Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e3132382f32362d3236203d3e203133343839.roa
File:                     34352e3136392e3235332e3132382f32362d3236203d3e203133343839.roa (raw, json)
Hash identifier:          9lPK+bJLufPheAQ4H6kgnZ2I2uD30j0LE9d0CZLVvkI=
Subject key identifier:   B5:DE:E2:3C:CD:7A:40:F7:33:DD:FB:49:18:18:7B:F8:DD:72:2B:49
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       35F9BD88286AC53115C304AE653D85A28DB039F6
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e3132382f32362d3236203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:09:36 +0000
ROA not before:           Tue 05 Mar 2024 18:04:36 +0000
ROA not after:            Tue 04 Mar 2025 18:09:36 +0000
asID:                     13489
IP address blocks:        45.169.253.128/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f9:bd:88:28:6a:c5:31:15:c3:04:ae:65:3d:85:a2:8d:b0:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Mar  5 18:04:36 2024 GMT
            Not After : Mar  4 18:09:36 2025 GMT
        Subject: CN=B5DEE23CCD7A40F733DDFB4918187BF8DD722B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:3e:f7:3a:14:aa:fd:ff:fa:4a:bc:b6:1e:
                    47:66:03:d2:d9:74:42:70:aa:f3:a3:52:5f:e9:39:
                    93:c2:1e:0d:e7:6d:f1:ec:45:74:f4:f2:42:b4:d6:
                    69:42:45:56:65:6d:41:81:7d:e7:5a:f9:8e:b4:19:
                    bf:ec:9f:85:c7:c1:80:2f:86:03:78:43:db:93:4a:
                    f9:a9:6b:ed:bf:9e:ca:9e:ca:48:6d:25:47:86:81:
                    82:3c:36:95:ef:80:74:98:a7:af:cb:45:75:bb:15:
                    86:f5:c0:51:1a:a1:31:b2:d3:a6:3f:f8:37:b7:d5:
                    74:06:2b:46:24:6d:9a:e5:9a:f2:87:1d:41:ee:11:
                    3e:18:ce:ab:43:b4:7d:b0:77:ad:b2:21:74:7e:74:
                    a2:6f:9e:76:06:fb:54:10:d0:c9:e3:ae:33:35:38:
                    a0:82:a7:e0:58:4a:76:aa:d3:72:0f:14:6b:99:29:
                    89:47:f9:e7:ba:c6:ba:96:c2:3f:d1:ba:1c:2b:33:
                    7b:98:75:4b:5e:d5:12:0f:09:b9:ad:1c:0c:14:cd:
                    4b:84:0d:2f:dc:65:05:e0:16:ae:14:3f:af:8e:3a:
                    a4:39:c0:cd:a9:a9:af:a6:02:66:e1:05:a6:72:30:
                    6a:69:79:b8:00:f4:75:f8:f0:6b:1f:a9:ca:99:f4:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:E2:3C:CD:7A:40:F7:33:DD:FB:49:18:18:7B:F8:DD:72:2B:49
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e3132382f32362d3236203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.253.128/26

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:37:9a:da:40:99:19:3b:a8:f3:dc:8b:84:79:28:3c:0f:
         f4:f5:76:d3:dc:0c:dc:a1:30:30:b8:49:49:44:ee:0e:00:65:
         23:d1:5c:c7:b1:04:20:33:38:77:e5:a7:9f:c6:55:57:c1:a9:
         03:6a:c8:5d:8a:89:de:7c:36:f5:f3:7b:a5:14:22:89:fe:ef:
         ba:97:b9:2a:59:a8:fc:6c:4b:d2:89:26:5b:2b:4e:c8:24:4e:
         62:79:89:d6:83:99:2f:ef:c4:c8:a0:d3:7d:3c:99:aa:a5:30:
         cd:85:08:42:39:03:1c:fe:37:d2:6b:97:90:03:ea:64:6e:41:
         30:1b:22:ca:2b:e1:f4:0c:65:8e:6e:19:0b:9f:0d:ee:73:a7:
         1d:d5:26:bc:80:91:98:b4:73:c9:2a:86:ae:d9:c8:08:65:18:
         18:36:93:94:aa:75:17:b6:f4:7a:26:57:4c:c0:76:7d:3a:f6:
         e4:99:ce:cf:87:37:00:6c:d3:29:9b:17:7d:2a:65:46:3c:9c:
         ac:47:e8:e3:18:1d:cd:20:8a:fc:bd:ea:cb:58:2c:c6:6d:8e:
         76:90:f7:35:74:73:66:1d:70:26:12:91:98:c7:46:50:9d:ab:
         e8:5c:e5:11:8f:d9:a0:45:c9:aa:b0:e2:87:b2:1b:4c:ba:95:
         e4:d0:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----