Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/60534171734cb6da40753ca0d927637283706961.roa
File:                     60534171734cb6da40753ca0d927637283706961.roa (raw, json)
Hash identifier:          Gefda0mPx36mMjKVL0BCLk8PHzOYBRyA/Bp5XaQKJP0=
Subject key identifier:   00:DC:EA:5A:AB:87:19:DB:FD:F5:5F:19:DB:4E:A6:20:AA:D7:DA:1B
Certificate issuer:       /CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
Certificate serial:       47B8
Authority key identifier: 8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/60534171734cb6da40753ca0d927637283706961.roa
Signing time:             Tue 25 Jul 2023 13:44:50 +0000
ROA not before:           Mon 24 Jul 2023 13:44:50 +0000
ROA not after:            Fri 25 Jul 2025 13:44:50 +0000
asID:                     52318
IP address blocks:        45.237.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18360 (0x47b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
        Validity
            Not Before: Jul 24 13:44:50 2023 GMT
            Not After : Jul 25 13:44:50 2025 GMT
        Subject: CN=60534171734cb6da40753ca0d927637283706961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:85:39:2f:ce:d2:ec:5a:f2:a4:f4:76:70:
                    2e:3c:b6:23:0e:78:72:c1:da:71:05:c5:af:c0:40:
                    c6:90:9e:f0:9f:92:ee:63:24:68:8f:02:62:3c:9c:
                    a7:83:54:80:b6:0d:38:d9:e8:73:2e:e3:d7:bc:82:
                    84:21:05:fb:d5:4e:e4:fb:ef:35:06:c1:19:5b:18:
                    fa:fa:2c:c0:53:b6:84:6e:89:d8:24:c7:c9:b1:b8:
                    b6:5f:6c:ce:1b:b4:1b:00:96:03:85:de:1f:77:b1:
                    e1:13:a6:9d:c5:c1:da:b1:3f:23:5d:d3:37:75:e3:
                    bb:f9:2e:0b:59:c4:9f:f1:5c:1b:11:04:60:74:08:
                    c3:6c:ca:77:74:4f:7c:88:f4:e4:05:7b:0a:22:6e:
                    a7:68:d0:9f:44:54:23:ad:70:3b:2b:3d:ae:68:1d:
                    b9:e7:ba:bc:4c:4a:af:39:2f:ae:2c:1c:89:2e:e8:
                    71:e3:da:08:bf:c0:ba:6b:e2:aa:b4:1f:62:fb:dd:
                    eb:03:9b:85:bc:cc:9e:11:e4:88:f1:9c:ac:18:29:
                    34:0a:c7:d9:49:df:1d:5f:3d:72:f9:6b:0e:27:97:
                    35:2f:2e:53:0a:b2:40:a0:eb:98:9c:ee:54:17:25:
                    67:e5:17:1d:0d:86:fe:35:dd:c0:89:91:f8:24:cc:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DC:EA:5A:AB:87:19:DB:FD:F5:5F:19:DB:4E:A6:20:AA:D7:DA:1B
            X509v3 Authority Key Identifier:
                keyid:8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/60534171734cb6da40753ca0d927637283706961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/a7f9ed94b559a4db41aea1589c5195ae51090fc5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:45:f3:f7:d1:7b:fd:63:51:95:0f:8c:a4:d5:a4:30:e8:
         ad:b9:8c:93:cc:c6:3a:74:e9:46:c4:07:c8:48:dd:74:67:a0:
         5e:d1:24:68:b3:b9:e1:23:4e:87:6f:e8:ad:f0:0d:fe:cf:8b:
         31:01:91:4b:4d:f9:d2:45:e1:f4:b6:be:6f:e2:94:60:8a:90:
         af:7c:12:66:d8:07:03:15:91:9a:4f:1a:f3:ca:10:9b:3c:27:
         e0:6c:d7:5a:e6:93:04:5f:ed:ab:ab:25:41:92:0b:d1:c1:19:
         c9:fd:4d:32:5c:24:5e:f1:3b:f5:ab:3c:cb:ce:55:8b:f4:ba:
         1e:e7:13:18:8e:57:79:54:65:97:87:b9:5b:8b:3a:75:01:7c:
         a2:bc:b7:da:76:2b:8f:11:95:2d:90:7e:93:d9:75:d9:4f:fd:
         c9:ad:1e:98:47:f2:83:08:d8:2c:ac:d3:d3:dd:1c:4b:46:3b:
         b3:3d:d2:b0:a5:fe:85:4f:38:c9:0e:28:7d:bc:81:e6:9b:c6:
         e0:f8:5d:cd:a3:4c:b6:fc:17:4f:9b:9e:64:bf:94:c8:83:2e:
         f0:b6:38:bd:d2:42:6b:19:d5:f1:c9:09:98:4c:4c:78:90:0b:
         d5:5b:a7:5c:d3:b8:38:27:71:72:8d:1c:0c:00:fb:69:17:a4:
         31:38:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----