Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa
File:                     3230302e3131322e36342e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          5UtiLls6JwKZKobfbvAE6K+RqqcslI0gI1438Tc+r3I=
Subject key identifier:   30:3A:1C:BC:AB:0E:EF:E3:BC:1E:A3:83:9C:25:5A:FE:55:28:85:70
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4399E2DDA20CD6B3BF2F3F6749788E220DFB8215
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:25 +0000
ROA not before:           Tue 05 Mar 2024 17:47:25 +0000
ROA not after:            Tue 04 Mar 2025 17:52:25 +0000
asID:                     7418
IP address blocks:        200.112.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:99:e2:dd:a2:0c:d6:b3:bf:2f:3f:67:49:78:8e:22:0d:fb:82:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:25 2024 GMT
            Not After : Mar  4 17:52:25 2025 GMT
        Subject: CN=303A1CBCAB0EEFE3BC1EA3839C255AFE55288570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:51:8e:7f:e8:48:11:4a:a2:9d:97:be:4a:
                    3c:26:42:40:9d:5f:b3:3c:99:ca:c7:02:13:28:19:
                    b7:59:6e:25:7a:9e:04:94:21:90:cb:18:c7:5b:16:
                    9c:5d:d5:62:9d:97:78:67:54:a0:89:83:60:77:4d:
                    b1:85:cc:98:f9:0d:c3:d7:c9:29:fb:4c:88:8a:70:
                    65:23:79:4d:c5:b8:4a:bb:a5:2f:fa:9f:2b:3c:8b:
                    66:ee:94:a1:d1:8f:94:50:89:33:70:57:fe:43:25:
                    f4:50:a9:74:8b:82:84:1d:bc:83:68:2e:f4:25:f1:
                    83:4d:da:ee:8f:34:09:92:4c:34:d6:16:04:96:66:
                    8b:19:11:0d:42:24:62:18:8b:bb:6f:89:d1:f7:45:
                    49:f5:4c:8f:98:a6:04:0a:09:89:9a:f3:fd:4f:c4:
                    e7:b9:9f:b4:c9:91:c7:bc:95:b0:8b:a7:8a:de:a6:
                    f1:59:80:2a:25:35:4a:7b:f6:bc:77:e6:e0:49:51:
                    32:44:91:4b:6a:83:e0:2c:36:79:f0:b6:c8:52:ac:
                    c2:f2:0d:7e:d8:d8:c0:1a:94:3f:a8:90:96:34:87:
                    ca:51:8d:49:c6:fa:62:88:ce:b4:97:7d:f1:3d:48:
                    c5:0b:76:ec:42:cf:63:03:06:e3:9e:bd:60:96:6e:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:1C:BC:AB:0E:EF:E3:BC:1E:A3:83:9C:25:5A:FE:55:28:85:70
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:fc:31:35:27:9f:72:3b:63:2d:ce:3f:b7:25:87:e8:e4:
         21:60:26:a2:91:ad:4f:db:73:1f:57:64:47:3e:74:66:fd:45:
         62:26:87:6a:9c:f6:ba:32:27:99:11:84:29:4a:1f:0d:10:d1:
         fc:97:9d:76:6e:ea:f1:01:d0:f1:66:30:ca:97:9d:37:2f:71:
         e9:1e:c0:bd:54:8c:f8:2e:7b:15:48:4a:3f:25:c3:53:81:9c:
         47:2b:0e:fb:7e:9f:fe:58:70:8a:ad:94:eb:6c:1f:36:15:f9:
         08:41:c7:41:ce:e8:b8:ed:0c:6a:38:e4:45:20:50:d9:34:e6:
         1c:ed:b3:eb:f1:16:2d:c0:88:98:88:c2:28:a5:56:d8:84:26:
         4a:5e:4f:d1:e5:40:f9:27:8c:b6:28:c5:48:d8:5e:9b:43:16:
         f5:35:42:a6:28:af:26:37:5d:7a:8c:6f:28:63:16:03:dd:12:
         c2:21:9c:73:7e:6f:1f:a5:a5:b1:e3:90:b8:b7:fc:f5:58:82:
         66:cd:dd:91:33:c3:4c:ae:bf:23:3c:4e:03:16:98:44:b4:be:
         cf:ec:35:ec:e5:a4:42:d3:c9:73:06:8f:58:96:5f:0f:46:37:
         34:4c:a7:3e:9d:af:6c:c3:80:dd:70:36:48:19:ec:b2:c7:36:
         02:a4:42:dd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQ5ni3aIM1rO/Lz9nSXiOIg37ghUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MjVaFw0yNTAzMDQxNzUyMjVaMDMxMTAvBgNV
BAMTKDMwM0ExQ0JDQUIwRUVGRTNCQzFFQTM4MzlDMjU1QUZFNTUyODg1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrFGOf+hIEUqinZe+SjwmQkCd
X7M8mcrHAhMoGbdZbiV6ngSUIZDLGMdbFpxd1WKdl3hnVKCJg2B3TbGFzJj5DcPX
ySn7TIiKcGUjeU3FuEq7pS/6nys8i2bulKHRj5RQiTNwV/5DJfRQqXSLgoQdvINo
LvQl8YNN2u6PNAmSTDTWFgSWZosZEQ1CJGIYi7tvidH3RUn1TI+YpgQKCYma8/1P
xOe5n7TJkce8lbCLp4repvFZgColNUp79rx35uBJUTJEkUtqg+AsNnnwtshSrMLy
DX7Y2MAalD+okJY0h8pRjUnG+mKIzrSXffE9SMULduxCz2MDBuOevWCWbm5lAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMDocvKsO7+O8HqODnCVa/lUohXAwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzEzMTMyMmUzNjM0MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzczNDMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbIcEAwDQYJ
KoZIhvcNAQELBQADggEBAD2V/DE1J59yO2Mtzj+3JYfo5CFgJqKRrU/bcx9XZEc+
dGb9RWImh2qc9royJ5kRhClKHw0Q0fyXnXZu6vEB0PFmMMqXnTcvcekewL1UjPgu
exVISj8lw1OBnEcrDvt+n/5YcIqtlOtsHzYV+QhBx0HO6LjtDGo45EUgUNk05hzt
s+vxFi3AiJiIwiilVtiEJkpeT9HlQPknjLYoxUjYXptDFvU1QqYoryY3XXqMbyhj
FgPdEsIhnHN+bx+lpbHjkLi3/PVYgmbN3ZEzw0yuvyM8TgMWmES0vs/sNezlpELT
yXMGj1iWXw9GNzRMpz6dr2zDgN1wNkgZ7LLHNgKkQt0=
-----END CERTIFICATE-----