Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e2034323434.roa
File:                     323030313a313233303a3a2f33322d3332203d3e2034323434.roa (raw, json)
Hash identifier:          lfKBDVhpOrnSOhsRJlDf2Qr0JwAqSOHzWgt93ZRzzfg=
Subject key identifier:   94:BD:DD:41:5C:EE:F8:89:1E:DC:61:A2:C9:43:25:16:E9:03:C7:77
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       75C06037277C68E72E9DF61A7C9599E57A5E4213
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:02 +0000
ROA not before:           Tue 30 Jul 2024 16:45:02 +0000
ROA not after:            Tue 29 Jul 2025 16:50:02 +0000
asID:                     4244
IP address blocks:        2001:1230::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:60:37:27:7c:68:e7:2e:9d:f6:1a:7c:95:99:e5:7a:5e:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:02 2024 GMT
            Not After : Jul 29 16:50:02 2025 GMT
        Subject: CN=94BDDD415CEEF8891EDC61A2C9432516E903C777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:33:d6:13:62:fd:59:cc:af:a4:16:d5:79:
                    00:3a:0c:e0:af:ca:11:3c:17:c8:09:a1:bb:68:2e:
                    7c:d5:a0:15:e5:a2:f9:84:f3:3a:58:5c:50:4a:31:
                    76:e0:9b:ad:5b:d5:c6:8b:0d:45:16:76:9c:9e:f7:
                    09:a4:5e:57:d0:59:cf:e8:4b:40:b6:f5:3c:60:92:
                    af:fc:a9:4f:07:1e:f0:02:86:36:78:a7:b5:da:ee:
                    38:8b:3e:42:f3:ce:59:ed:21:50:94:68:47:67:fb:
                    ec:36:e8:09:84:a4:99:00:ef:06:97:dc:25:f6:bb:
                    6d:bc:2b:7d:49:42:57:82:af:f6:e6:e9:55:f5:8c:
                    cf:00:bc:36:f6:bc:9b:0e:41:89:17:c6:09:b1:6a:
                    e4:26:b6:7e:0e:4f:d9:37:e9:08:97:80:58:5b:cb:
                    42:80:75:74:a2:69:3f:0e:75:3a:b2:c8:78:b7:da:
                    fa:12:95:79:6b:a6:70:ab:da:bc:cc:6a:b2:88:d0:
                    22:e7:7c:d7:b4:97:26:81:eb:e0:9c:c5:5c:d7:19:
                    ac:05:dd:fc:60:ae:73:7c:36:09:b6:76:e7:2b:03:
                    b6:00:93:94:8b:4e:6f:61:dd:39:f4:bf:66:27:c0:
                    3d:b2:ab:c3:60:91:b1:c9:8f:c3:8e:2d:28:bc:58:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BD:DD:41:5C:EE:F8:89:1E:DC:61:A2:C9:43:25:16:E9:03:C7:77
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/323030313a313233303a3a2f33322d3332203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1230::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:b3:61:c8:11:e9:32:12:ca:3a:7b:3e:54:a8:34:ff:0d:
         72:0f:98:37:75:b2:55:2b:95:62:77:ae:f6:96:f9:5f:0d:86:
         60:8c:a8:30:c7:d7:59:f3:46:f3:ee:4e:e6:d8:e8:12:7f:cf:
         93:33:19:d1:22:b7:d8:2d:f7:d8:cd:81:50:23:ae:5a:50:46:
         64:d8:68:bd:28:1b:85:36:f2:cc:9d:ef:4e:c8:9c:be:b6:f6:
         c9:22:b9:73:21:35:ee:f9:5e:4a:c3:06:d7:f3:bc:c6:8d:70:
         0d:95:91:13:f7:86:5e:06:e7:6f:69:b2:6b:13:5d:ca:73:61:
         5f:bd:79:27:a7:41:1a:27:df:11:ef:1e:09:23:be:d2:e9:69:
         c6:b6:12:24:00:0b:dd:7b:77:45:7e:65:64:06:a2:d5:32:e3:
         a7:5d:26:f1:e2:a6:04:d0:32:dc:34:27:99:60:d7:38:58:1a:
         e8:c4:66:86:07:4c:2c:d7:f3:5a:68:ce:9a:7a:73:ad:cc:41:
         86:34:62:eb:ca:da:af:40:90:2e:45:fd:94:8b:27:66:e6:59:
         c5:33:82:fb:e9:f4:59:39:8c:6e:55:39:2d:26:36:3a:f0:42:
         82:4e:b6:d8:d0:12:d1:a0:ea:0b:b3:dc:92:78:b7:88:01:08:
         84:c7:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----