Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323636383537.roa
File:                     34352e3233392e3230382e302f32322d3234203d3e20323636383537.roa (raw, json)
Hash identifier:          hMsJk0GwdVax9ewvJJYwPwVzdsMqSWq0vSfDP865rpg=
Subject key identifier:   7C:98:DE:6B:A5:59:61:B6:6E:33:32:A6:DD:06:27:0F:E1:CF:15:05
Certificate issuer:       /CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
Certificate serial:       1700C88ECF5E89773F7AE2FD03FBE0CBDCA7C15C
Authority key identifier: 30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323636383537.roa
Signing time:             Tue 05 Mar 2024 17:41:51 +0000
ROA not before:           Tue 05 Mar 2024 17:36:51 +0000
ROA not after:            Tue 04 Mar 2025 17:41:51 +0000
asID:                     266857
IP address blocks:        45.239.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:00:c8:8e:cf:5e:89:77:3f:7a:e2:fd:03:fb:e0:cb:dc:a7:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
        Validity
            Not Before: Mar  5 17:36:51 2024 GMT
            Not After : Mar  4 17:41:51 2025 GMT
        Subject: CN=7C98DE6BA55961B66E3332A6DD06270FE1CF1505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:d9:a6:35:ef:7e:2e:14:b7:95:98:3b:ea:
                    40:24:25:27:6a:f2:62:55:9e:c7:4a:12:ad:62:ec:
                    f8:f4:1f:76:37:84:be:c6:c0:5d:d9:9a:54:2b:8b:
                    cf:c8:0a:94:7e:30:bc:88:1a:38:d8:a4:c1:a2:37:
                    13:f5:7d:cf:ed:e9:8e:ae:21:a5:14:2e:64:ec:b7:
                    7a:2b:e3:20:fe:f7:41:08:02:65:30:98:d6:79:45:
                    53:12:4e:fb:f5:72:dc:b1:26:29:d0:9d:8d:c7:1b:
                    75:3e:c2:8e:5f:cd:63:92:4c:aa:b3:32:40:71:9b:
                    ef:e9:b7:2c:39:ab:a9:50:df:c0:a8:53:91:33:c0:
                    d0:18:5c:a0:c6:3d:84:b4:3d:8c:d9:35:e4:a8:aa:
                    90:63:ef:4e:3c:85:1b:e8:c0:8c:90:3f:c3:a5:e8:
                    60:b9:46:ea:6e:fc:43:65:ab:f6:48:92:67:e3:c1:
                    5c:14:ae:b0:74:ba:b5:3b:16:48:cf:bc:6f:38:14:
                    6c:79:39:f3:00:a7:1d:cb:36:a4:7a:72:ec:30:e3:
                    d5:ab:68:c2:e7:48:ac:c7:ee:fa:78:63:c4:01:73:
                    61:2b:ac:83:44:93:3b:fe:b1:41:7a:e4:34:6d:d6:
                    11:ee:3b:57:31:ca:a6:53:3c:63:ec:a3:42:5a:9b:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:DE:6B:A5:59:61:B6:6E:33:32:A6:DD:06:27:0F:E1:CF:15:05
            X509v3 Authority Key Identifier:
                keyid:30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323636383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:64:29:33:c0:2e:c2:1e:09:d1:9a:96:7b:71:93:3d:3b:
         04:f5:43:e9:97:93:45:f5:e5:93:e2:64:73:d4:9f:42:14:1b:
         57:0b:14:69:4c:f4:20:6c:77:a2:b0:69:db:bc:76:a7:09:46:
         d0:00:fd:10:dd:2a:90:94:77:be:d0:a7:47:3c:5e:af:18:cb:
         5b:8b:73:54:d3:cd:d0:44:b8:dc:a8:05:7f:db:b5:2e:f5:cc:
         00:00:cb:6b:1f:7d:40:3c:da:8f:d1:55:a7:47:fe:b2:10:2b:
         cb:9e:7e:93:70:09:81:42:41:61:1f:e1:a2:12:20:a1:f5:70:
         c6:15:de:2e:83:06:1d:2f:b0:ff:75:ac:33:a5:ba:8d:36:e8:
         02:1d:a1:d7:82:13:4b:a8:3e:d4:42:35:c1:08:b3:d3:09:43:
         49:71:22:dc:16:b6:3e:1b:35:00:97:de:f8:8c:a6:f5:0e:93:
         d9:b2:a4:68:c0:42:c5:a3:b9:ff:6b:98:6d:5a:0e:1f:c5:a5:
         0d:d8:27:15:bd:42:24:50:af:27:a4:ff:c0:12:db:dc:5e:bd:
         5a:8a:dc:57:40:a8:7c:c7:0d:66:43:ec:d0:af:5f:75:df:5c:
         bf:17:54:7d:63:a9:3d:90:95:12:05:fb:39:c0:1d:42:fe:80:
         3d:d3:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----