Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131322e302f32312d3234203d3e20323636373537.roa
File:                     3134382e3232322e3131322e302f32312d3234203d3e20323636373537.roa (raw, json)
Hash identifier:          QHtup+GTxprGGgMNXrn2OY/jCGNKFnaeENcCD4SLFe4=
Subject key identifier:   E6:F1:35:95:E2:F2:7B:B1:E9:B3:0D:01:9A:82:CB:18:F0:78:BB:88
Certificate issuer:       /CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
Certificate serial:       355A76A1A8734CEECF27A37CBCB53597DF4F2466
Authority key identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131322e302f32312d3234203d3e20323636373537.roa
Signing time:             Mon 14 Oct 2024 22:45:00 +0000
ROA not before:           Mon 14 Oct 2024 22:40:00 +0000
ROA not after:            Mon 13 Oct 2025 22:45:00 +0000
asID:                     266757
IP address blocks:        148.222.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5a:76:a1:a8:73:4c:ee:cf:27:a3:7c:bc:b5:35:97:df:4f:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
        Validity
            Not Before: Oct 14 22:40:00 2024 GMT
            Not After : Oct 13 22:45:00 2025 GMT
        Subject: CN=E6F13595E2F27BB1E9B30D019A82CB18F078BB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:b8:2b:c2:f0:2e:47:4e:dc:e0:5d:94:77:
                    e6:52:7e:f7:b0:c7:d4:d4:e5:6f:63:6b:e5:38:41:
                    de:16:49:f0:12:f9:cc:b1:56:df:4d:8e:00:40:db:
                    7f:e4:28:98:d5:a3:f5:c4:bc:34:06:ff:c0:1a:c2:
                    a4:14:4d:4a:02:34:92:26:6b:4f:86:09:73:ea:b0:
                    c5:91:2d:4d:32:cd:ae:1a:b3:65:67:4b:7e:f1:ea:
                    16:45:cd:f5:f2:84:da:72:0e:ca:61:a0:2b:a8:4b:
                    68:64:d8:d9:a8:70:d2:a8:02:0b:96:ba:50:5e:fd:
                    78:51:2d:d0:7d:54:13:64:a3:9d:46:8d:d1:a8:c6:
                    f7:b2:61:2f:76:77:b4:a8:cd:7b:cc:c2:fe:09:88:
                    f9:ce:d2:4a:d0:3d:d5:88:fb:e4:bd:12:ea:32:44:
                    0b:fc:85:f6:3a:74:81:bc:70:94:e6:a9:f5:b8:bd:
                    92:de:12:8c:93:dc:65:3f:3a:7b:81:8e:bc:b5:70:
                    45:b3:e4:f8:9b:e1:d0:54:fe:dd:31:7d:a4:8c:6d:
                    a1:03:06:62:5c:f9:b3:4f:77:f8:c5:2a:40:60:f1:
                    b8:0c:43:25:77:4d:1e:af:c1:4f:8b:b7:85:d1:6b:
                    c0:55:ef:03:84:6c:68:20:f8:69:05:f5:a1:54:09:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:35:95:E2:F2:7B:B1:E9:B3:0D:01:9A:82:CB:18:F0:78:BB:88
            X509v3 Authority Key Identifier:
                keyid:2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131322e302f32312d3234203d3e20323636373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:91:69:42:d2:78:4f:56:f5:75:8f:04:42:05:39:b2:75:
         a1:d3:93:81:2c:cd:63:60:f6:df:03:cb:b3:e4:06:15:58:f8:
         e6:33:cc:45:ee:7e:f8:67:c1:a0:7b:35:f5:06:75:7a:01:ad:
         27:08:71:46:c0:b8:0a:39:f0:31:cb:b6:39:51:e4:0d:a5:31:
         67:67:d7:a2:5d:5a:f5:0a:fe:94:ea:4c:63:61:d6:2f:6f:7d:
         c7:f3:15:a7:46:31:98:12:ae:2a:a7:c1:54:ab:a2:e4:92:ca:
         ee:e7:89:3e:44:91:92:9a:1b:80:ff:b5:42:a3:d2:dd:6f:c4:
         65:bc:14:b5:33:fa:9a:c8:c6:c4:28:88:72:15:f1:cc:93:13:
         41:36:20:54:f1:aa:6f:01:1a:ba:d8:dc:9f:ac:b4:ea:4b:79:
         d3:1f:31:ed:b5:8b:2a:09:f2:c3:eb:41:06:62:6b:6e:bb:11:
         64:f2:40:49:84:72:c7:5a:e0:fe:90:d6:6a:34:78:07:65:81:
         22:34:b3:97:1e:8f:66:64:84:03:de:35:98:2d:1c:f5:5b:cb:
         05:09:63:a7:a5:75:66:2f:8a:07:f9:b0:e4:20:c4:0a:66:f1:
         e6:f5:96:57:e9:43:9d:5f:42:6e:b6:84:5a:ca:84:5a:51:c4:
         5e:c8:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----