Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/1fc6430bb67c7ea72b652238cd64800c6d6cc0b7.roa
File:                     1fc6430bb67c7ea72b652238cd64800c6d6cc0b7.roa (raw, json)
Hash identifier:          FjTuV5TujZUeZhOIjfAAoj/QTRwudy7kvYyV7wshRqE=
Subject key identifier:   38:41:D6:22:BA:4E:5B:59:74:33:D4:2B:B4:93:BA:60:3B:D4:BF:05
Certificate issuer:       /CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
Certificate serial:       0ABD
Authority key identifier: 5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/1fc6430bb67c7ea72b652238cd64800c6d6cc0b7.roa
Signing time:             Fri 13 Aug 2021 18:11:20 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     52327
IP address blocks:        45.224.124.0/22 maxlen: 24
                          2803:3a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=1fc6430bb67c7ea72b652238cd64800c6d6cc0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:39:ed:4f:fd:79:f0:cf:c3:da:7c:3d:2b:e7:
                    ae:4f:a2:4c:08:c9:7e:46:7f:1f:83:55:20:30:37:
                    9b:d1:43:a1:b7:37:9a:33:b1:1a:e9:e1:50:b3:e5:
                    f4:ee:c8:1f:24:de:19:d7:4d:ad:72:18:a7:41:e4:
                    1b:89:aa:86:c9:50:8e:41:35:1e:21:b9:be:a4:e9:
                    88:6f:42:c3:56:e4:fa:67:ad:8d:82:39:5c:d5:3a:
                    3d:14:e5:81:b8:0d:ad:19:e2:2d:b4:44:91:5e:8c:
                    cb:4b:cd:c6:84:05:d4:e3:53:38:26:9b:f9:a8:12:
                    7b:60:ad:ad:1d:9b:6b:07:a3:9b:40:60:6c:85:82:
                    8d:03:d7:37:44:ab:99:fc:15:db:0d:73:8d:51:9d:
                    ff:09:02:89:f3:cb:ad:9e:1a:ae:c5:da:41:a5:19:
                    74:bf:c2:95:15:5e:37:2d:70:55:b6:ac:13:71:59:
                    a1:82:bf:73:f9:fa:94:4b:b4:1f:ce:32:8d:74:11:
                    a2:3f:af:88:5c:2d:f6:28:ec:00:71:95:77:45:13:
                    1f:9f:b7:b6:e1:f7:bc:78:69:3f:92:dc:56:44:84:
                    8c:e0:28:6c:68:b4:86:75:b3:6f:39:36:9f:f9:26:
                    37:2e:30:02:1f:1a:2e:64:02:6a:19:ef:60:a0:ec:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:41:D6:22:BA:4E:5B:59:74:33:D4:2B:B4:93:BA:60:3B:D4:BF:05
            X509v3 Authority Key Identifier:
                keyid:5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/1fc6430bb67c7ea72b652238cd64800c6d6cc0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.124.0/22
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:59:19:d8:4e:07:10:58:e3:27:26:b3:c2:2c:a2:c8:6d:
         80:eb:f5:92:c3:f8:97:33:8e:f7:48:23:eb:d8:05:d5:11:8f:
         4c:2c:7d:20:16:98:60:af:84:f8:d7:56:65:69:73:45:49:40:
         5e:e5:17:de:76:eb:e7:63:79:ed:27:e1:22:d9:c8:96:c9:ff:
         22:c3:ec:ba:9c:49:1d:f3:7d:d7:b5:33:c4:ea:67:21:a0:24:
         d4:ff:75:62:27:a8:3d:b0:9b:cb:6d:d5:b9:4f:1f:98:0f:ff:
         8d:5d:06:94:97:05:65:99:eb:81:2d:98:e7:d3:f5:f8:fe:40:
         2a:6d:84:e4:58:2f:96:88:e0:84:39:f4:bf:28:bb:15:53:04:
         dd:4d:c1:95:ad:ad:1e:f2:dd:62:20:d4:d0:0a:b2:41:04:e3:
         8e:f3:bb:27:7b:46:69:a3:9f:d5:43:fb:b5:e7:04:6e:61:e5:
         a3:f0:60:a2:f0:70:78:90:62:e6:46:fd:0d:8b:de:21:4f:d4:
         79:87:73:de:97:41:bd:83:bf:e4:74:ec:2c:c2:8e:2c:80:3b:
         88:1f:f9:de:44:ab:6c:e4:e1:77:65:e9:77:e1:94:72:44:70:
         97:2f:fe:92:53:e2:f0:79:38:97:39:19:af:ac:16:30:c2:99:
         c8:e9:99:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----