Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa
File:                     34352e3233382e36302e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier:          C3doVa6uyRQxnPno//16fZrSgRA0aVb15a6oQbgZju0=
Subject key identifier:   1B:68:EF:4B:96:83:16:D0:9F:22:9C:FF:C8:B0:2B:63:95:8D:E1:28
Certificate issuer:       /CN=1059E6A27D6124C0A7041840F9564D6388CB460D
Certificate serial:       0FA544660159344C38B5C41C10AC79CC269599A9
Authority key identifier: 10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa
Signing time:             Tue 05 Mar 2024 18:00:27 +0000
ROA not before:           Tue 05 Mar 2024 17:55:27 +0000
ROA not after:            Tue 04 Mar 2025 18:00:27 +0000
asID:                     262213
IP address blocks:        45.238.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a5:44:66:01:59:34:4c:38:b5:c4:1c:10:ac:79:cc:26:95:99:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059E6A27D6124C0A7041840F9564D6388CB460D
        Validity
            Not Before: Mar  5 17:55:27 2024 GMT
            Not After : Mar  4 18:00:27 2025 GMT
        Subject: CN=1B68EF4B968316D09F229CFFC8B02B63958DE128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:46:c3:b2:cd:c8:ec:e1:6a:50:a4:ce:b0:
                    e1:37:9e:cf:85:8b:88:7d:b3:b7:31:47:38:55:03:
                    f0:4e:82:7d:8e:26:ad:c5:a1:bd:fc:ed:a4:7a:ac:
                    0e:3f:c9:f2:3a:54:35:2e:43:5c:32:79:fe:03:ef:
                    56:32:33:97:72:4c:3a:7e:96:62:02:b5:59:17:ca:
                    6a:f1:9c:ea:ca:48:90:c7:14:4e:f3:bd:0d:9f:4c:
                    07:31:a7:ad:40:b0:bb:39:a2:9d:46:54:f2:ae:75:
                    33:66:1f:74:3f:51:d0:25:a8:b6:39:d5:1a:17:b2:
                    03:f0:45:c1:8d:f4:88:ae:44:d1:8f:51:0d:57:36:
                    f9:1c:33:d8:2d:d5:d5:40:be:a2:a2:27:81:d7:05:
                    41:f8:85:43:f4:65:63:3f:c9:05:5f:26:6e:26:58:
                    69:34:1c:62:3c:2e:83:fc:fc:99:10:28:67:fd:29:
                    a8:72:11:82:86:43:f3:0b:11:3f:e0:27:dc:96:e7:
                    5f:59:da:b1:91:ce:db:05:e3:f1:5b:32:6d:39:b1:
                    8a:66:8e:d6:11:8a:dd:c0:81:41:d9:6f:da:01:36:
                    fc:21:4c:ef:8d:d6:03:67:0d:54:90:ec:32:dc:f8:
                    de:48:a5:2d:a3:8c:7c:7d:73:79:ee:c7:4a:b0:db:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:68:EF:4B:96:83:16:D0:9F:22:9C:FF:C8:B0:2B:63:95:8D:E1:28
            X509v3 Authority Key Identifier:
                keyid:10:59:E6:A2:7D:61:24:C0:A7:04:18:40:F9:56:4D:63:88:CB:46:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/1059E6A27D6124C0A7041840F9564D6388CB460D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1059E6A27D6124C0A7041840F9564D6388CB460D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/650BDB31D3D319F884FA873E04804D3E0F3B378516BB92B51940DB57FBA3BCE8/0/34352e3233382e36302e302f32322d3234203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:86:c3:9c:34:28:92:96:88:3f:bb:b3:7e:2e:73:ba:af:8e:
         67:63:31:d1:bd:a8:e0:49:83:6e:46:3d:40:23:ba:72:e2:23:
         3a:b7:d1:fe:aa:a6:fe:19:ec:a3:42:09:e0:4f:90:74:8d:cd:
         95:f8:fb:be:92:3e:38:dd:88:55:36:f4:f6:db:d8:4c:02:3f:
         2b:ad:60:f4:fb:b3:16:e3:b4:ae:8e:b0:31:47:c3:8c:95:d6:
         da:e6:e2:01:fc:81:38:b8:a3:d2:e1:f8:21:5d:5f:cb:a9:a9:
         1f:98:ca:01:94:53:27:30:8c:19:32:97:6c:f6:4b:9d:b0:ee:
         af:03:62:c4:1c:cf:81:6a:36:4c:0c:32:ca:69:0c:d8:4f:14:
         20:2b:26:4e:e8:77:3c:f7:b0:26:1b:19:b0:49:ac:03:a5:c6:
         6f:75:e6:a4:b5:5e:73:44:95:7e:c8:83:a5:35:18:3a:d9:92:
         7b:d8:35:09:f7:6c:f3:fc:4e:86:86:77:81:f3:77:5a:b0:15:
         72:f4:e5:82:e7:cd:66:d1:35:f0:d2:e1:22:66:15:51:30:18:
         90:06:2f:89:36:72:63:a4:03:c3:95:a8:1f:93:51:df:73:16:
         12:56:23:2d:7c:fa:37:18:0d:97:89:51:19:64:04:5f:69:8d:
         9c:27:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----