Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa
File:                     3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa (raw, json)
Hash identifier:          mQA/wQ4d0ir+JnwD6mutLrQy8+hfaF46uXNEg2dA+6E=
Subject key identifier:   D6:8A:18:6C:F7:49:63:05:47:8C:77:48:45:43:6E:A2:73:A3:CF:DC
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       5F310345F45D4EE82DFF9ADBFEDBA4D975FA7A59
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa
Signing time:             Tue 05 Mar 2024 18:01:56 +0000
ROA not before:           Tue 05 Mar 2024 17:56:56 +0000
ROA not after:            Tue 04 Mar 2025 18:01:56 +0000
asID:                     28093
IP address blocks:        170.254.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:31:03:45:f4:5d:4e:e8:2d:ff:9a:db:fe:db:a4:d9:75:fa:7a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Mar  5 17:56:56 2024 GMT
            Not After : Mar  4 18:01:56 2025 GMT
        Subject: CN=D68A186CF7496305478C774845436EA273A3CFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:d4:54:38:89:3e:a4:5a:a6:5c:0f:e7:28:
                    09:0a:30:b1:d9:fb:e8:96:4a:e4:cc:51:de:0f:db:
                    d1:c2:51:78:56:bd:f4:b7:67:3a:16:3c:4f:08:66:
                    66:0c:c8:74:48:02:ab:d9:78:2d:c9:3a:ef:b1:89:
                    72:b0:df:3d:33:40:e5:b3:19:c0:63:49:95:b3:7a:
                    86:8d:0a:63:7e:da:b7:4d:85:cb:80:35:3e:87:11:
                    89:23:48:e0:1f:f1:cc:23:f0:ed:21:7e:0e:e1:16:
                    80:9b:b5:ad:f5:e2:85:c0:e5:32:f8:05:75:aa:35:
                    2b:df:ca:d8:20:04:45:61:c0:48:06:ca:31:96:81:
                    4f:95:67:91:ab:e7:77:3c:c8:1b:92:95:0d:42:3d:
                    41:89:4c:df:bb:c2:28:7d:91:9a:20:c8:e3:04:83:
                    6f:50:c2:b3:ca:fb:f5:4e:95:39:36:ec:55:b1:ef:
                    b3:ef:7b:dc:b4:3f:f9:5b:6d:ec:22:c0:cc:db:dd:
                    d6:31:d3:80:dd:c6:78:16:b9:57:8a:8f:21:62:96:
                    09:3b:61:da:52:5b:e5:89:34:7f:17:aa:3c:10:f8:
                    b0:58:92:7c:63:33:63:67:49:c2:3f:d4:9f:c8:a8:
                    de:91:fb:d3:b5:19:a6:8e:09:f3:4b:99:1b:6b:c8:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8A:18:6C:F7:49:63:05:47:8C:77:48:45:43:6E:A2:73:A3:CF:DC
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:de:af:94:b9:b5:cf:5c:95:14:d4:d9:f6:8c:ee:19:6c:da:
         44:6f:d3:01:d9:47:cb:a5:29:d1:25:58:d9:a5:69:21:de:7b:
         57:4c:11:0d:f8:c7:e5:f6:21:ac:93:87:87:64:83:a4:da:85:
         3e:d8:62:33:dc:56:61:9d:da:ec:31:4e:5c:35:5c:96:9c:d7:
         cb:fc:de:f6:bf:14:e9:17:7a:6d:23:2a:12:11:26:7e:f9:44:
         0e:b9:d5:f4:f4:61:91:38:0a:70:de:2c:75:f7:4d:0b:63:78:
         44:5a:ca:2d:da:01:65:00:87:b1:92:e9:35:08:4b:4c:d1:f5:
         72:3f:bb:1e:0b:71:92:81:02:b6:c4:26:09:16:07:d0:d3:5e:
         69:6b:0f:c6:9e:60:02:d2:91:ab:b0:4c:b7:dd:83:f8:ee:49:
         5c:45:33:ca:7b:bb:9c:89:28:72:13:63:c7:21:92:ff:ca:6e:
         4a:47:d7:f8:05:2a:73:00:2d:6a:ee:06:e4:d6:c3:33:e3:b3:
         3e:bb:be:0b:da:3b:df:8f:93:92:d8:68:4e:0b:e3:3a:f8:9f:
         54:d5:94:54:bf:6c:d6:d5:7e:b8:3a:94:ef:98:b6:2c:a0:c1:
         90:4b:18:5d:71:e9:72:71:a0:81:ba:06:ad:42:1b:0c:e5:62:
         25:cd:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----