Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa
File:                     34352e3136322e302e302f32332d3234203d3e203134313837.roa (raw, json)
Hash identifier:          JjlVQA7Em1tzg3gLgT6XKnAt1ywvdyXukwja9Hvw3kc=
Subject key identifier:   F7:BE:A2:00:B7:E9:5F:B2:83:D1:95:D1:E8:E6:D9:8B:CF:09:19:E1
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       6C9E5A026E0F972E1CF593C2E6F5CB4DE84FF679
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa
Signing time:             Wed 12 Jun 2024 21:45:00 +0000
ROA not before:           Wed 12 Jun 2024 21:40:00 +0000
ROA not after:            Wed 11 Jun 2025 21:45:00 +0000
asID:                     14187
IP address blocks:        45.162.0.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9e:5a:02:6e:0f:97:2e:1c:f5:93:c2:e6:f5:cb:4d:e8:4f:f6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Jun 12 21:40:00 2024 GMT
            Not After : Jun 11 21:45:00 2025 GMT
        Subject: CN=F7BEA200B7E95FB283D195D1E8E6D98BCF0919E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:40:ea:57:78:2f:18:29:11:00:6e:81:77:
                    61:8c:0b:d8:31:a1:94:7b:c1:b4:ea:8d:c3:2b:bd:
                    5f:1c:84:07:27:18:a1:26:d9:62:87:8e:32:b3:94:
                    e7:1c:88:c1:63:c6:6a:f5:80:91:f7:86:2a:4c:d7:
                    a6:de:f4:36:8f:25:25:25:14:f6:9b:a4:4b:7e:7c:
                    70:d1:1a:bc:f5:77:07:cb:e5:7a:31:2d:06:ce:ff:
                    67:5c:ae:33:c3:66:ba:b4:51:5b:e4:89:02:a7:64:
                    b7:b2:a4:e6:6a:10:86:52:2e:2f:e0:f1:0d:0c:9e:
                    10:9f:d7:a9:02:47:14:9b:f7:cf:21:60:54:7f:d1:
                    fd:9d:2a:87:65:b2:4e:fb:b7:1a:1e:8a:c9:9a:d5:
                    94:25:87:f8:05:42:92:76:67:fd:e0:a2:48:df:40:
                    0c:d3:ec:99:a1:94:72:8c:13:1d:57:af:8d:c2:b4:
                    5d:57:26:b0:ab:01:1d:d0:28:47:bf:3c:f6:44:f3:
                    f0:46:d5:28:f0:e7:78:8a:af:7d:8b:11:54:a0:54:
                    5f:b5:12:18:f2:f0:45:b3:10:66:06:0a:4f:5f:cc:
                    7d:01:06:f8:27:ed:a2:29:51:e8:3c:f5:2a:14:0d:
                    f6:2b:58:ad:9d:c1:57:67:7c:a1:8c:7a:d2:9c:89:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:A2:00:B7:E9:5F:B2:83:D1:95:D1:E8:E6:D9:8B:CF:09:19:E1
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32332d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:75:3d:35:9b:72:82:90:c9:0f:69:67:46:eb:8e:a0:e6:
         bc:5e:d2:40:2e:85:7e:93:6b:7f:b8:f0:93:b4:4e:dc:05:4c:
         f4:63:76:36:7f:92:b8:7b:13:da:4e:00:d6:4d:d0:24:e1:d1:
         f4:9f:99:28:ac:20:a5:99:14:dc:a8:60:b1:14:39:29:05:31:
         46:5e:ca:67:27:09:4c:c8:c4:a3:d6:0b:ee:bb:b2:72:da:d1:
         be:0f:a5:96:8f:01:22:c4:d0:f0:38:ea:2f:62:a0:27:0c:93:
         0b:2e:67:f8:96:cc:ac:63:7a:e1:53:a7:ee:56:a6:1d:48:1a:
         1e:f6:54:5f:b6:d4:c6:63:41:b2:67:28:5c:e1:76:8c:84:8d:
         2a:7b:5c:eb:a2:70:fc:7e:80:20:41:aa:1f:9f:35:82:3e:b3:
         b3:74:f4:ef:55:a5:51:fb:6e:9c:da:4b:c0:5a:df:07:7d:be:
         ec:56:12:91:42:18:82:b8:b7:96:71:08:2c:40:54:7f:3d:5b:
         17:bd:a6:96:39:78:ba:5b:5e:fc:b5:df:d2:ab:68:99:ad:3f:
         5f:7e:f8:3e:43:73:d3:39:68:d9:2d:0b:e1:94:8b:88:a5:7e:
         fd:29:5d:d5:9e:fc:b1:93:e5:7e:b5:13:48:57:b6:10:85:95:
         e1:fa:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----