Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32322d3234203d3e20323636363732.roa
File:                     34352e37312e302e302f32322d3234203d3e20323636363732.roa (raw, json)
Hash identifier:          bCnGsQLbRYmJ23Z4ihIMq4duJiXUt6WbPSiNQkITQ28=
Subject key identifier:   D5:F4:15:C1:C6:E9:77:3D:26:CA:7F:11:A9:41:D5:D3:92:E0:2B:C6
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       62C202D8654F5639363F2462DEDF11A8B5912520
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32322d3234203d3e20323636363732.roa
Signing time:             Tue 05 Mar 2024 17:50:23 +0000
ROA not before:           Tue 05 Mar 2024 17:45:23 +0000
ROA not after:            Tue 04 Mar 2025 17:50:23 +0000
asID:                     266672
IP address blocks:        45.71.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c2:02:d8:65:4f:56:39:36:3f:24:62:de:df:11:a8:b5:91:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Mar  5 17:45:23 2024 GMT
            Not After : Mar  4 17:50:23 2025 GMT
        Subject: CN=D5F415C1C6E9773D26CA7F11A941D5D392E02BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:b0:60:bb:63:5e:1a:7a:1d:ce:58:3b:50:
                    c9:a7:f0:1f:d7:42:3e:b3:a0:56:15:01:9e:5d:c5:
                    91:dd:65:a9:ed:54:9d:4f:e6:e3:95:47:7d:13:eb:
                    23:ba:70:93:f8:2b:ab:76:fc:9c:bb:34:ff:12:5a:
                    63:22:b7:b2:04:72:d4:5d:a5:04:6e:89:b4:40:65:
                    6f:07:54:94:f0:bd:a7:d5:da:75:8c:78:e2:d7:42:
                    d2:ff:02:99:b8:f5:b4:19:8e:aa:b2:03:ec:9d:ec:
                    c3:a2:44:50:fb:ab:d0:c6:51:c7:c8:65:56:d1:28:
                    19:7a:75:96:dd:cb:7f:17:8d:2e:9e:ac:8d:97:5a:
                    15:4c:5b:e0:d1:7b:5d:da:af:70:2c:e0:73:0b:69:
                    5b:50:42:7e:ca:1a:9d:cc:36:d4:2d:19:de:f6:67:
                    a2:87:01:ec:3a:df:55:96:2a:99:4f:28:73:0e:6e:
                    b4:f8:59:43:c4:4e:51:a0:fb:b3:e0:d4:ad:24:e5:
                    04:d7:d8:db:80:2f:72:99:c7:e0:fd:6a:e4:35:3b:
                    19:76:fc:b2:2c:e9:e2:ce:38:85:17:f7:64:86:57:
                    c5:5f:c5:2b:99:44:29:71:12:6d:25:db:71:bc:04:
                    94:94:b2:4d:5f:d9:e0:27:b7:3c:21:95:f4:e8:57:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F4:15:C1:C6:E9:77:3D:26:CA:7F:11:A9:41:D5:D3:92:E0:2B:C6
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32322d3234203d3e20323636363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:64:59:e6:f3:d4:0b:1b:07:1e:9f:5d:3e:12:4e:e2:d2:99:
         a9:32:52:14:46:a5:94:ff:02:72:d6:23:80:58:c8:03:ab:e2:
         c3:38:58:c0:d3:ea:2d:9e:6f:c9:60:bb:21:e0:74:c2:a3:2e:
         15:2f:bd:09:ac:b9:1f:a7:e3:5d:24:f1:0c:8e:7f:aa:b8:26:
         7c:66:e7:97:2f:da:e4:bd:69:6a:07:cf:9b:f2:5b:d7:9b:83:
         58:be:90:97:d9:20:df:b9:71:45:ca:d4:5f:9c:3a:51:39:90:
         71:c4:44:7a:70:16:5b:5a:51:86:10:e2:ce:9f:d1:16:a0:d8:
         f7:1d:f2:8e:12:6b:ac:42:75:00:80:e3:52:cd:14:7f:7c:bb:
         cf:25:a7:d8:33:11:ae:3f:6a:3f:30:d8:9b:bd:cf:e1:9e:9e:
         48:37:a5:52:92:40:cb:9b:02:85:5d:b7:6a:ac:b8:66:29:bb:
         6a:de:fd:b6:7c:41:1c:18:35:66:5a:8c:c5:7f:1c:3d:f4:6c:
         f5:05:fa:3b:48:7d:81:c5:94:02:ae:11:4d:63:b8:75:ad:40:
         14:ce:cc:d8:79:67:f4:9c:22:fa:18:76:0c:b7:d8:b7:4b:e0:
         0b:f0:38:32:a4:49:00:b1:e9:02:cd:62:98:a1:9c:45:b1:f3:
         f2:07:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----