:a1:47:1b:1b:93:a3:b3:20:c3:80:
                    49:1f:9b:5b:33:0e:e2:67:8c:fa:3e:1b:79:7e:b5:
                    f9:bc:22:51:d2:28:b9:3a:db:e2:d1:ec:1e:ce:ee:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:FD:A8:17:B6:3B:5A:9E:11:BC:68:AC:62:8C:11:41:27:40:2E
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e302e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:73:52:a8:99:87:e8:f2:d7:d5:0d:79:dd:ec:9f:10:be:
         ae:0c:9d:7f:d9:50:bd:e6:a8:e4:fb:f3:d8:10:7b:71:a3:d9:
         8a:72:73:db:da:ff:d1:13:5c:79:41:72:df:17:af:39:42:e1:
         b7:61:45:16:d8:be:21:b9:5c:e4:84:a7:88:54:73:57:47:2c:
         50:70:bb:19:ed:d7:4c:12:19:78:43:b2:2f:6b:39:55:b7:18:
         77:62:8a:8e:a0:6d:98:67:91:1a:eb:8b:7d:de:51:70:5f:5e:
         e0:e1:aa:8d:11:ea:d0:a5:4f:9e:7d:17:c9:dc:ea:50:af:da:
         a4:63:89:40:c7:e7:f7:9c:d4:0e:33:77:9d:59:e2:44:65:ef:
         70:f6:84:92:ea:da:a8:76:b0:22:e9:b2:ce:bb:e0:b2:c4:13:
         71:49:0b:04:2b:98:70:c1:f5:ef:c3:e1:8f:1a:7d:b6:b5:34:
         34:ca:73:be:11:4e:e9:87:f3:20:43:98:9c:29:fd:d1:c2:bf:
         e4:df:2e:d2:70:4d:71:11:7f:d1:f5:19:3b:63:f5:e4:78:f1:
         55:8b:d3:a2:91:ed:7c:65:fe:4e:84:c9:93:79:59:96:28:cd:
         6e:39:cd:7d:f6:7b:c5:7b:f9:64:26:0d:9c:4c:c4:94:37:97:
         5d:30:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----