Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa
File:                     3230302e32382e302e302f32302d3234203d3e2037303034.roa (raw, json)
Hash identifier:          Ic82RU0Iwu05xzOUiq460FyGD61BwLSniY4yBa2BSFM=
Subject key identifier:   68:E8:71:44:DC:CE:68:3E:CB:BA:F9:D3:A3:71:17:5E:11:F1:AC:98
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       31113526CB6C560537F2326EE5A3042C1F2952C4
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:52:25 +0000
ROA not before:           Tue 05 Mar 2024 17:47:25 +0000
ROA not after:            Tue 04 Mar 2025 17:52:25 +0000
asID:                     7004
IP address blocks:        200.28.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:11:35:26:cb:6c:56:05:37:f2:32:6e:e5:a3:04:2c:1f:29:52:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:25 2024 GMT
            Not After : Mar  4 17:52:25 2025 GMT
        Subject: CN=68E87144DCCE683ECBBAF9D3A371175E11F1AC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:af:6c:28:31:d1:ea:5a:55:c3:f7:3e:eb:
                    c1:f3:51:74:ca:a3:51:e6:1e:0c:11:6a:21:ff:69:
                    2b:ff:9e:ce:6f:c9:ee:f8:a7:07:db:92:8c:82:38:
                    89:89:c2:79:f9:3d:76:e1:39:00:24:17:40:7e:24:
                    94:a1:7d:2e:c5:3c:60:35:c0:9f:1e:89:c5:59:c3:
                    8d:de:86:c3:65:d7:d9:0c:72:1b:0e:6f:fc:95:8f:
                    e3:0b:84:5b:28:62:7b:e8:8c:b4:6e:71:45:5d:69:
                    cf:20:13:f3:e1:82:90:1c:b1:5d:b1:87:30:75:e0:
                    e8:7d:24:9c:fc:db:2d:48:7b:54:4e:a9:0c:c7:10:
                    3d:f1:0e:5b:91:5d:a6:b8:a5:9c:44:77:81:7d:c1:
                    9d:8f:53:14:4b:d6:9c:98:fa:aa:d7:97:92:11:a2:
                    88:ce:d4:c3:8b:a7:d7:8e:b1:55:6d:c5:68:e0:c9:
                    86:2d:ad:ec:bc:5e:39:25:2b:63:70:4d:8f:7a:30:
                    b8:a0:5f:af:d5:1c:a0:c9:41:2d:69:4b:27:4f:b7:
                    ba:82:fe:04:a0:39:29:b8:48:01:6f:27:a8:a2:75:
                    83:52:03:cb:c9:a2:66:e0:fa:63:42:7f:a5:70:26:
                    10:b0:36:d2:95:6e:d0:26:66:b4:0b:c4:12:d3:a8:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:71:44:DC:CE:68:3E:CB:BA:F9:D3:A3:71:17:5E:11:F1:AC:98
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e302e302f32302d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:90:05:ae:5c:97:66:69:13:66:71:07:c1:c3:b2:d3:a4:
         83:d3:f3:11:ca:78:6f:f7:82:70:4a:84:43:87:e8:0b:af:a8:
         25:bc:94:c6:1d:bc:15:74:b5:2f:07:35:87:e5:44:82:3b:71:
         2b:3a:10:9b:62:25:5a:20:37:dd:14:5c:32:48:9b:2f:fd:9e:
         8f:c3:65:90:24:6f:83:3d:99:5b:41:e7:90:28:e5:ed:20:23:
         0c:26:a8:c5:6b:58:dd:d7:a4:a7:b6:dc:9c:a9:5f:e8:4b:14:
         91:85:a4:6c:76:e2:16:aa:1e:99:7f:94:70:b9:d8:61:58:44:
         2d:4e:d6:09:f8:ec:09:7a:db:93:8a:92:e8:89:21:92:5a:4d:
         62:51:f2:66:84:15:c7:36:1a:c7:34:e8:c5:df:d4:1f:06:ac:
         d7:ef:d8:c0:e4:5a:91:7e:26:76:c2:d2:6d:29:3f:95:a1:18:
         62:6e:96:2f:15:f3:69:46:c5:72:a2:ce:08:07:84:21:90:4d:
         f8:48:85:c3:30:e0:84:3e:67:07:5a:71:88:e7:f7:8a:be:f2:
         e8:63:fc:40:dd:af:53:a0:e6:68:11:3f:61:d0:ca:c4:be:2b:
         e4:cd:6e:b1:bb:61:2c:04:ab:bb:9c:02:a7:6c:e9:58:17:6c:
         f7:9b:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----