Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34382e302f32302d3234203d3e203136363239.roa
File:                     3230302e32392e34382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          RYWUpCe4TH+csgojfbh5wuziIFmA0p1PSdJBqWTp+jY=
Subject key identifier:   6B:76:52:AE:88:D1:C9:EB:0D:2C:EA:4F:BD:30:EE:FF:20:36:DB:9F
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       20FBD3B614DB10D3796CCF2B21F259449B9ECC
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:14 +0000
ROA not before:           Tue 05 Mar 2024 17:47:14 +0000
ROA not after:            Tue 04 Mar 2025 17:52:14 +0000
asID:                     16629
IP address blocks:        200.29.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:d3:b6:14:db:10:d3:79:6c:cf:2b:21:f2:59:44:9b:9e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:14 2024 GMT
            Not After : Mar  4 17:52:14 2025 GMT
        Subject: CN=6B7652AE88D1C9EB0D2CEA4FBD30EEFF2036DB9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:1e:c8:90:47:81:03:92:29:60:79:c4:74:
                    17:82:00:5d:15:ce:e1:0b:53:95:fe:c2:6b:43:f1:
                    34:aa:06:9c:4c:57:cb:69:b0:63:1e:99:fa:89:89:
                    f3:af:b8:ae:5d:b1:63:9f:12:82:67:c9:4e:0c:97:
                    46:f6:8d:dd:61:54:e3:ab:77:0d:a0:df:d0:be:3e:
                    bd:4d:11:76:5e:12:ab:61:93:c7:40:ab:13:85:37:
                    16:fb:a7:f3:c2:81:b3:38:e9:43:86:65:a9:e5:dd:
                    ea:fa:7a:0c:b8:62:78:ec:09:66:a7:3d:0e:47:98:
                    5e:c3:33:7b:15:3e:76:46:f0:19:c6:09:c1:62:55:
                    64:72:3c:47:9b:2c:57:62:14:66:9d:74:f5:a6:e8:
                    46:09:68:21:5d:66:29:63:4d:d0:8d:8b:50:09:51:
                    69:30:9b:f6:3e:18:2d:86:51:f2:1e:1a:1d:6b:67:
                    fb:4a:d9:b5:e0:ff:e7:8b:c7:8b:ef:be:f8:3c:41:
                    b2:d5:b5:36:cd:67:5c:a4:fa:17:29:6b:05:c7:43:
                    d0:22:e0:a4:cf:c0:4c:98:2a:7c:d0:50:e0:0c:9c:
                    96:d9:ef:58:97:86:00:e7:a7:89:fc:92:15:1c:ef:
                    23:c1:0e:bc:11:d8:a4:fd:76:c8:66:fa:26:b4:13:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:52:AE:88:D1:C9:EB:0D:2C:EA:4F:BD:30:EE:FF:20:36:DB:9F
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e34382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:d6:d8:25:c3:ca:af:ea:e5:3a:83:42:8a:08:f0:1c:1e:
         18:b6:9a:45:90:cb:e4:d4:e5:4d:6b:38:cb:11:10:67:4f:b7:
         4f:05:a0:4e:31:b5:23:e2:2c:ae:8d:1d:b2:1c:8a:f5:e0:f4:
         a0:0c:38:7e:98:c4:b9:48:c5:bc:03:05:58:0b:6d:91:68:c0:
         ad:ea:b2:93:ac:aa:ca:15:03:dd:1c:6d:44:91:71:72:58:07:
         24:62:da:67:c8:65:da:a4:f0:3e:8e:e9:84:b7:2e:bd:57:e8:
         ea:7b:5d:68:95:c9:47:6b:7b:8e:13:0d:17:1b:d7:15:a9:c5:
         72:55:0d:ef:8b:b0:74:37:4f:02:9c:14:9f:8e:07:9c:c0:8b:
         be:51:70:bc:60:4b:36:1b:ad:88:ac:65:17:7e:40:67:37:93:
         88:5b:a3:2c:78:a2:c4:0e:ba:bf:5a:92:4d:65:23:e1:81:20:
         a5:85:cf:27:a0:8b:71:01:af:80:82:e4:82:ea:d2:ad:09:d7:
         e1:63:e2:e8:1b:5a:ef:22:7d:e2:0f:64:59:35:ce:82:04:46:
         ce:f8:fe:93:d5:6a:49:48:3f:2d:0b:16:02:29:f8:b3:88:21:
         09:b9:93:c5:19:2f:c2:52:a1:69:03:dc:7c:05:2f:9e:10:20:
         fa:20:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----