Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa
File:                     3137302e3231302e382e302f32312d3234203d3e203237393933.roa (raw, json)
Hash identifier:          RXr2iuzv87tiwkT57Ny6C8mtwyvlyq9HIAeuJy843fo=
Subject key identifier:   6B:0A:D3:76:20:8C:A9:95:08:FB:1C:0F:12:8C:23:AE:8C:78:6F:BB
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       7187680A575E56DF09AD8E617ED1603304040DC4
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     27993
IP address blocks:        170.210.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:87:68:0a:57:5e:56:df:09:ad:8e:61:7e:d1:60:33:04:04:0d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=6B0AD376208CA99508FB1C0F128C23AE8C786FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:6b:78:34:c4:ea:a1:2b:75:64:70:1f:af:
                    18:7e:3b:4b:13:e4:d4:7b:63:19:a2:4e:0e:c8:12:
                    8e:be:ac:59:54:7e:98:2c:74:da:b1:ab:37:ba:96:
                    0c:f4:3f:d7:4e:3f:ac:b1:d5:81:69:d4:68:1e:ec:
                    fc:1f:26:b7:5f:3e:1b:ab:e0:6b:94:9e:d5:62:47:
                    c1:7c:28:e9:31:98:fb:27:bb:7f:9e:9c:c9:4d:48:
                    d1:00:ac:b5:14:a4:fc:de:f8:c1:5a:ad:72:69:42:
                    f9:35:10:af:8f:cc:ce:74:4d:9c:a5:6c:34:b9:3f:
                    57:16:1f:a6:0c:f1:5b:09:16:21:a5:c2:d1:c3:b4:
                    76:08:86:42:f1:69:16:bc:92:77:4a:06:38:46:bd:
                    07:62:e6:71:31:b9:de:76:4b:56:be:29:60:c0:90:
                    df:50:34:5f:44:71:58:8c:b6:3b:9e:bf:c2:bf:00:
                    44:4d:61:ce:ce:5c:d9:f8:2f:fa:31:34:98:72:59:
                    e5:6b:4d:5d:83:38:2d:c9:20:cd:da:c5:67:94:8f:
                    76:85:2c:53:8e:16:ae:d8:2b:b5:52:68:de:5a:fd:
                    b1:49:08:88:a2:ad:a8:21:f1:70:78:6e:00:a6:38:
                    81:c7:46:27:26:ef:66:69:bd:e1:90:1d:39:4c:2a:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0A:D3:76:20:8C:A9:95:08:FB:1C:0F:12:8C:23:AE:8C:78:6F:BB
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e382e302f32312d3234203d3e203237393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:86:c9:4c:2a:e2:7e:fb:e1:aa:b5:b4:cd:ac:5a:2b:f6:06:
         cb:e9:99:97:38:55:d0:b6:69:f5:33:b7:99:33:64:c1:f8:07:
         d0:d3:85:7e:c5:7e:11:05:50:46:6c:e8:6e:8f:27:8a:67:57:
         18:08:bf:76:88:ea:c8:4b:f9:b5:a5:f4:72:2f:c2:e8:42:02:
         43:0a:12:03:6a:83:36:1f:45:d5:ea:dc:8e:8c:9c:fa:e7:e6:
         6a:67:c3:07:0d:25:33:64:06:63:b7:c5:4d:bf:c8:f3:dd:49:
         89:96:82:9e:fb:85:a2:5b:ce:a5:e3:eb:5c:cb:5e:7f:be:f4:
         61:a3:63:db:47:2b:b2:3c:ad:60:ff:8b:6d:9b:19:9d:68:c4:
         37:72:a2:3e:0f:18:28:e6:69:92:db:cd:c3:43:09:a3:78:03:
         c3:94:85:e4:04:c7:c2:be:b0:85:79:4d:f0:2e:58:9c:63:80:
         d8:c8:d7:18:f0:ce:e5:40:ee:ee:00:d1:09:eb:20:c0:6f:d5:
         86:95:0e:b8:2c:c5:0d:37:d1:89:cc:9e:b9:70:40:dc:c5:01:
         66:ac:37:c4:79:55:2b:8f:6e:b0:46:47:a2:22:d9:6d:79:b7:
         95:03:7b:96:a8:2e:dd:21:1f:2d:6c:c4:25:7c:9f:1e:ae:dd:
         8d:2b:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----