Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa
File:                     3137302e3231302e302e302f31362d3234203d3e2034323730.roa (raw, json)
Hash identifier:          I6b3uhKgbEBesTQqc+Vlxc7+hkTbDoL8LmgKMEpXyLI=
Subject key identifier:   D1:CC:79:27:31:28:21:21:76:30:E5:C5:06:E2:9A:7E:62:B7:84:3F
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       43145DCBE4840FAB42E9A4723A9588F319FCB701
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa
Signing time:             Tue 05 Mar 2024 18:22:51 +0000
ROA not before:           Tue 05 Mar 2024 18:17:51 +0000
ROA not after:            Tue 04 Mar 2025 18:22:51 +0000
asID:                     4270
IP address blocks:        170.210.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:5d:cb:e4:84:0f:ab:42:e9:a4:72:3a:95:88:f3:19:fc:b7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:51 2024 GMT
            Not After : Mar  4 18:22:51 2025 GMT
        Subject: CN=D1CC7927312821217630E5C506E29A7E62B7843F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:43:aa:c6:d3:bf:ee:0c:23:44:d9:fb:97:
                    74:9f:92:f8:df:71:62:c8:1b:c7:2e:26:1c:18:6a:
                    1b:82:96:92:a0:99:ba:6c:cf:95:01:61:45:5a:52:
                    0d:6d:f8:ea:77:36:a4:16:2b:26:77:63:70:79:d8:
                    23:9d:9d:11:df:bc:00:26:3d:41:25:ae:32:12:05:
                    dc:c4:dd:21:b3:7b:8c:d9:7e:0e:36:a7:b2:a8:91:
                    63:23:42:3a:a6:08:3e:5a:36:7b:66:92:67:f3:16:
                    2a:b3:ec:e5:f6:ed:8b:68:51:3f:99:40:ce:70:e3:
                    a4:da:d9:59:f4:de:c4:c4:01:32:ab:90:82:1d:ec:
                    bd:70:f1:3b:91:2b:96:bb:f8:10:3e:e0:7e:27:f3:
                    8f:a3:e4:3a:59:bc:c9:6b:cd:2b:f2:8f:ea:bc:e3:
                    8e:9a:97:0a:f4:75:c3:ec:c4:96:64:18:09:82:d1:
                    19:37:ea:e7:d9:8c:b0:80:c4:04:11:96:db:8c:7b:
                    95:3b:40:28:40:56:4f:1c:24:ea:b9:f3:49:de:4f:
                    c4:9c:bc:9a:30:c7:b2:28:b9:66:e8:ce:54:08:13:
                    87:30:29:22:bc:93:64:21:a5:60:d7:fe:ef:be:d3:
                    71:0e:56:cb:ba:a3:82:f9:3c:8f:24:00:7d:75:53:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:79:27:31:28:21:21:76:30:E5:C5:06:E2:9A:7E:62:B7:84:3F
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e302e302f31362d3234203d3e2034323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:b3:5b:67:95:99:58:b0:3b:03:8c:31:c9:81:27:42:fd:
         c9:47:a9:8f:39:df:f6:ad:18:05:c7:af:22:29:95:62:0d:35:
         c7:08:85:12:f7:59:29:7c:6a:52:cc:10:67:93:6a:98:a1:b5:
         3a:e6:04:0e:d5:e3:8e:01:ee:1b:87:43:83:a4:79:43:ec:33:
         11:b5:7a:a7:ad:e1:23:1d:7e:05:c9:79:74:8d:9a:51:24:bc:
         0d:48:92:9b:28:6a:25:91:3c:df:6e:34:29:69:f2:4a:a0:59:
         56:58:db:3c:2c:82:1b:ff:79:c7:f1:b0:7e:72:6c:dd:f5:aa:
         ae:c5:1a:7f:d9:0b:aa:9f:ef:2d:bf:44:7b:84:46:e9:bc:1b:
         65:f8:59:e1:d3:95:46:3d:64:3c:0d:81:59:03:87:c6:33:ff:
         c5:7a:b0:04:dc:43:3d:15:5e:50:48:a3:be:03:bf:ad:cc:f3:
         72:89:cf:02:0c:e2:18:4d:50:33:bb:e3:67:59:78:44:d5:59:
         03:f6:e0:79:58:21:63:58:d1:0b:af:2d:a0:e4:f4:c8:62:f6:
         f3:55:80:20:8d:20:b0:1a:47:c3:bb:61:2b:af:7e:64:f6:78:
         10:37:1a:24:ae:cd:2a:a8:14:88:35:b2:aa:9e:f3:3b:17:50:
         b7:0f:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----