Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373136.roa
File:                     34352e3137332e36302e302f32322d3234203d3e20323634373136.roa (raw, json)
Hash identifier:          jjB/NsGuVfEbg/vDbBDQjDsNU9uDtZFFAvFZHdGZjN4=
Subject key identifier:   E2:05:B2:C0:A2:88:C1:CE:80:44:C7:0E:8B:38:45:7D:D0:F4:F2:BA
Certificate issuer:       /CN=A5B5107F078EB56DD750A4838A5974EC7B109038
Certificate serial:       345FA67F67C0F2C1A091848A9E7E582DF3F88F92
Authority key identifier: A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373136.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     264716
IP address blocks:        45.173.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5f:a6:7f:67:c0:f2:c1:a0:91:84:8a:9e:7e:58:2d:f3:f8:8f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B5107F078EB56DD750A4838A5974EC7B109038
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=E205B2C0A288C1CE8044C70E8B38457DD0F4F2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:7c:8e:d7:4e:a1:6c:99:84:51:98:4a:9a:
                    78:fb:c3:1a:64:95:81:df:ab:d2:27:ce:27:45:56:
                    e9:87:9d:9f:12:b8:97:d8:1e:ed:b1:2d:3c:61:e3:
                    3b:ce:52:ea:ea:bb:0c:57:e9:50:a6:d5:d9:84:c3:
                    84:fd:b8:78:b4:c8:8e:e2:ad:b9:e1:80:d3:74:30:
                    74:4b:1e:d5:5c:9d:5f:6d:84:3d:13:97:04:3c:6f:
                    5c:dc:e8:2b:98:2d:90:9f:7e:ef:eb:a7:c6:49:4e:
                    09:a9:3d:e7:ba:60:93:4f:3c:d2:c9:bc:21:03:63:
                    5a:55:c4:25:e0:1e:98:ac:18:2b:c4:73:83:74:ba:
                    98:e6:47:1a:8f:e8:21:a5:ca:cf:9f:64:9b:85:e1:
                    09:77:20:f1:c3:84:a9:10:53:0b:ac:dc:c2:d0:80:
                    d7:15:66:7e:2f:a9:c3:bd:3c:05:8c:1e:9a:e9:0f:
                    fa:5c:64:39:a6:88:4a:54:25:cd:0a:9f:67:6a:5d:
                    05:1e:6f:89:08:d3:74:32:cc:35:15:4e:cb:32:36:
                    e5:d1:86:0d:0b:66:1d:51:06:9e:4b:cd:39:fa:64:
                    3c:e4:2f:72:ca:be:bf:59:72:cc:34:ba:72:88:2d:
                    87:01:b0:d1:a8:79:9b:d8:bc:b9:f8:1e:fb:ab:44:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:B2:C0:A2:88:C1:CE:80:44:C7:0E:8B:38:45:7D:D0:F4:F2:BA
            X509v3 Authority Key Identifier:
                keyid:A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/A5B5107F078EB56DD750A4838A5974EC7B109038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/34352e3137332e36302e302f32322d3234203d3e20323634373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:46:e4:00:08:3b:9b:2b:35:c4:ab:fd:06:8a:b1:fb:29:
         4d:ee:81:87:7d:fc:12:08:46:5a:33:f8:33:53:4b:9e:3a:e1:
         9d:06:af:cd:70:52:96:ae:d7:51:1c:c2:d0:f7:47:82:d2:32:
         1e:5e:e4:10:23:54:c3:ef:0b:b7:39:ce:05:c6:1c:8e:21:c5:
         15:24:98:22:19:f7:69:bd:d4:88:cb:64:7f:6b:e7:da:f8:15:
         22:fd:14:a6:10:bc:65:56:40:22:0d:ee:e8:7a:e7:30:f2:65:
         01:d3:d3:37:46:cf:1a:5c:54:80:fc:ee:33:f2:c1:2b:03:3d:
         0e:fc:77:1f:5e:79:b3:bf:3e:0d:64:2e:ba:a4:92:0c:20:8a:
         a7:31:3c:07:6e:ab:e7:80:e8:be:e6:ce:08:12:ad:0b:90:d2:
         e7:cd:81:ed:f5:cf:ae:ce:63:af:dc:b1:55:55:4a:55:2b:a9:
         63:f6:de:53:10:01:16:f1:7d:47:55:8d:07:42:ff:e8:e8:14:
         c7:5f:90:07:bb:75:be:6e:dd:0b:85:7b:13:88:a1:a0:2a:c9:
         9a:17:d7:ce:f7:65:91:fa:0e:cb:51:07:66:54:dd:30:53:9a:
         29:2d:70:60:55:08:67:3d:46:c7:56:8a:cf:df:21:32:c3:9b:
         0f:44:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----