Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa
File:                     3230302e32382e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          KfPFl4+PHt6ZddWWimgtYWpFHhpH9H8cATP9wkiaAj0=
Subject key identifier:   E0:84:80:E0:C8:FE:3F:DB:94:26:EC:4D:37:82:61:4E:64:32:FA:5A
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       0212CCF26A17E9CF0F993A4FE5DBCAC915D0E015
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:22 +0000
ROA not before:           Tue 05 Mar 2024 17:47:22 +0000
ROA not after:            Tue 04 Mar 2025 17:52:22 +0000
asID:                     16629
IP address blocks:        200.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:12:cc:f2:6a:17:e9:cf:0f:99:3a:4f:e5:db:ca:c9:15:d0:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:22 2024 GMT
            Not After : Mar  4 17:52:22 2025 GMT
        Subject: CN=E08480E0C8FE3FDB9426EC4D3782614E6432FA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:59:d1:9f:d9:7d:e8:bc:00:f1:f2:01:45:df:
                    31:3c:69:d8:c2:7a:c4:de:b1:7b:b3:4b:16:01:ee:
                    2e:29:60:aa:85:90:2a:15:b9:c7:47:e4:3f:a3:cc:
                    de:c1:88:65:2f:e2:65:c7:58:d6:1b:09:c8:c5:d4:
                    25:f9:5c:64:28:cf:fe:f8:85:15:e4:94:37:02:b2:
                    78:c6:6b:31:a7:d0:be:47:67:56:55:55:65:32:16:
                    33:71:3b:dc:5b:6b:75:d0:80:a6:83:e7:e8:b0:0d:
                    96:e5:9d:3a:a2:93:20:c8:d5:d1:55:45:28:26:82:
                    8b:ee:c3:b9:61:0b:b7:b5:ae:6b:41:88:46:a9:dc:
                    d0:c4:a8:15:5f:09:e3:09:6f:77:59:68:26:2c:77:
                    3f:b4:57:bd:8d:cb:cb:26:db:f3:70:cf:96:39:88:
                    cd:23:7a:5a:2a:6c:37:5d:a1:48:fe:88:5e:43:93:
                    cc:fb:66:9f:a8:d3:3c:fd:0b:05:f5:7d:a9:22:37:
                    18:0b:1a:01:b2:74:a9:54:32:7e:4c:5a:5c:3a:a9:
                    ab:e7:49:b4:84:d8:69:d4:0d:be:2a:8b:f1:75:78:
                    12:c5:d2:ea:b9:13:ff:77:cc:e5:a0:da:e6:44:01:
                    33:90:98:c1:37:ff:0c:b7:49:48:ba:a0:12:7e:b0:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:84:80:E0:C8:FE:3F:DB:94:26:EC:4D:37:82:61:4E:64:32:FA:5A
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:71:94:1b:f5:39:c5:eb:75:e6:4d:b3:58:cd:8a:24:aa:
         f2:9a:ce:30:ff:34:eb:1e:4f:00:94:af:c1:00:e7:56:96:ab:
         11:8a:9c:15:8b:0b:45:30:ad:f9:80:50:ec:9a:d2:ad:26:97:
         64:ee:b5:88:4b:09:1f:c7:95:7f:33:ff:5e:02:52:3d:29:b9:
         83:b5:8c:db:11:8f:72:34:7a:1b:0b:e6:58:11:f2:75:3c:23:
         9b:b6:4f:9c:3c:ad:d9:7a:05:b5:1b:76:f3:11:d2:a7:c8:38:
         65:98:eb:37:bd:f0:f9:93:f0:87:ed:4d:06:55:8d:29:81:3c:
         aa:2b:a8:0b:55:16:42:3b:ac:7c:fa:4d:38:78:4c:48:23:b0:
         62:6e:6c:46:51:da:2a:8b:6c:4b:94:5e:08:37:7e:6f:7b:e7:
         dd:7e:b9:1f:84:20:a2:b6:15:2e:0c:a8:5e:b9:91:75:3d:c0:
         78:4f:29:74:b1:c5:9a:46:38:fc:3c:69:f8:5b:b3:e1:f8:da:
         81:47:db:8f:84:9e:29:90:b0:71:0c:29:d2:4b:58:b6:d2:c4:
         3d:e2:99:06:82:4d:04:df:e1:d6:1b:79:4d:26:d1:3c:68:7e:
         5a:fc:cd:05:53:90:1f:f4:44:f3:c7:da:66:61:ef:aa:1c:18:
         f7:70:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----