Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
File:                     34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa (raw, json)
Hash identifier:          YrmFGnOtX3WWBudvAH2gmFVWRZTSE7KSXbuiJ/3KgIQ=
Subject key identifier:   05:C0:87:02:9B:EE:83:71:E9:01:E0:F3:2D:85:61:6A:45:DD:B8:DA
Certificate issuer:       /CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Certificate serial:       34814BF097DFF247B95AE3E56E5C6F9665AC52D5
Authority key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa
Signing time:             Thu 21 Mar 2024 13:30:00 +0000
ROA not before:           Thu 21 Mar 2024 13:25:00 +0000
ROA not after:            Thu 20 Mar 2025 13:30:00 +0000
asID:                     269786
IP address blocks:        45.188.208.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:4b:f0:97:df:f2:47:b9:5a:e3:e5:6e:5c:6f:96:65:ac:52:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
        Validity
            Not Before: Mar 21 13:25:00 2024 GMT
            Not After : Mar 20 13:30:00 2025 GMT
        Subject: CN=05C087029BEE8371E901E0F32D85616A45DDB8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:c5:e3:9f:10:4f:0e:c7:df:86:b6:95:01:
                    6e:19:5f:41:b8:71:e2:8e:d6:8d:7b:ea:4c:3f:a9:
                    7e:99:3c:dd:64:c3:70:df:4f:e9:9f:cb:b5:4e:68:
                    06:e8:40:d2:68:c8:6d:d1:27:5c:10:3d:b6:47:16:
                    fb:0a:f2:00:46:70:6c:0a:d3:0a:66:27:36:26:81:
                    2e:6f:62:8c:73:ce:84:74:d3:84:a3:80:e4:8b:e6:
                    a8:d3:f9:f0:46:18:28:04:a7:34:a5:c2:7a:7f:e0:
                    8e:10:21:04:32:a1:1d:2a:14:3b:3b:3a:05:d5:8d:
                    44:8e:1c:0c:3b:71:4d:f4:8b:09:de:e2:70:1d:92:
                    b1:56:a0:d6:54:9b:49:6f:13:59:9f:13:62:a0:6f:
                    52:3d:b2:44:b5:6c:45:e6:51:bf:96:20:78:87:f9:
                    91:97:9c:b3:21:f8:ac:e3:8d:c8:44:34:b2:50:9d:
                    af:b0:ca:11:4c:d3:06:4c:2d:e2:2b:f6:9c:00:72:
                    2d:9e:d0:21:e4:68:bf:e8:3f:bb:e9:3a:b4:80:7a:
                    ff:bc:29:ac:cb:92:16:f7:4f:bd:de:8c:aa:de:40:
                    5b:94:f8:7b:7b:4c:76:90:5f:71:03:bb:ae:04:4f:
                    4f:f6:a1:45:98:99:e7:c9:1c:b5:81:ba:f2:e9:9a:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:87:02:9B:EE:83:71:E9:01:E0:F3:2D:85:61:6A:45:DD:B8:DA
            X509v3 Authority Key Identifier:
                keyid:AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3230382e302f32332d3234203d3e20323639373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:0c:45:75:4a:fb:25:e5:24:fc:8b:2d:db:b9:f0:9d:a1:
         90:9b:f9:80:f2:f5:eb:96:7d:fd:ce:71:61:9e:aa:51:f3:b0:
         9f:70:87:f9:c6:ab:47:3e:b7:18:b8:68:74:7b:12:42:45:c7:
         00:72:4e:b6:60:d3:d6:18:e8:ec:af:90:a3:02:52:0d:e1:19:
         4d:13:c2:08:12:ae:15:17:0e:c9:80:97:17:ec:6d:3a:85:ca:
         66:c5:93:19:fa:54:19:65:cc:72:48:60:65:f4:0b:32:4f:62:
         eb:40:5b:75:48:84:e5:cb:01:cb:91:67:70:fe:14:5b:d3:94:
         b7:b9:6f:8c:6f:3e:56:34:bf:b4:77:d5:3b:32:81:5b:11:fb:
         34:b1:7c:70:ad:96:d2:d3:58:b5:99:5d:95:ef:5c:29:37:3f:
         88:49:1d:38:1f:a2:34:fc:2b:34:29:35:44:e9:fd:e5:27:7b:
         51:84:ab:f2:96:27:98:1f:5e:20:61:e6:e0:cd:0b:e9:ab:a3:
         83:43:af:76:bd:7f:3a:7b:b1:d4:aa:05:64:ea:8e:0f:61:0d:
         a5:64:eb:d5:3a:f2:21:e3:3d:41:bd:4d:48:28:af:37:14:c8:
         70:53:16:f0:59:10:24:55:d0:31:1c:35:e6:fc:58:41:a0:0f:
         d9:dc:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----