Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
File:                     34352e37312e3235342e302f32332d3234203d3e20323732303735.roa (raw, json)
Hash identifier:          Hv+NpGRWPRwXy71VHtS8zEOrcjx+HGC7eYnGNsYZJOE=
Subject key identifier:   A3:B9:72:61:0A:39:DB:11:82:66:BF:D5:98:5A:86:55:B7:82:8A:F6
Certificate issuer:       /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial:       21B352ED357A354D2E96649FB436A82EE9585294
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
Signing time:             Tue 05 Mar 2024 18:00:25 +0000
ROA not before:           Tue 05 Mar 2024 17:55:25 +0000
ROA not after:            Tue 04 Mar 2025 18:00:25 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:52:ed:35:7a:35:4d:2e:96:64:9f:b4:36:a8:2e:e9:58:52:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
        Validity
            Not Before: Mar  5 17:55:25 2024 GMT
            Not After : Mar  4 18:00:25 2025 GMT
        Subject: CN=A3B972610A39DB118266BFD5985A8655B7828AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:94:0c:10:c2:fc:9f:e3:6c:d3:d7:7a:9d:
                    07:f9:c2:75:ca:86:a1:9b:2a:e6:63:0c:82:7d:26:
                    2a:ad:21:d0:63:db:4b:eb:df:df:61:1e:77:f3:91:
                    60:48:ca:b2:33:0c:61:0e:82:73:aa:e3:05:b5:5c:
                    e9:b7:66:02:cd:2b:81:01:6c:c8:3f:49:2c:c1:23:
                    80:40:9c:45:d4:a9:b2:38:22:4a:0e:7c:d3:53:af:
                    ec:ed:5f:37:8f:be:2e:82:06:eb:3a:6f:81:48:25:
                    05:55:d1:8d:c4:34:ff:12:9d:66:78:b9:87:c3:31:
                    54:d3:87:aa:ef:1d:af:81:55:42:a9:61:65:97:65:
                    e9:cb:6b:38:9f:dc:52:8b:90:f9:47:78:bf:31:27:
                    6b:9d:7f:d0:e5:ca:15:12:56:b2:6d:b6:90:64:c8:
                    d6:85:c3:e5:51:ab:fd:25:82:b5:60:72:99:df:9c:
                    70:58:0a:35:43:89:4f:8d:b5:99:55:66:a8:3b:0a:
                    f6:bb:2b:1d:60:58:bb:97:70:79:f5:6f:24:df:10:
                    e3:9e:35:14:ce:9d:8e:60:9e:cd:8d:fc:ac:4f:a6:
                    75:7b:49:22:3d:c1:c2:16:1a:14:18:90:71:78:98:
                    3d:91:5c:e4:16:a9:a5:e0:4e:e4:15:6e:9d:33:5b:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:72:61:0A:39:DB:11:82:66:BF:D5:98:5A:86:55:B7:82:8A:F6
            X509v3 Authority Key Identifier:
                keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:09:5c:01:4f:3e:f5:01:da:79:62:dd:ce:3a:02:53:9d:
         9c:48:e9:d4:5c:53:1b:8b:bc:b2:a7:50:af:db:69:50:3b:72:
         6d:9b:03:73:12:b7:4e:85:83:11:74:b9:a6:e6:06:5a:88:69:
         70:dc:95:9c:12:52:78:24:22:49:5c:95:2d:46:db:b5:d7:92:
         28:0c:f6:d5:d4:cf:6f:c3:d8:2a:cc:c3:9d:82:21:a2:ec:22:
         f0:9e:32:d7:68:68:d5:db:3d:29:8e:69:4f:5b:83:d3:dc:5f:
         12:30:18:76:b7:0c:04:1b:73:f2:b3:0f:4f:f4:36:41:ec:60:
         e8:21:df:7e:31:c2:7a:c2:c5:b3:58:87:c9:4b:17:5b:34:42:
         6b:5d:b1:9c:48:69:6e:39:e7:22:5e:08:ac:d1:af:6a:17:16:
         d4:31:2c:db:87:01:23:54:ac:c9:90:32:3a:4e:d0:f3:7b:e4:
         f9:3b:d6:00:b6:c4:8c:ad:c6:20:c9:4a:90:14:4a:3d:12:68:
         07:90:ca:bc:17:cc:4f:db:ec:23:f7:c3:68:75:0b:b4:75:55:
         bf:4b:c4:e5:9d:76:d3:53:3d:fb:69:af:62:de:94:94:99:6d:
         a3:aa:bf:00:be:a2:22:c9:39:cd:fa:90:2e:75:28:06:ba:76:
         82:88:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----