Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e203133353739.roa
File:                     3230342e3135332e32342e302f32332d3233203d3e203133353739.roa (raw, json)
Hash identifier:          7SH4FLsAnayCVzZMVyMKag6EMrTxPkvlSkQP5LfLM3A=
Subject key identifier:   3D:84:77:71:3F:F3:4F:B3:53:FB:F3:1E:AC:D5:76:1F:A3:19:12:69
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       59A1B2437EE892531B33F4AEEE1A463F5E2262CB
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e203133353739.roa
Signing time:             Tue 30 Jul 2024 16:50:01 +0000
ROA not before:           Tue 30 Jul 2024 16:45:01 +0000
ROA not after:            Tue 29 Jul 2025 16:50:01 +0000
asID:                     13579
IP address blocks:        204.153.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a1:b2:43:7e:e8:92:53:1b:33:f4:ae:ee:1a:46:3f:5e:22:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:01 2024 GMT
            Not After : Jul 29 16:50:01 2025 GMT
        Subject: CN=3D8477713FF34FB353FBF31EACD5761FA3191269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:b2:d1:e3:f3:2d:56:b8:38:cb:e9:cf:d8:
                    fa:46:d3:d0:12:db:21:7b:00:4b:c8:c8:07:02:2e:
                    3f:0d:ff:1a:13:b0:b8:eb:2c:26:0b:11:92:d1:46:
                    70:3d:e3:1c:c2:ad:97:f6:b2:b4:9e:52:f1:1d:c9:
                    09:db:75:5f:d9:44:10:5e:25:a8:42:1d:35:02:ba:
                    a2:7c:06:9f:75:76:78:0e:8b:eb:5c:4a:52:42:74:
                    44:f2:92:c8:f7:f8:af:37:3e:09:39:8a:61:27:5d:
                    63:d7:7a:c8:3c:60:bd:21:a4:6c:da:07:0f:79:43:
                    9d:76:5d:dc:33:d2:6d:72:41:f5:89:e3:bf:dd:de:
                    c5:e4:f0:ba:10:a1:b3:6e:28:5f:99:44:84:08:4b:
                    c2:f7:f3:14:06:69:c6:1e:fa:4c:12:36:5c:33:b7:
                    1e:07:c8:ea:30:64:7f:a8:5e:1b:01:86:3a:d3:56:
                    f8:5f:80:e4:e4:35:07:88:71:6f:27:96:28:dd:b5:
                    24:5b:c1:e1:ba:9d:eb:d3:9e:84:63:b9:51:ac:65:
                    65:58:de:28:07:fa:7e:58:7e:77:2f:8a:da:6a:e6:
                    53:1e:11:6e:d6:6f:3b:bc:7f:c4:58:62:ba:68:09:
                    4f:ec:62:42:e3:64:b2:22:9a:42:fd:e3:e4:9e:d7:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:77:71:3F:F3:4F:B3:53:FB:F3:1E:AC:D5:76:1F:A3:19:12:69
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:97:92:5c:56:05:0e:61:7d:10:56:e2:2b:46:a8:44:7e:16:
         01:38:77:83:18:d9:b3:e5:c5:d0:66:cd:fa:aa:af:de:21:ad:
         7d:94:b6:d8:19:65:e9:47:e6:38:01:fc:d7:8a:10:97:0d:9c:
         09:56:2d:0e:4f:a0:38:9d:95:39:49:3b:c7:32:4f:29:bb:5d:
         1a:1c:55:54:6c:2f:08:5a:22:16:df:c1:95:68:72:3e:22:17:
         16:63:fb:d0:32:42:99:aa:ee:6c:de:7c:eb:16:e1:d3:ad:ac:
         e0:dc:81:c7:c8:a5:7e:77:54:3f:79:f8:0e:d8:ac:2e:5d:b7:
         8d:5b:3f:df:25:ff:e7:d3:08:c7:38:2d:83:42:a5:de:e6:b1:
         98:90:ce:a4:55:80:ea:3a:df:6a:21:58:ae:33:18:67:fa:46:
         e6:28:38:33:12:80:5c:5f:d9:8e:f4:68:21:ee:e1:f8:88:83:
         70:38:fa:ff:17:f1:6c:df:b4:26:1f:f9:8c:45:74:a3:e8:de:
         8f:e2:51:64:d4:12:1f:1d:cb:5f:a4:94:5e:6f:c3:af:62:8e:
         e1:f9:1f:86:68:ee:4e:b4:c2:76:82:89:4c:ed:f1:33:5a:e7:
         b7:95:56:c1:e7:41:52:28:1b:72:d9:36:90:1f:99:a3:5f:1a:
         5d:2d:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----