Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e2034323434.roa
File:                     3230342e3135332e32342e302f32332d3233203d3e2034323434.roa (raw, json)
Hash identifier:          caiPR8Oxkqmyz83wHpiwbPjWaxl0sF06+38O3wpO7qk=
Subject key identifier:   A5:6F:C6:C8:8C:D5:C3:1C:AE:AC:29:C4:8E:39:B7:1D:7C:A9:96:DC
Certificate issuer:       /CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
Certificate serial:       7D1029D4543E7C87972F39776BB80F54EBE6E23C
Authority key identifier: C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e2034323434.roa
Signing time:             Tue 30 Jul 2024 16:50:02 +0000
ROA not before:           Tue 30 Jul 2024 16:45:02 +0000
ROA not after:            Tue 29 Jul 2025 16:50:02 +0000
asID:                     4244
IP address blocks:        204.153.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:29:d4:54:3e:7c:87:97:2f:39:77:6b:b8:0f:54:eb:e6:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8F3196C76958256E0627C6E7C0CC9582BF1EBD0
        Validity
            Not Before: Jul 30 16:45:02 2024 GMT
            Not After : Jul 29 16:50:02 2025 GMT
        Subject: CN=A56FC6C88CD5C31CAEAC29C48E39B71D7CA996DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:aa:0c:cf:21:c5:b3:f5:2d:a2:75:4f:e9:
                    3f:c6:23:74:f0:71:9c:be:b0:ff:dc:b2:e4:3a:88:
                    46:be:07:f2:bb:1f:e1:40:65:01:35:39:a1:68:2a:
                    92:f2:c3:e5:f3:1b:b2:df:cc:33:18:b4:1e:ec:61:
                    e2:cd:d5:0f:26:f0:0a:d4:e2:e1:82:a9:84:f5:7f:
                    ec:db:f7:f1:3f:9a:fd:6d:cf:48:49:41:c6:a5:7c:
                    0a:d8:3d:8b:85:29:dd:74:c2:0b:5c:ea:5d:93:3c:
                    42:12:11:7e:74:f9:23:26:b4:42:9f:08:3f:6f:e7:
                    00:b7:b1:69:fa:c3:ff:fb:f6:57:c0:12:3c:87:28:
                    db:b8:5b:8a:24:15:3f:e0:e1:95:65:c5:a1:ec:67:
                    9a:04:62:89:00:12:e7:25:52:de:c3:a4:da:ff:c2:
                    fe:27:67:30:c0:3c:ff:9b:51:5c:4f:04:6f:9c:31:
                    91:ea:2b:eb:c1:58:e5:80:36:2a:9b:73:09:7c:70:
                    57:6f:f2:99:52:b9:27:44:a4:d0:5e:a3:11:9b:41:
                    04:cb:05:dc:49:75:12:8b:f1:fe:6e:77:8e:aa:0d:
                    46:4f:db:45:9b:6a:96:c2:b5:c4:63:c9:3a:dc:f4:
                    14:c7:15:dd:b9:14:87:c5:c6:42:20:92:e9:56:c3:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:C6:C8:8C:D5:C3:1C:AE:AC:29:C4:8E:39:B7:1D:7C:A9:96:DC
            X509v3 Authority Key Identifier:
                keyid:C8:F3:19:6C:76:95:82:56:E0:62:7C:6E:7C:0C:C9:58:2B:F1:EB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8F3196C76958256E0627C6E7C0CC9582BF1EBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230342e3135332e32342e302f32332d3233203d3e2034323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:47:53:26:11:f8:56:13:e1:9c:45:43:f2:4f:dc:6c:5d:
         ce:36:27:8f:4d:f0:0b:33:7b:f0:9c:c4:58:3c:90:24:a9:30:
         18:77:eb:80:a6:2a:82:42:22:bc:8d:66:22:f4:1d:92:55:eb:
         23:af:bc:e0:db:13:ac:9c:94:01:55:48:dd:ba:1f:c3:c2:cc:
         10:9a:a4:bf:7f:e6:22:4d:63:ed:1b:45:ec:3e:9b:5d:b6:6c:
         29:68:e0:c6:62:05:81:cf:cf:2d:0f:fc:3b:c8:d3:fc:0e:2d:
         d4:6b:ca:e2:a3:67:8e:8d:e1:98:ab:87:0a:68:83:3f:91:9d:
         f5:f5:14:10:61:d9:b6:b1:4d:9c:0e:b3:7f:eb:1f:f8:bb:6d:
         ed:b1:f1:fe:23:f6:b6:96:0c:0d:ff:e8:a3:b5:f0:ea:2c:3b:
         cc:3a:37:9a:17:88:02:e3:92:fa:38:38:5c:fa:af:f4:dc:43:
         e0:1b:ac:a1:39:d1:25:6c:d5:cd:f6:ac:7c:7d:e5:eb:2a:52:
         eb:d7:1e:d9:dd:58:b9:9e:26:a7:18:2a:3d:85:0c:85:41:be:
         4e:12:e8:49:2c:65:3a:47:5d:04:bd:53:8d:89:82:ec:48:1f:
         d4:b3:91:44:7d:2f:19:e5:e7:b6:ad:85:6b:eb:af:64:e8:3a:
         fa:6e:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----