Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32332d3234203d3e20323635383734.roa
File:                     34352e3232362e3137322e302f32332d3234203d3e20323635383734.roa (raw, json)
Hash identifier:          fDIIP1EHpo7mS+QKV2uGQGQ4erCkveYjJf867/aBsCs=
Subject key identifier:   FF:83:3D:8C:15:64:20:18:74:18:AE:80:F2:CF:12:6E:EE:71:6A:C4
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       31BDD805251D730E7BE3E2869A593161D064E735
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32332d3234203d3e20323635383734.roa
Signing time:             Tue 05 Mar 2024 17:45:18 +0000
ROA not before:           Tue 05 Mar 2024 17:40:18 +0000
ROA not after:            Tue 04 Mar 2025 17:45:18 +0000
asID:                     265874
IP address blocks:        45.226.172.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:d8:05:25:1d:73:0e:7b:e3:e2:86:9a:59:31:61:d0:64:e7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Mar  5 17:40:18 2024 GMT
            Not After : Mar  4 17:45:18 2025 GMT
        Subject: CN=FF833D8C156420187418AE80F2CF126EEE716AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:14:f9:af:50:9d:7c:c8:bc:56:ba:22:73:
                    a4:bd:f5:e5:45:5e:bd:1b:5b:7d:3c:f5:5e:66:54:
                    68:ee:14:49:a4:3d:d9:71:99:24:da:34:bc:4a:88:
                    e8:e3:a1:4d:47:39:30:54:98:bf:f8:c7:6d:09:21:
                    fe:ac:cd:37:ee:f8:65:bc:24:d5:eb:bf:12:1d:1e:
                    d9:c1:0e:5c:8f:ac:85:57:08:ec:4b:4c:8f:61:63:
                    41:79:2e:f7:80:a1:61:6e:d4:da:58:f3:db:0b:ed:
                    fb:28:22:bd:e9:3c:af:03:4b:cd:04:1b:35:79:bf:
                    ae:84:fb:55:97:8e:fd:1e:c1:ef:0b:c1:bd:92:f5:
                    6f:e2:04:71:c5:18:ab:08:58:7e:12:f8:cc:76:23:
                    e3:c9:33:8d:2a:2e:d3:f0:39:71:6c:75:88:7a:62:
                    7b:d1:d9:d4:fb:09:e6:a1:ac:25:d1:f3:0a:97:d0:
                    96:ff:81:a3:bb:78:4d:52:eb:81:4b:af:09:b9:23:
                    3a:c1:30:95:da:2b:32:58:69:9c:2b:42:e7:70:93:
                    a4:48:48:c5:4b:36:ee:3b:95:a8:b7:94:e7:13:7b:
                    3c:87:95:85:0a:46:8f:5a:5a:07:0d:f9:86:96:5d:
                    11:0a:d8:bf:23:bb:dd:1b:30:11:9a:1e:14:24:81:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:3D:8C:15:64:20:18:74:18:AE:80:F2:CF:12:6E:EE:71:6A:C4
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32332d3234203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:29:e2:27:aa:a0:22:bf:58:ad:db:dc:0c:b3:3d:c5:2b:c6:
         22:77:17:a5:fc:71:d2:f4:fe:58:56:78:1a:d3:8e:98:6e:f7:
         e3:4f:50:b6:0c:18:d4:cc:37:bf:2b:9e:67:a1:87:6c:38:1d:
         2c:1a:ab:cc:8a:59:3a:3c:ff:53:84:6e:cf:3c:79:ef:9c:35:
         dc:82:a6:fa:ea:0c:fd:ba:42:90:6f:44:a5:24:8e:7f:5b:6c:
         68:5c:79:42:dc:1c:c4:20:e8:bd:17:fd:2b:4e:cc:44:cb:26:
         cd:3e:32:9a:fa:66:e1:78:2f:ec:e6:9d:7b:64:a2:d6:cc:70:
         b3:b9:d1:05:97:80:63:fb:a3:3e:22:8b:93:7d:f5:c7:d3:99:
         f1:ac:d0:be:e6:c2:83:fd:59:a6:6c:f2:d8:52:b9:73:fc:17:
         80:f9:f9:c3:42:48:af:8f:fe:82:11:0d:a7:2b:58:b2:67:7a:
         17:77:ca:69:10:3c:58:0d:b9:f2:72:ad:f2:d6:9a:bc:48:cb:
         d5:b2:3c:31:a7:42:51:4b:94:06:60:6b:e2:c8:95:cd:d7:6b:
         0e:89:a7:4f:32:32:c8:71:0d:97:42:ce:66:f8:69:4c:5d:f6:
         6f:80:03:09:55:31:40:0d:87:53:69:ca:c1:55:47:f4:c1:12:
         69:f5:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----