Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
File:                     34352e3232392e33322e302f32322d3234203d3e203238303037.roa (raw, json)
Hash identifier:          ljfbwtjvW0cSRXMx3f8x81ikgDyFR204ZvZx6Xw2nsU=
Subject key identifier:   67:D5:B9:55:8F:78:75:50:62:D5:11:27:25:11:CB:E9:72:DA:F7:68
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       1469F3ECCD3CCF9CF2C233BCE2011DACC0DE63A4
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 18:17:35 +0000
ROA not before:           Tue 05 Mar 2024 18:12:35 +0000
ROA not after:            Tue 04 Mar 2025 18:17:35 +0000
asID:                     28007
IP address blocks:        45.229.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:69:f3:ec:cd:3c:cf:9c:f2:c2:33:bc:e2:01:1d:ac:c0:de:63:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Mar  5 18:12:35 2024 GMT
            Not After : Mar  4 18:17:35 2025 GMT
        Subject: CN=67D5B9558F78755062D511272511CBE972DAF768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:62:6d:1b:29:ae:ab:79:f0:fb:f2:9f:97:
                    a8:b4:d3:04:60:62:01:bd:9b:87:d4:0e:0d:6d:8f:
                    6c:0e:fb:79:72:59:3a:30:e8:0c:31:14:72:f7:bb:
                    ce:1e:d3:31:9c:16:e9:52:27:04:0f:12:dc:17:71:
                    01:b9:20:2b:78:a8:92:6b:4d:d0:d6:f7:75:53:74:
                    98:8e:8f:f0:7d:b3:4e:26:23:a9:b6:b6:d6:b7:00:
                    90:bc:17:77:d0:31:23:b0:72:d5:6d:ad:c7:f5:e1:
                    21:39:51:c3:46:f9:02:19:67:30:56:f3:1c:d4:15:
                    db:d9:95:97:d1:14:3f:21:b7:db:75:e6:f7:b3:73:
                    d4:26:1b:a4:ac:ae:62:b9:85:4e:d3:6d:28:da:40:
                    ea:3e:81:5d:ed:1e:90:f7:ba:7e:be:a6:12:12:36:
                    7f:68:1b:7f:02:88:72:c0:fe:2f:3c:2c:92:7a:f4:
                    59:a5:54:66:44:32:8a:48:ed:94:2b:51:84:88:a9:
                    0d:30:df:79:a7:11:f5:41:60:3b:af:0d:9f:4b:56:
                    84:1e:a8:1b:4e:94:27:da:06:33:1e:75:a3:99:ff:
                    da:06:62:38:76:1f:a7:03:6f:d7:fa:77:13:30:b9:
                    30:7e:7d:00:e9:96:f4:bb:a9:9b:f5:d3:e5:ec:6a:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:B9:55:8F:78:75:50:62:D5:11:27:25:11:CB:E9:72:DA:F7:68
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:15:43:42:26:b6:0e:39:f4:11:5a:15:76:96:36:dc:83:37:
         ca:18:fd:3a:ae:fe:f2:d5:7b:13:c1:62:fe:e1:61:d5:3f:12:
         ea:0c:23:cd:03:c3:3c:8a:f4:67:c6:51:07:9e:70:30:9b:71:
         e5:84:5f:cf:72:42:57:c9:55:7c:06:3d:c3:d5:8a:db:0f:d5:
         dd:e9:04:3c:2a:e6:97:a0:6f:97:5c:f5:72:72:55:cd:d4:16:
         be:f2:6e:d5:43:2a:df:c4:d6:23:c4:52:bd:b4:ad:ba:b9:fb:
         bc:c2:fc:94:f5:16:a8:ff:c1:a1:35:13:0e:d2:07:6a:37:72:
         bb:28:b5:55:f2:72:ea:2c:cc:9c:2a:5c:59:22:0d:9f:1d:d4:
         c9:37:05:02:b2:a2:f1:d9:91:96:93:63:73:d4:e0:68:da:bd:
         cb:f1:3c:b9:83:9c:f2:fe:77:04:eb:52:04:e0:dc:55:01:88:
         6b:a3:48:df:cb:41:00:88:73:47:96:b9:c1:87:90:d4:fa:3c:
         8c:05:49:73:29:e4:a2:9e:ac:d4:82:f0:4b:45:37:56:23:8b:
         a2:46:0e:8a:6f:dd:64:94:35:3a:7e:4d:a3:0e:7f:8b:0b:55:
         2b:0a:4a:71:79:2c:fb:ed:59:53:7b:ce:67:b3:6f:73:fe:7c:
         fe:2c:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----