Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
File:                     34352e362e3234382e302f32322d3232203d3e2031.roa (raw, json)
Hash identifier:          WSmkHG6rz/L9PffAuRRI++rZFJBpcVVArY/7lXNgt9I=
Subject key identifier:   DE:A4:E5:D5:F3:5F:4A:FF:72:17:F0:23:17:D7:08:A6:63:1F:41:64
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7DCE27678503EE8667192C5D9DAEA9F0CACC1E6D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa
Signing time:             Mon 07 Oct 2024 17:55:00 +0000
ROA not before:           Mon 07 Oct 2024 17:50:00 +0000
ROA not after:            Mon 06 Oct 2025 17:55:00 +0000
asID:                     1
IP address blocks:        45.6.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:27:67:85:03:ee:86:67:19:2c:5d:9d:ae:a9:f0:ca:cc:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Oct  7 17:50:00 2024 GMT
            Not After : Oct  6 17:55:00 2025 GMT
        Subject: CN=DEA4E5D5F35F4AFF7217F02317D708A6631F4164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:32:7c:6a:91:72:01:93:9d:7d:da:4a:02:
                    20:9f:1f:af:f5:39:e7:5d:66:e2:3c:d7:e7:32:2f:
                    c9:fb:ba:4f:16:8e:49:16:72:1b:06:d1:38:d6:ba:
                    6e:c3:ba:d7:34:62:3b:a4:41:e4:71:2f:ad:36:a1:
                    de:45:3e:f1:db:1c:dd:6e:98:f2:e0:8b:b5:83:d4:
                    de:c3:73:e3:dd:d9:f5:68:dd:24:17:e7:04:46:73:
                    6d:f8:7c:59:4f:b4:78:b9:18:04:82:7e:34:4f:7e:
                    d3:11:0b:9a:22:42:c8:f8:37:84:3c:3f:6a:c6:f6:
                    7f:7f:5f:9f:a6:8e:c9:58:6f:9f:ae:43:c1:ec:20:
                    54:d3:80:1f:c9:1b:30:1e:04:27:fc:a3:e9:a2:14:
                    2b:e7:b5:52:87:72:11:69:ef:58:20:d8:f1:a0:6d:
                    cd:33:45:2d:0c:13:5d:13:11:9d:b7:9c:f0:49:43:
                    2e:75:55:a2:e9:55:b8:1d:f2:a2:a1:f4:04:5e:fb:
                    8c:32:b1:2f:f2:93:89:6c:5a:6b:4f:d2:75:4f:af:
                    c4:0e:0b:8f:79:30:9e:e3:04:77:5d:cf:df:f8:d8:
                    90:5b:99:13:df:60:6b:89:2a:13:4d:f5:53:91:3c:
                    7e:86:46:91:dc:4f:63:32:cb:7c:e5:0f:d2:f8:c4:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A4:E5:D5:F3:5F:4A:FF:72:17:F0:23:17:D7:08:A6:63:1F:41:64
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32322d3232203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:73:5e:4b:16:3f:6b:b3:be:94:c9:ad:b1:5a:5d:5a:8a:
         c3:7c:f2:23:c8:12:42:b4:8c:55:9a:55:3b:95:68:75:be:ba:
         ae:ae:7d:c6:d2:c9:7d:4b:52:b1:77:8b:74:d7:2b:a8:97:05:
         5d:d4:5a:26:71:f0:d2:a8:b2:7c:fb:5f:4b:0d:ad:b3:a9:d8:
         3d:f0:a1:71:00:aa:fd:f3:0e:d2:6e:8a:a4:05:33:39:6c:d3:
         b9:87:72:74:9e:9a:1a:72:4a:53:f2:3f:1c:d0:50:9f:62:75:
         38:d3:7b:56:39:a4:a5:49:cd:bd:c4:3b:fc:7c:86:a3:36:e3:
         c0:c4:1f:c5:d6:ef:26:41:b6:e6:81:4e:b9:a1:72:05:ba:13:
         c7:0e:3f:7f:5d:b2:1e:3a:b7:a5:d7:ee:ff:76:d5:da:3e:71:
         20:63:d2:68:88:a7:bb:7a:21:0f:aa:e8:84:09:ca:b3:e4:ce:
         6d:3b:0b:9a:3d:2e:1d:15:fb:67:46:cf:71:c6:65:80:b2:6e:
         4e:a5:d2:54:0f:65:4b:e2:3a:e4:27:9a:14:52:76:dd:91:0a:
         39:42:56:c5:32:a9:53:70:a9:18:a4:43:f6:c7:c3:45:3c:96:
         a8:01:4b:5a:91:07:ca:87:a0:a8:08:a1:88:30:e7:36:6f:79:
         8e:41:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----