Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa
File:                     3230302e37362e3132382e302f31382d3234203d3e2036353033.roa (raw, json)
Hash identifier:          KMgLq/XQLJPpUZY9CH3b0KER4xFHnXxJICBfCBmoO80=
Subject key identifier:   9C:92:63:D6:27:2A:81:C9:70:0D:01:C4:BB:2D:64:33:81:65:FD:48
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       5FA7410DC0E3C9306A46896DFD7E67583E63A1AB
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:54:30 +0000
ROA not before:           Tue 05 Mar 2024 17:49:30 +0000
ROA not after:            Tue 04 Mar 2025 17:54:30 +0000
asID:                     6503
IP address blocks:        200.76.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:41:0d:c0:e3:c9:30:6a:46:89:6d:fd:7e:67:58:3e:63:a1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:30 2024 GMT
            Not After : Mar  4 17:54:30 2025 GMT
        Subject: CN=9C9263D6272A81C9700D01C4BB2D64338165FD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:36:a8:d0:9c:cc:cf:6d:e1:29:35:a6:88:
                    ae:fa:56:c7:d3:45:f2:a7:7e:21:86:ce:a2:50:17:
                    5a:cb:ca:20:7e:e9:62:8c:0c:b8:64:51:92:49:a2:
                    54:2f:8d:64:31:cf:f9:66:32:5b:26:da:d6:60:83:
                    f5:cb:99:14:7d:38:d0:d3:d3:74:fa:0b:61:f6:c2:
                    09:87:65:a9:c6:ec:82:0a:23:23:b9:9b:11:2e:d9:
                    55:ee:6d:8f:c6:47:42:df:56:56:51:6e:16:60:42:
                    e1:79:60:a9:61:b6:d1:b0:60:1a:21:1c:20:e4:10:
                    83:45:c9:84:09:ec:45:fc:79:60:74:bf:94:70:7f:
                    99:8d:1c:91:72:59:dd:0e:0d:77:26:fb:c7:14:d6:
                    a2:8a:08:e7:40:bc:c3:5d:20:cf:4f:26:36:b7:ea:
                    51:27:bf:57:40:f1:eb:c2:34:a4:89:7d:9e:02:d9:
                    d0:2a:03:f8:fe:60:1d:c8:ae:51:82:ab:f2:29:40:
                    8f:03:d6:eb:1b:bb:25:22:b4:fa:91:9f:48:22:59:
                    3b:70:0d:19:d4:ac:8f:9e:5b:c3:ee:9e:f4:27:8e:
                    eb:97:3a:6f:70:d1:1a:b0:e0:ca:c0:02:ce:0d:5b:
                    8c:6c:da:14:83:ab:c6:f3:cd:be:db:c0:73:a3:0c:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:63:D6:27:2A:81:C9:70:0D:01:C4:BB:2D:64:33:81:65:FD:48
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:50:50:ab:de:2b:02:4c:c6:fa:a3:df:24:3b:67:e0:31:40:
         01:a0:73:1b:88:9e:d9:c0:9d:73:a9:d9:5c:a6:32:fd:25:20:
         d4:db:63:e5:a2:eb:16:40:5c:de:b5:ad:15:20:62:6e:be:4f:
         74:c3:f3:81:cb:b8:b3:3f:a5:41:fb:da:da:19:d1:33:bf:76:
         b6:5d:3a:23:77:60:3a:3e:64:20:11:ca:17:19:d5:af:6c:a1:
         b1:e4:7b:75:3e:d0:9a:46:ee:78:b2:24:07:99:36:dd:10:04:
         07:e0:e8:e3:4e:f3:b8:4d:bc:0a:03:76:06:2d:a8:47:19:2c:
         17:b6:76:72:40:89:8a:9f:bb:cd:8c:0d:24:2e:00:f9:79:45:
         18:6e:6c:b2:04:a6:a1:7b:c3:fc:e9:54:6e:77:42:a1:4d:3b:
         4a:ee:c7:dc:cc:94:5f:e9:14:dd:0f:cb:02:82:93:97:a8:00:
         8d:83:33:c4:ab:f4:19:d0:51:9f:e4:65:91:6f:a4:83:99:c3:
         2a:21:6e:43:e9:a0:0d:c9:ed:e7:fe:7e:59:48:86:2e:e3:1f:
         ca:af:46:48:16:96:d0:95:b1:f4:ca:e4:2b:26:4f:b5:e7:5a:
         a5:a1:0f:b1:b1:10:38:94:00:33:38:a4:86:66:a4:69:71:a9:
         1b:6e:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----