Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
File:                     34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          QPG1VJwmPbsHnO/LPWR2INLKz385EuKdwaM3AWIUINo=
Subject key identifier:   1F:FE:2F:86:85:71:3E:4A:87:FB:B8:0B:23:EA:4B:17:A3:DB:6D:74
Certificate issuer:       /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Certificate serial:       7B7D7768E7060D6C6D6F9AA29F5C886EE5BBE000
Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
Signing time:             Tue 05 Mar 2024 17:44:12 +0000
ROA not before:           Tue 05 Mar 2024 17:39:12 +0000
ROA not after:            Tue 04 Mar 2025 17:44:12 +0000
asID:                     267798
IP address blocks:        45.173.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:77:68:e7:06:0d:6c:6d:6f:9a:a2:9f:5c:88:6e:e5:bb:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
        Validity
            Not Before: Mar  5 17:39:12 2024 GMT
            Not After : Mar  4 17:44:12 2025 GMT
        Subject: CN=1FFE2F8685713E4A87FBB80B23EA4B17A3DB6D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:74:5a:a3:ac:a9:1d:36:9d:48:fb:ba:e4:
                    ce:c7:3f:8a:2e:3d:27:5e:94:15:e9:12:3f:a4:56:
                    e2:35:69:dc:b3:25:f7:3d:63:80:b1:5c:c0:24:de:
                    23:2f:26:bd:6f:95:cd:7a:fe:5b:13:7c:13:ce:ba:
                    1f:e8:e8:30:08:de:f4:38:2a:99:d7:3d:55:72:7b:
                    9c:62:2b:91:9f:ea:61:48:07:5c:be:17:b0:08:97:
                    d2:b7:6f:f6:ed:ef:9a:1b:e4:ac:95:9a:ac:10:6e:
                    81:1d:3b:a8:ff:ce:ba:d7:4c:94:5f:38:12:6c:82:
                    bf:ff:3b:a9:64:a0:6f:ab:3d:60:23:55:d3:30:d7:
                    28:fc:97:b7:1c:ee:b7:6f:1d:ef:ce:47:1b:32:2c:
                    4e:0c:e8:b1:6c:e1:2d:5b:54:e8:bd:e2:79:77:b9:
                    cc:4d:04:4f:86:6b:9e:82:a4:d7:11:bf:a3:60:73:
                    a0:49:76:e8:b2:c9:49:13:5d:44:52:89:07:19:fc:
                    d5:ea:68:b9:6a:19:92:ff:60:a5:26:57:d7:7e:0e:
                    6f:e3:e1:82:a1:81:9a:d9:b1:a7:0a:47:54:a3:87:
                    38:a5:4e:42:86:a4:18:5d:2d:e0:5b:7d:40:46:99:
                    b4:e5:f2:63:ae:88:c5:0e:11:9e:8e:d0:08:9f:b0:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FE:2F:86:85:71:3E:4A:87:FB:B8:0B:23:EA:4B:17:A3:DB:6D:74
            X509v3 Authority Key Identifier:
                keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:59:ca:bf:c5:95:c1:24:06:ec:48:48:56:e5:f9:48:b8:31:
         9e:28:5b:f8:dc:a8:46:ad:92:0d:d8:9b:7f:fd:c6:03:b4:07:
         61:0f:b8:47:7d:99:51:76:13:6f:47:14:f3:8c:bb:40:cd:78:
         19:eb:c5:d2:90:3c:ab:ce:64:62:27:1b:3d:94:d8:7b:ed:60:
         aa:d3:fc:51:93:b7:ed:8b:8f:f4:74:71:27:42:cf:ed:78:19:
         72:42:9b:a0:6d:30:22:4c:6b:f7:58:df:e6:08:11:5d:25:9c:
         83:c6:cc:fa:5e:db:c2:ba:f0:37:ef:0e:39:ad:68:a2:b5:7b:
         b8:5f:02:73:9d:13:c5:7c:58:e7:f1:c2:f3:ae:9f:e2:67:a0:
         be:67:33:bc:dc:af:6b:f2:33:cc:5c:7c:ca:5e:69:94:6c:f1:
         08:03:3a:5c:f9:fa:90:1a:92:10:91:e4:4e:26:04:93:36:56:
         0b:dd:ab:35:9f:32:ce:aa:14:f4:35:7a:df:77:e1:45:c8:b5:
         13:52:4f:81:f7:88:c5:62:44:0e:03:90:3b:84:92:94:34:65:
         1e:31:10:1a:79:1b:f8:9f:f0:35:d1:b8:e6:89:1d:09:c4:8b:
         10:5e:04:0f:21:73:7b:75:7a:d5:fe:83:75:71:71:14:fb:e2:
         48:1b:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----