Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa
File:                     34352e37302e3230302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          Ip8K40JbNggidPRW7ZXQHn9uTLvlfO192r9K8GinKLU=
Subject key identifier:   1C:7A:64:F8:67:80:60:4D:4F:69:B3:49:F0:4B:85:57:70:6B:79:C7
Certificate issuer:       /CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
Certificate serial:       52049EC01339E3C59E5BB559AF629D7EF9ABED6F
Authority key identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:51:27 +0000
ROA not before:           Tue 05 Mar 2024 17:46:27 +0000
ROA not after:            Tue 04 Mar 2025 17:51:27 +0000
asID:                     264668
IP address blocks:        45.70.200.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:04:9e:c0:13:39:e3:c5:9e:5b:b5:59:af:62:9d:7e:f9:ab:ed:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
        Validity
            Not Before: Mar  5 17:46:27 2024 GMT
            Not After : Mar  4 17:51:27 2025 GMT
        Subject: CN=1C7A64F86780604D4F69B349F04B8557706B79C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:1d:25:69:3c:55:43:e5:88:73:4f:2c:d4:
                    08:6b:a0:f3:67:b8:2f:a5:dc:7d:9b:79:02:c1:01:
                    76:39:e6:3d:75:71:31:98:9d:83:fc:b8:3e:77:bb:
                    c1:f8:e4:2b:3b:bb:1c:05:d2:87:91:82:b2:4f:c3:
                    7f:56:f3:a1:27:3c:b9:56:90:58:29:ba:9d:3d:7c:
                    a5:83:bf:c4:4d:2b:2b:53:b5:a4:8f:67:3e:19:b2:
                    f1:8d:84:71:79:45:e9:8a:f3:40:0a:43:5a:9f:77:
                    cf:96:0e:2d:e7:c3:6e:c9:92:3c:31:c1:ea:e6:50:
                    7c:9b:88:c4:8e:cb:73:44:7e:ce:e7:79:af:44:4a:
                    0f:85:4d:38:fe:3c:12:cc:2e:71:1d:09:5d:f1:90:
                    d5:24:c8:71:a8:b2:f8:4a:ac:e1:df:7b:8f:65:4e:
                    52:0c:67:05:3c:7d:b3:f8:14:19:7a:d4:f3:6b:c4:
                    aa:fa:7e:22:f6:43:df:bd:55:de:3f:a5:2e:e0:92:
                    b9:e0:20:3e:ea:77:aa:ed:cd:c9:3e:da:ed:2b:74:
                    be:21:de:20:49:d0:0b:41:b3:16:4e:50:80:0f:ed:
                    50:ac:5d:1b:bf:6a:45:1a:9d:50:31:75:f3:e5:9b:
                    52:38:f2:3c:ad:7e:d4:d4:e6:3d:20:17:d3:91:41:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7A:64:F8:67:80:60:4D:4F:69:B3:49:F0:4B:85:57:70:6B:79:C7
            X509v3 Authority Key Identifier:
                keyid:E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:22:ee:a9:c2:a6:7c:fe:4c:30:b3:79:2d:51:cd:96:c5:
         7a:11:99:ef:24:08:f0:ed:09:b6:42:b4:c1:62:9d:e2:fa:2d:
         9d:82:39:1a:30:33:97:84:3d:0d:8d:15:f8:a4:b1:45:04:b2:
         97:35:1c:81:66:ef:74:43:24:88:64:0a:ef:70:fb:ab:9b:fe:
         57:be:a2:ef:6d:fe:f9:dc:6c:67:e7:ee:c1:6a:e4:8c:e8:cc:
         e8:76:61:15:14:f0:8a:bc:2b:bd:5d:14:a2:84:a2:3a:87:64:
         04:d7:0e:89:66:b4:f1:81:23:d4:d2:dc:59:2b:f3:98:aa:f8:
         ef:62:70:b0:e6:60:68:20:65:c7:3b:ff:51:95:f3:0b:d6:ab:
         bc:9e:ec:54:32:95:0c:24:0a:c3:80:01:da:e4:43:bb:58:08:
         45:c3:ea:b1:7a:0b:c0:f0:f8:10:07:1b:8f:6a:57:d3:b5:7c:
         92:40:d1:39:14:de:8c:a5:92:99:51:aa:fd:04:8d:eb:9f:1c:
         16:59:6a:7c:24:d5:86:c5:8b:a1:63:16:7f:9c:6e:7b:ca:7c:
         b9:9b:97:26:14:52:52:bb:07:d9:3d:26:44:d9:ab:60:77:ef:
         bb:18:35:b4:a9:e0:d4:33:56:bd:94:52:3f:90:4d:16:08:69:
         6d:28:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----