Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3234203d3e20323635373335.roa
File:                     34352e372e3233362e302f32322d3234203d3e20323635373335.roa (raw, json)
Hash identifier:          jOyu7X4Cl/FT6VuSkwOeuOXLRYgoF2x3Datp+YOSEYI=
Subject key identifier:   12:3A:A6:BF:CF:1C:7E:72:5F:B3:1A:FE:90:5E:14:E4:65:35:C4:64
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       5DD01D0B0289E9358D50370886DBB9E82840628C
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3234203d3e20323635373335.roa
Signing time:             Wed 14 Aug 2024 18:30:00 +0000
ROA not before:           Wed 14 Aug 2024 18:25:00 +0000
ROA not after:            Wed 13 Aug 2025 18:30:00 +0000
asID:                     265735
IP address blocks:        45.7.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:1d:0b:02:89:e9:35:8d:50:37:08:86:db:b9:e8:28:40:62:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Aug 14 18:25:00 2024 GMT
            Not After : Aug 13 18:30:00 2025 GMT
        Subject: CN=123AA6BFCF1C7E725FB31AFE905E14E46535C464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:a3:ed:0c:ae:57:cb:bc:47:bb:13:5b:4a:
                    14:c5:60:64:d6:4c:10:eb:35:a5:bf:35:5f:5f:ca:
                    39:1c:59:52:51:1d:8b:59:21:d8:fb:ce:71:ff:7a:
                    8a:4a:8b:9c:d2:64:72:3e:7f:df:4a:3e:a9:33:e9:
                    63:dc:02:2b:37:21:61:bb:e8:67:21:af:30:d3:d6:
                    62:6a:e7:40:1a:0e:fd:39:34:7c:4d:9a:02:e0:2a:
                    74:4f:26:57:ff:6d:78:7c:7e:cb:9b:59:a3:19:42:
                    fe:12:d1:e7:25:8e:71:fb:a8:65:ff:dd:cb:18:e0:
                    5a:cc:e9:ce:41:13:04:03:1c:a6:0c:c5:e4:b7:0b:
                    53:4e:f1:86:b6:c7:0f:d3:cc:a6:06:bd:ff:fe:a2:
                    c9:fa:a3:0e:ca:5b:8f:ad:10:2d:66:a6:9b:32:7b:
                    cf:2a:c2:f4:7e:c4:42:9a:f8:79:c0:0b:d4:8c:ba:
                    65:ed:91:95:e7:1a:58:d7:cc:4c:3c:68:c6:05:e9:
                    79:df:a0:e4:11:e1:29:b5:c5:fd:97:88:05:2f:22:
                    02:60:6b:9a:97:17:bc:5b:8c:e1:3e:a3:00:50:b5:
                    25:1d:9b:31:28:1b:88:7b:d1:e2:ce:41:da:54:0f:
                    e7:a9:48:1a:c5:5d:85:b1:ef:09:f6:8a:df:81:b5:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:A6:BF:CF:1C:7E:72:5F:B3:1A:FE:90:5E:14:E4:65:35:C4:64
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233362e302f32322d3234203d3e20323635373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:c2:63:dc:67:df:c5:5d:78:f1:66:67:1a:78:c7:aa:22:
         a5:55:08:b5:50:db:c7:52:81:14:df:2a:5f:65:a6:64:9d:b5:
         dd:f7:04:e8:13:64:fa:27:ba:10:69:91:f4:5f:9e:e1:10:5d:
         ff:f7:f4:28:0c:5d:9b:5e:83:23:5a:3c:7d:1f:ec:0a:2d:cd:
         d9:24:66:e5:54:b0:24:d5:f3:7b:d2:05:da:81:ec:a3:81:67:
         65:72:61:60:d3:c8:e4:cc:2b:e9:b2:1c:18:69:00:1e:67:f5:
         13:b5:77:fb:a2:cc:73:d1:ab:bb:15:a4:ce:5e:e5:df:6b:fa:
         cd:a1:9a:ca:93:8a:c1:f6:f3:d1:d5:08:ec:62:3c:ef:ef:b7:
         f0:76:f6:6b:0b:db:95:6f:d8:8d:a9:68:36:6d:67:9c:20:53:
         9f:62:36:f2:36:59:67:10:76:27:d1:a5:ea:8d:b8:8a:50:2a:
         9f:f2:3f:e3:2b:f8:58:1c:a6:b0:0f:6b:d2:30:04:87:24:b1:
         d0:3c:2e:e2:61:e4:d5:a7:6e:33:af:c7:2f:88:2c:85:ec:a8:
         d4:a9:57:c6:04:25:f4:20:7b:c4:42:94:2f:97:c7:f6:30:3f:
         63:a1:ec:20:8a:ce:46:b8:1a:26:3c:9c:37:7a:33:e2:ac:77:
         c8:3f:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----