Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323633363834.roa
File:                     34352e3232342e382e302f32322d3234203d3e20323633363834.roa (raw, json)
Hash identifier:          /B2mwzlHGupnKG2sWMhkSJenX/n40c/Kz4b+shbD3Qw=
Subject key identifier:   50:B8:97:CC:B1:B4:98:6B:E5:A7:BD:EF:21:A5:3F:F1:E3:65:37:87
Certificate issuer:       /CN=F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC
Certificate serial:       74BEFD6283A2015FCFAC956A88D273E035DD56CB
Authority key identifier: F5:FC:AA:8E:ED:4B:ED:67:78:F4:CE:2D:C5:81:1C:E1:55:1F:8F:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323633363834.roa
Signing time:             Tue 04 Feb 2025 18:03:28 +0000
ROA not before:           Tue 04 Feb 2025 17:58:28 +0000
ROA not after:            Tue 03 Feb 2026 18:03:28 +0000
asID:                     263684
IP address blocks:        45.224.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:fd:62:83:a2:01:5f:cf:ac:95:6a:88:d2:73:e0:35:dd:56:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC
        Validity
            Not Before: Feb  4 17:58:28 2025 GMT
            Not After : Feb  3 18:03:28 2026 GMT
        Subject: CN=50B897CCB1B4986BE5A7BDEF21A53FF1E3653787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:10:96:b5:d5:d6:7f:c3:ad:7b:92:b5:28:
                    dd:33:ac:b2:99:01:71:c1:2d:62:08:64:45:c6:9f:
                    15:2c:7c:ac:1e:ad:08:9e:e3:2c:fc:70:64:a2:f5:
                    8d:11:45:4d:9c:10:dd:8c:7e:f5:d9:f9:13:b1:74:
                    4f:17:05:d6:bc:be:32:90:0d:65:76:86:4b:bc:6d:
                    8c:45:58:23:25:dc:46:fe:46:2b:87:56:4b:02:dc:
                    e1:8a:97:38:a6:5b:e8:c3:51:c8:d1:dd:31:8d:ca:
                    f8:c4:27:d3:80:3a:92:90:bb:c3:29:e2:26:06:21:
                    b2:89:4b:51:bb:6a:17:32:3f:1c:63:58:00:3f:a8:
                    46:3c:9b:b9:87:fb:bb:a5:0e:2d:53:05:31:97:ac:
                    ec:41:9b:0c:81:01:81:dd:43:e6:1c:ac:4c:35:d4:
                    0d:63:fe:ae:d8:43:5d:df:03:35:f8:55:ae:7a:ae:
                    3c:17:a9:dc:d6:de:e0:0f:8d:2b:8d:b5:b9:1b:83:
                    22:8f:28:3e:63:1a:4e:0b:19:b5:de:be:ae:22:06:
                    63:52:ed:30:b0:b1:9a:f7:9a:73:96:6b:b3:b4:d1:
                    84:b7:ee:23:2e:70:3f:bd:6d:33:f9:5e:79:da:0e:
                    af:60:81:0a:f5:c6:65:98:df:70:da:2f:ce:94:d7:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:97:CC:B1:B4:98:6B:E5:A7:BD:EF:21:A5:3F:F1:E3:65:37:87
            X509v3 Authority Key Identifier:
                keyid:F5:FC:AA:8E:ED:4B:ED:67:78:F4:CE:2D:C5:81:1C:E1:55:1F:8F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FCAA8EED4BED6778F4CE2DC5811CE1551F8FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CE112AA778D7A1E197C0DBF0EEC17060CFEF80F72FDE0319E174FF4EA9DBE5/0/34352e3232342e382e302f32322d3234203d3e20323633363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:af:31:0b:05:98:2c:21:6d:b1:24:e9:05:96:8c:7c:52:
         b1:21:d5:5f:ba:68:c2:04:90:4a:ff:e4:20:76:d9:fe:4a:04:
         94:61:4d:a2:e1:d1:55:11:d3:87:1b:a8:7e:b9:46:ac:0b:52:
         2d:70:e2:c1:7c:ba:fe:fb:e4:66:51:21:1b:9f:72:7e:76:17:
         1a:f4:6f:fd:3d:f2:16:4a:41:a7:77:d8:28:e4:e4:5a:b2:b5:
         6f:ec:d1:1f:64:fe:5a:f4:08:47:ed:53:dc:bd:e8:f5:cf:f8:
         70:bf:d9:14:df:b3:dd:a2:25:fd:5e:a1:c8:ca:13:21:28:2e:
         63:57:82:02:69:07:2e:eb:e1:53:ec:a6:19:20:37:52:30:07:
         c3:65:26:72:80:4e:bb:78:c8:07:0b:a7:2b:de:02:17:db:f7:
         fd:85:6a:03:c6:75:2d:1d:6c:59:be:05:fb:e7:db:92:06:42:
         5f:75:87:a7:1d:4d:ba:cb:0a:2d:16:f4:20:d5:fa:05:d9:8e:
         33:98:45:dd:c1:3b:1e:01:41:6f:85:75:03:19:9b:95:63:39:
         5a:5e:3b:ae:2a:b4:6e:c0:a2:13:15:46:62:72:97:75:81:34:
         d7:58:17:0d:3e:8f:ba:00:4e:95:da:9c:3c:69:87:c8:f4:02:
         c8:56:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----