Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa
File:                     3230302e31362e39302e302f32332d3234203d3e20323632313738.roa (raw, json)
Hash identifier:          4kr6l/lRyoIp4qz5aUzJ29I+yzh82ClK83t/K3SpdNg=
Subject key identifier:   CE:71:84:16:C9:89:A5:8D:7F:FF:E6:42:97:C5:48:99:AF:B4:7B:AA
Certificate issuer:       /CN=C9AE029974BF7364D796B09E2D313FA4128E1865
Certificate serial:       49AB9E8497C41547FC88FFE4F10069844E5E71DE
Authority key identifier: C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa
Signing time:             Tue 05 Mar 2024 17:48:43 +0000
ROA not before:           Tue 05 Mar 2024 17:43:43 +0000
ROA not after:            Tue 04 Mar 2025 17:48:43 +0000
asID:                     262178
IP address blocks:        200.16.90.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ab:9e:84:97:c4:15:47:fc:88:ff:e4:f1:00:69:84:4e:5e:71:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AE029974BF7364D796B09E2D313FA4128E1865
        Validity
            Not Before: Mar  5 17:43:43 2024 GMT
            Not After : Mar  4 17:48:43 2025 GMT
        Subject: CN=CE718416C989A58D7FFFE64297C54899AFB47BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:9b:7f:46:63:76:e0:ec:c9:99:6b:da:18:
                    53:af:e0:21:3f:eb:46:1e:65:f1:8e:d4:d3:bf:5d:
                    39:8c:24:6a:5c:32:00:5e:1a:9e:15:13:b4:4b:63:
                    25:6e:9a:d6:f2:44:77:0c:49:fc:cb:75:49:90:6e:
                    e8:98:d0:4d:a0:71:2b:bc:9c:82:bf:03:b4:d5:b8:
                    d0:00:8e:f6:78:dc:0a:02:8a:58:4d:93:d5:d0:eb:
                    1d:95:1f:d4:e2:ac:9a:5d:36:64:d7:a4:47:82:35:
                    32:74:80:2f:27:c2:f2:8e:f2:b2:c4:33:7e:4c:23:
                    a4:d1:63:33:2c:59:c8:99:52:92:ee:fe:57:81:0e:
                    26:26:98:3f:8a:25:1f:8a:f1:41:8c:79:7e:b6:f4:
                    19:76:50:12:81:66:ba:b8:17:56:c6:cd:9f:c6:65:
                    b5:6f:ea:fb:f6:3f:76:96:5b:30:43:0d:e5:e9:3e:
                    78:50:35:28:dc:8b:0c:03:5b:70:c5:58:4e:e5:4f:
                    95:9b:60:ad:6b:91:40:e9:a6:fe:e9:ec:96:b7:73:
                    90:d8:38:de:bf:ef:ea:b3:c0:aa:50:4c:b5:64:4f:
                    59:ee:43:a7:e7:f5:5d:e6:ca:2c:b3:2d:69:1a:78:
                    db:4a:fd:5c:31:96:1e:a2:d9:8f:85:22:25:00:d3:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:71:84:16:C9:89:A5:8D:7F:FF:E6:42:97:C5:48:99:AF:B4:7B:AA
            X509v3 Authority Key Identifier:
                keyid:C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3230302e31362e39302e302f32332d3234203d3e20323632313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:52:3b:25:d9:dc:62:37:f5:4e:9d:92:b5:4b:1f:c7:72:
         99:28:ff:e7:94:f0:3f:03:76:00:4e:72:aa:59:c4:ef:d7:b4:
         a5:a5:b6:6f:a9:ea:aa:7d:f2:f9:6c:86:6d:87:e6:5e:88:f1:
         b8:58:e2:2b:ca:11:3e:2e:29:32:49:c5:2c:d9:39:28:4e:82:
         e9:a8:3f:7a:b7:cd:51:82:22:2f:96:23:c6:73:40:bb:d6:fa:
         ff:6b:37:d1:9f:16:82:8b:9c:d5:fa:3e:61:bd:2c:0b:ec:79:
         e1:cf:11:fa:79:2f:f8:97:1d:ec:a5:bb:ff:3f:d4:fb:be:87:
         aa:62:e6:4d:a1:02:f7:ef:b6:fc:3b:f6:7e:48:3c:a9:ff:2c:
         fc:c5:d5:c2:e1:1a:bc:32:d3:fe:68:47:12:f8:94:f9:8c:9f:
         fe:ee:0e:60:de:af:26:fe:fa:e4:7d:93:c9:53:3a:7a:d6:fc:
         33:70:78:eb:0e:88:ea:22:f6:cb:3b:ae:06:1c:ca:a3:46:af:
         33:3e:d7:43:82:1c:54:a1:d5:ac:72:50:f0:df:b7:99:0f:a9:
         c0:a7:d7:07:95:b1:f8:38:73:1e:10:7a:2b:80:68:c5:ba:31:
         16:ae:32:b9:73:60:c4:22:01:31:5c:5a:28:b5:73:4b:77:2b:
         9c:e7:22:df
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSauehJfEFUf8iP/k8QBphE5ecd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBRTAyOTk3NEJGNzM2NEQ3OTZCMDlFMkQzMTNGQTQx
MjhFMTg2NTAeFw0yNDAzMDUxNzQzNDNaFw0yNTAzMDQxNzQ4NDNaMDMxMTAvBgNV
BAMTKENFNzE4NDE2Qzk4OUE1OEQ3RkZGRTY0Mjk3QzU0ODk5QUZCNDdCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkJt/RmN24OzJmWvaGFOv4CE/
60YeZfGO1NO/XTmMJGpcMgBeGp4VE7RLYyVumtbyRHcMSfzLdUmQbuiY0E2gcSu8
nIK/A7TVuNAAjvZ43AoCilhNk9XQ6x2VH9TirJpdNmTXpEeCNTJ0gC8nwvKO8rLE
M35MI6TRYzMsWciZUpLu/leBDiYmmD+KJR+K8UGMeX629Bl2UBKBZrq4F1bGzZ/G
ZbVv6vv2P3aWWzBDDeXpPnhQNSjciwwDW3DFWE7lT5WbYK1rkUDppv7p7Ja3c5DY
ON6/7+qzwKpQTLVkT1nuQ6fn9V3myiyzLWkaeNtK/Vwxlh6i2Y+FIiUA05k7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUznGEFsmJpY1//+ZCl8VIma+0e6owHwYDVR0j
BBgwFoAUya4CmXS/c2TXlrCeLTE/pBKOGGUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FREE3M0U5QjQwQkQ0Q0I1QUQ4OUFBMTUxNkExNDJERDQ5
MTIxNjBBNkQzNkFDOUQzRkYxMDRGQUY2NjE4MDg5LzAvQzlBRTAyOTk3NEJGNzM2
NEQ3OTZCMDlFMkQzMTNGQTQxMjhFMTg2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOUFFMDI5OTc0QkY3MzY0RDc5
NkIwOUUyRDMxM0ZBNDEyOEUxODY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRURBNzNFOUI0MEJENENCNUFEODlBQTE1MTZBMTQyREQ0OTEyMTYwQTZE
MzZBQzlEM0ZGMTA0RkFGNjYxODA4OS8wLzMyMzAzMDJlMzEzNjJlMzkzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgQWjAN
BgkqhkiG9w0BAQsFAAOCAQEADstSOyXZ3GI39U6dkrVLH8dymSj/55TwPwN2AE5y
qlnE79e0paW2b6nqqn3y+WyGbYfmXojxuFjiK8oRPi4pMknFLNk5KE6C6ag/erfN
UYIiL5YjxnNAu9b6/2s30Z8Wgouc1fo+Yb0sC+x54c8R+nkv+Jcd7KW7/z/U+76H
qmLmTaEC9++2/Dv2fkg8qf8s/MXVwuEavDLT/mhHEviU+Yyf/u4OYN6vJv765H2T
yVM6etb8M3B46w6I6iL2yzuuBhzKo0avMz7XQ4IcVKHVrHJQ8N+3mQ+pwKfXB5Wx
+DhzHhB6K4BoxboxFq4yuXNgxCIBMVxaKLVzS3crnOci3w==
-----END CERTIFICATE-----