Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa
File:                     34352e3232382e35342e302f32332d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          MMeEuiluc9n2nT4WqVsAeWAvvlaWOdI7ZtkuTitJlmA=
Subject key identifier:   9A:F9:56:BF:94:EF:ED:FA:25:A6:31:41:44:36:C5:5E:6E:ED:73:DC
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       6CDB9A4F75B87674E7E32B03162576247BB82FEF
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa
Signing time:             Tue 16 Apr 2024 16:35:00 +0000
ROA not before:           Tue 16 Apr 2024 16:30:00 +0000
ROA not after:            Tue 15 Apr 2025 16:35:00 +0000
asID:                     269838
IP address blocks:        45.228.54.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:db:9a:4f:75:b8:76:74:e7:e3:2b:03:16:25:76:24:7b:b8:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Apr 16 16:30:00 2024 GMT
            Not After : Apr 15 16:35:00 2025 GMT
        Subject: CN=9AF956BF94EFEDFA25A631414436C55E6EED73DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:0f:08:fc:e3:a7:29:c7:2e:54:e9:b2:24:
                    84:b2:31:09:b3:8a:08:79:3b:60:91:6f:a5:bf:6d:
                    d8:e2:a7:37:81:aa:3d:b6:61:94:72:a2:ca:0c:04:
                    fd:f7:af:0c:c8:3e:4d:47:40:c6:fb:84:0b:9c:23:
                    52:d6:05:c9:a0:96:22:43:0f:9f:8c:32:ca:3e:1a:
                    7b:5a:14:5c:7d:08:ed:31:25:3e:3e:0b:c2:0c:b3:
                    53:2c:0b:cf:7a:a3:b2:30:43:36:ad:5b:d9:78:b9:
                    92:ac:54:63:e5:1c:9f:cb:82:cf:b1:07:fe:97:2c:
                    76:0f:ca:cb:81:31:3f:a7:eb:27:f2:0f:23:2e:d7:
                    b1:82:38:62:63:4a:94:08:ed:7a:0a:af:05:27:dd:
                    ae:ee:1a:7f:46:52:0e:8a:ef:5c:8c:70:2e:59:b2:
                    36:2c:30:6d:1d:34:57:ae:14:01:2a:1d:8b:b5:cd:
                    da:71:04:f4:63:25:19:71:74:5a:98:a2:6d:84:01:
                    ca:4c:c8:11:a5:3e:18:70:52:49:1b:85:58:58:29:
                    a9:8b:85:52:b2:a4:2a:b4:88:08:fa:9e:4d:fe:cd:
                    83:08:00:ce:43:4e:d1:b3:1b:8d:f8:03:67:57:7a:
                    3c:41:37:19:5e:cc:25:d2:02:3c:c6:6a:37:c9:da:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:56:BF:94:EF:ED:FA:25:A6:31:41:44:36:C5:5E:6E:ED:73:DC
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35342e302f32332d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:3a:40:f8:71:79:b3:f1:5a:9e:8e:dd:94:cd:14:79:0d:
         76:22:af:76:e3:4f:2a:16:b8:8e:10:31:5c:bb:87:46:94:ae:
         16:2c:92:1c:57:28:d9:15:bc:de:73:14:90:6b:b3:06:fd:56:
         1a:ce:d0:8a:e2:79:51:b6:b6:c9:9f:ab:07:91:d3:0d:eb:d6:
         f3:a5:04:5f:15:7a:36:f4:92:c1:45:ac:d9:68:93:d3:ae:32:
         9d:e1:4d:ed:a0:9f:02:b1:84:0d:e6:3a:e5:1b:d2:8c:7a:f3:
         0c:e5:6b:78:c7:5d:40:31:03:8e:9f:1e:9a:ec:2f:90:6a:03:
         63:14:40:f8:d9:a7:83:b5:2a:5e:b0:d7:92:eb:a0:ec:ee:ab:
         0e:0e:21:1b:d6:8e:b3:c4:8b:a7:fe:5f:9c:d3:b3:19:7a:9c:
         18:98:51:94:27:e1:c2:3a:42:f8:26:6e:81:0f:e4:b2:42:44:
         34:a9:8b:41:33:87:5d:17:79:d0:3f:4f:ce:2f:cb:df:37:e9:
         8b:e5:62:fb:93:40:4c:6c:2d:33:7a:f8:63:07:a5:c3:13:ba:
         70:d1:36:37:cd:11:49:f9:74:7f:17:07:0b:b9:8e:45:41:d3:
         78:f3:e6:73:91:14:92:d4:a0:09:09:7a:a4:c4:59:2c:30:59:
         03:99:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----