Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa
File:                     34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa (raw, json)
Hash identifier:          A09mETz3lAwQxzMxx9A2SIvma45b1a05IXNfQolYZPg=
Subject key identifier:   ED:BE:1F:52:A7:2E:4E:D1:6A:B3:B0:39:24:EE:FB:3C:B8:5C:6A:23
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       B8E860B527FCE95F2848105E1C28FAD140DA3D
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:26 +0000
ROA not before:           Tue 05 Mar 2024 17:39:26 +0000
ROA not after:            Tue 04 Mar 2025 17:44:26 +0000
asID:                     269782
IP address blocks:        45.184.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:e8:60:b5:27:fc:e9:5f:28:48:10:5e:1c:28:fa:d1:40:da:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:26 2024 GMT
            Not After : Mar  4 17:44:26 2025 GMT
        Subject: CN=EDBE1F52A72E4ED16AB3B03924EEFB3CB85C6A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:f8:45:bf:e4:01:97:ab:75:65:20:97:e9:
                    bc:81:1b:b0:c3:a8:39:58:9d:11:4e:f4:9c:e4:56:
                    01:73:03:77:ad:81:4b:57:ef:07:37:1e:b6:c3:3a:
                    4e:bc:d3:92:81:45:16:84:56:3e:07:54:54:78:a3:
                    0a:47:60:13:e0:20:d5:47:60:94:9c:ee:0e:69:9f:
                    2b:b0:5a:e4:50:cc:0c:92:8c:3f:88:27:79:4f:f5:
                    ab:ca:3a:d6:8d:bc:49:8c:fb:f3:5c:ba:46:35:cf:
                    5d:ec:36:e1:f5:ff:36:fe:3a:ef:98:3e:3b:b4:24:
                    fb:99:24:a7:cf:22:47:55:fc:81:eb:55:ed:3a:e0:
                    82:63:c3:01:66:a1:a5:53:6d:16:08:0f:29:0a:9f:
                    46:e8:26:76:62:22:4e:0a:0b:34:a6:1e:d0:3b:07:
                    16:fe:6e:44:48:aa:d8:61:73:b9:07:78:87:61:54:
                    22:ec:88:85:3d:35:68:2b:5d:0f:62:59:ec:e4:c9:
                    ff:8f:de:ba:83:f1:26:4d:e7:75:97:a1:7c:0f:a1:
                    71:f1:0b:bd:57:d6:b9:71:06:4d:89:2a:5e:4e:38:
                    54:8d:3a:42:aa:b1:a0:98:9e:f1:77:63:f4:7b:c7:
                    70:4b:2e:e7:91:94:44:d1:c8:4f:9c:68:fa:11:8f:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:1F:52:A7:2E:4E:D1:6A:B3:B0:39:24:EE:FB:3C:B8:5C:6A:23
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:55:a4:10:94:7b:c7:41:de:f3:6f:d2:bf:11:30:65:1e:64:
         a4:e2:13:8a:fc:26:ad:ae:37:9c:5a:a0:34:87:1b:24:92:de:
         fb:70:1a:b2:cf:a2:a1:30:78:e9:17:7a:3c:d5:d0:46:dc:c0:
         49:5c:2d:a1:ea:14:e4:73:83:51:b6:1d:47:c7:eb:9c:ce:d7:
         f8:42:c3:cf:4b:83:9d:ad:40:45:d7:0d:45:09:61:c1:8c:a5:
         6e:26:f9:7f:12:45:42:d6:57:0e:5c:0a:81:61:fa:70:66:a8:
         0b:1f:2f:6d:2b:6d:83:3c:45:03:93:38:69:96:20:3e:8f:71:
         b1:6f:ac:e9:1a:e0:9e:c2:df:c2:09:70:60:3a:ae:0b:ee:eb:
         5c:76:f7:44:cf:57:b0:64:f7:f1:d5:25:2a:2f:d8:b4:cd:4c:
         2e:f8:4e:f2:99:ca:34:26:87:72:0e:91:1b:c4:05:5d:17:8c:
         c0:59:e7:d1:6d:fe:b8:ff:91:05:10:d9:36:a3:21:ac:32:b7:
         34:fa:f6:f3:f5:d8:b5:cd:9f:50:0e:54:af:d6:f4:68:95:03:
         b0:84:5e:ea:1d:17:a5:0f:02:86:14:01:64:bd:c0:4b:90:48:
         3a:d6:20:fb:4e:3a:59:3e:87:9f:3c:9b:4b:bb:54:6e:0c:e0:
         1c:65:35:e4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUALjoYLUn/OlfKEgQXhwo+tFA2j0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTFBMDRCN0Q5MjBEMTgwNkYwN0IwRjc3RDE0M0Ix
QzdGQUFFMTAeFw0yNDAzMDUxNzM5MjZaFw0yNTAzMDQxNzQ0MjZaMDMxMTAvBgNV
BAMTKEVEQkUxRjUyQTcyRTRFRDE2QUIzQjAzOTI0RUVGQjNDQjg1QzZBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrPhFv+QBl6t1ZSCX6byBG7DD
qDlYnRFO9JzkVgFzA3etgUtX7wc3HrbDOk6805KBRRaEVj4HVFR4owpHYBPgINVH
YJSc7g5pnyuwWuRQzAySjD+IJ3lP9avKOtaNvEmM+/NcukY1z13sNuH1/zb+Ou+Y
Pju0JPuZJKfPIkdV/IHrVe064IJjwwFmoaVTbRYIDykKn0boJnZiIk4KCzSmHtA7
Bxb+bkRIqthhc7kHeIdhVCLsiIU9NWgrXQ9iWezkyf+P3rqD8SZN53WXoXwPoXHx
C71X1rlxBk2JKl5OOFSNOkKqsaCYnvF3Y/R7x3BLLueRlETRyE+caPoRj1MLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7b4fUqcuTtFqs7A5JO77PLhcaiMwHwYDVR0j
BBgwFoAUAaUaBLfZINGAbwew930UOxx/quEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEQxNkE1NTY1OThGNzRBQURCNzc1RERDQ0ExMjE0ODhD
RDMzQjM2NTkwOUU3QUZGNzZENTQxRkZDQUZEQzIzLzAvMDFBNTFBMDRCN0Q5MjBE
MTgwNkYwN0IwRjc3RDE0M0IxQzdGQUFFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUE1MUEwNEI3RDkyMEQxODA2
RjA3QjBGNzdEMTQzQjFDN0ZBQUUxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjREMTZBNTU2NTk4Rjc0QUFEQjc3NUREQ0NBMTIxNDg4Q0QzM0IzNjU5
MDlFN0FGRjc2RDU0MUZGQ0FGREMyMy8wLzM0MzUyZTMxMzgzNDJlMzIzNTMwMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5MzczODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLbj6
MA0GCSqGSIb3DQEBCwUAA4IBAQAAVaQQlHvHQd7zb9K/ETBlHmSk4hOK/Catrjec
WqA0hxskkt77cBqyz6KhMHjpF3o81dBG3MBJXC2h6hTkc4NRth1Hx+ucztf4QsPP
S4OdrUBF1w1FCWHBjKVuJvl/EkVC1lcOXAqBYfpwZqgLHy9tK22DPEUDkzhpliA+
j3Gxb6zpGuCewt/CCXBgOq4L7utcdvdEz1ewZPfx1SUqL9i0zUwu+E7ymco0Jody
DpEbxAVdF4zAWefRbf64/5EFENk2oyGsMrc0+vbz9di1zZ9QDlSv1vRolQOwhF7q
HRelDwKGFAFkvcBLkEg61iD7TjpZPoefPJtLu1RuDOAcZTXk
-----END CERTIFICATE-----