Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa
File:                     3230302e33312e36342e302f31392d3234203d3e203237393735.roa (raw, json)
Hash identifier:          kS8i0xaRH41F+wP1d/GafIG0zKwnol8s6Bw4TwjXpV4=
Subject key identifier:   50:78:E7:01:CC:50:61:EB:40:6E:54:F9:8F:7E:43:19:99:31:7C:BF
Certificate issuer:       /CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
Certificate serial:       485F32BA4F3B96D37EFAC56C587C0E4342E6AB50
Authority key identifier: 5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa
Signing time:             Tue 05 Mar 2024 17:43:23 +0000
ROA not before:           Tue 05 Mar 2024 17:38:23 +0000
ROA not after:            Tue 04 Mar 2025 17:43:23 +0000
asID:                     27975
IP address blocks:        200.31.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5f:32:ba:4f:3b:96:d3:7e:fa:c5:6c:58:7c:0e:43:42:e6:ab:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D0024A900025CCFA9CAF531A9C96683C1BA2338
        Validity
            Not Before: Mar  5 17:38:23 2024 GMT
            Not After : Mar  4 17:43:23 2025 GMT
        Subject: CN=5078E701CC5061EB406E54F98F7E431999317CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:19:bb:89:ce:3c:6e:f1:a7:11:d5:6b:8e:
                    b2:3b:fc:1c:6a:8d:0b:79:7b:79:c3:f2:7c:04:3f:
                    0e:5d:86:a7:df:b2:4d:75:28:14:ee:b4:98:16:d0:
                    33:b4:83:a1:a1:29:72:10:41:e2:f4:bf:95:3d:07:
                    28:b3:4f:4c:f9:fe:36:a8:21:89:70:61:6d:ec:ea:
                    23:ad:b6:66:a8:82:fb:fa:28:71:1d:8a:2d:2c:04:
                    c6:27:3f:7e:3b:20:5b:77:7f:a9:69:b7:db:d6:fa:
                    67:87:66:6b:7e:a6:48:7f:b6:66:e3:63:b4:05:1e:
                    ef:15:ab:b7:bd:a6:b0:bd:de:b6:52:5b:c9:f9:09:
                    f2:1f:6e:69:81:cf:a1:16:88:0c:0e:6b:5f:48:8d:
                    f4:0c:0d:e0:1e:1d:d5:09:6f:c7:8d:7b:3f:3b:67:
                    8d:fc:90:fb:c1:b5:66:02:98:2f:6a:9c:62:25:ec:
                    8e:c9:ea:15:95:b3:da:de:56:8f:b9:f6:ee:08:dd:
                    fc:2b:90:cf:ed:62:08:3e:80:eb:a2:10:cb:5a:8b:
                    ec:02:57:85:9a:a1:24:e3:58:58:8e:6b:16:f3:78:
                    c6:dd:e0:a4:2d:2c:02:ce:fc:21:ca:1b:13:e4:33:
                    5d:f3:01:ae:37:d5:1b:69:35:8c:ff:ea:f1:c2:19:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:E7:01:CC:50:61:EB:40:6E:54:F9:8F:7E:43:19:99:31:7C:BF
            X509v3 Authority Key Identifier:
                keyid:5D:00:24:A9:00:02:5C:CF:A9:CA:F5:31:A9:C9:66:83:C1:BA:23:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D0024A900025CCFA9CAF531A9C96683C1BA2338.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E01981304F4D264211E0668ECB22A5B759ABB7E0BB1E0B93DBF25FA2530A0822/0/3230302e33312e36342e302f31392d3234203d3e203237393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:de:45:91:93:64:9f:07:db:84:f5:8c:6c:f7:bb:cf:13:4e:
         56:14:f2:29:91:a3:ce:19:e0:38:5f:12:2a:75:37:bb:a8:59:
         eb:37:4c:02:c2:47:37:4c:0d:ac:5e:12:7a:86:3e:88:f8:d0:
         d1:b5:f7:bc:b1:ff:9f:78:22:75:c7:de:ca:19:ae:68:99:7d:
         1a:69:43:2f:98:ae:8f:0d:a9:2b:f7:a6:77:20:aa:ee:c8:b1:
         30:c8:54:dc:dc:6c:ed:f2:c8:e3:5e:f4:17:ea:67:36:f7:47:
         dd:3c:5f:bf:ef:ff:1c:97:d8:93:57:08:1d:f8:a5:cf:2d:95:
         f7:ce:98:9b:8d:fc:d0:ca:66:a4:fd:ad:68:46:8f:13:a8:c3:
         c3:cc:a3:01:5b:6c:e3:29:4b:58:9d:70:ee:87:21:89:68:5c:
         d6:38:67:c8:ae:5e:52:25:75:db:c8:6a:41:17:43:c9:e3:83:
         2f:77:64:8c:4e:33:65:d4:86:ea:a7:68:56:6e:66:33:25:2d:
         e2:1d:c0:41:c3:ab:06:72:83:df:5e:66:90:d6:09:df:86:cf:
         88:66:14:58:40:c3:62:99:e3:ae:ee:d4:8f:45:2b:3d:9d:cf:
         ab:54:97:3f:c9:04:c3:6c:b3:ba:69:a6:02:c0:43:ae:ac:3a:
         79:01:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----