Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e203136363239.roa
File:                     3230312e3234362e302e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          U7DAHMpNPGwgt2UwA5981BEC5BBrs/NRZcsQmoUvjvI=
Subject key identifier:   C1:D5:04:F1:1A:CB:FC:9E:95:F2:CD:B4:F0:50:F3:C7:16:B3:A1:96
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       52E65EA1B7F4259116914D21B4A82C02542FAD15
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:11 +0000
ROA not before:           Tue 05 Mar 2024 17:47:11 +0000
ROA not after:            Tue 04 Mar 2025 17:52:11 +0000
asID:                     16629
IP address blocks:        201.246.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e6:5e:a1:b7:f4:25:91:16:91:4d:21:b4:a8:2c:02:54:2f:ad:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:11 2024 GMT
            Not After : Mar  4 17:52:11 2025 GMT
        Subject: CN=C1D504F11ACBFC9E95F2CDB4F050F3C716B3A196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:de:e4:27:63:e0:c9:51:ec:71:97:6c:6d:
                    97:bb:cf:50:ba:da:45:fd:c8:08:28:e8:d2:ec:11:
                    64:4b:16:77:08:57:40:88:30:43:09:fe:fb:8a:87:
                    d9:a5:41:5a:fd:99:fa:50:6b:cb:19:f0:c4:4d:4c:
                    49:c0:bf:47:a6:e5:42:8d:3c:02:57:55:11:ad:a4:
                    b8:81:86:3d:b2:04:cc:dd:0a:7a:4a:60:c5:0e:a7:
                    a5:82:c6:1a:29:8a:62:a4:f7:69:a4:ea:a8:b5:b1:
                    9a:ee:c4:09:33:3c:28:52:b8:43:d4:e1:cf:80:ec:
                    64:95:53:10:06:33:d3:ae:72:61:f0:da:91:0f:ca:
                    03:5d:b1:79:48:d2:54:0b:7a:3d:89:37:64:e4:be:
                    0e:07:bd:ee:81:a6:8f:e9:df:ee:b8:7e:71:19:e7:
                    ae:74:82:91:bf:0e:57:38:eb:e2:6d:47:fa:82:6c:
                    c2:db:c8:05:f8:fb:64:80:c9:0e:40:ac:79:e7:98:
                    8e:1d:c9:6f:6e:6e:98:02:01:45:f6:5a:37:09:33:
                    e3:89:c7:da:39:90:e2:21:5a:05:3a:03:44:fc:ef:
                    65:29:f7:18:ad:43:98:05:c9:22:ca:0d:19:48:e1:
                    12:b2:b2:67:19:b7:73:4d:69:29:15:70:2a:de:37:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:04:F1:1A:CB:FC:9E:95:F2:CD:B4:F0:50:F3:C7:16:B3:A1:96
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:d7:32:d2:cd:10:f7:70:cd:2b:f6:02:89:5b:c6:04:ae:
         fd:60:20:3b:e6:59:e0:48:28:8e:1f:00:31:5c:34:d5:78:1b:
         28:b0:20:12:c4:72:7b:03:cd:6e:dd:74:08:c2:03:87:6c:03:
         47:ed:dd:3e:0b:0d:19:a7:42:19:78:5e:83:23:6e:e9:58:bf:
         35:73:78:39:98:78:96:b0:b8:7b:76:3e:7b:27:9b:09:6c:07:
         e3:80:ce:79:79:50:b6:05:a0:c2:14:8c:96:8f:1a:b3:0b:25:
         55:a6:e2:c3:e2:86:b9:42:c8:f0:d1:70:0d:4d:c7:75:5a:98:
         39:a2:b9:93:0e:2c:db:34:03:cd:4c:89:9f:16:7d:8d:c0:f9:
         65:40:f7:6d:52:7b:d6:c6:a4:56:f6:e4:77:35:ac:e5:84:7d:
         7e:77:d4:2c:e9:cb:28:a5:f9:00:83:62:e4:a4:c6:00:e9:e4:
         fb:58:57:2b:f4:52:e7:3b:32:6e:e4:a4:24:cc:56:69:98:98:
         e3:22:a2:75:8a:17:ef:0d:95:d9:b7:50:0d:96:28:04:2b:ac:
         83:4e:e8:75:19:d9:0a:7b:37:3f:c8:d5:a9:29:0e:1d:17:2a:
         c7:88:80:ae:bb:d8:88:bc:48:34:f7:56:11:7d:99:b1:0a:1b:
         c3:7c:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----