Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/8a97caf80b7109ef9d867688a1521dd44233ea43.roa
File:                     8a97caf80b7109ef9d867688a1521dd44233ea43.roa (raw, json)
Hash identifier:          Kn/pTe3/K4UGJwvr3De825UBanHnk+9w34jk8idB6+U=
Subject key identifier:   3F:67:C6:1A:F6:3D:9D:AE:F2:70:B9:43:85:11:7A:22:68:F7:E5:D5
Certificate issuer:       /CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
Certificate serial:       11E8F1
Authority key identifier: 5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/8a97caf80b7109ef9d867688a1521dd44233ea43.roa
Signing time:             Sat 12 Aug 2023 08:30:00 +0000
ROA not before:           Fri 11 Aug 2023 08:30:00 +0000
ROA not after:            Sun 10 Aug 2025 08:30:00 +0000
asID:                     52327
IP address blocks:        45.224.124.0/22 maxlen: 24
                          2803:3a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173745 (0x11e8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
        Validity
            Not Before: Aug 11 08:30:00 2023 GMT
            Not After : Aug 10 08:30:00 2025 GMT
        Subject: CN=8a97caf80b7109ef9d867688a1521dd44233ea43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:d7:f1:25:e8:d8:e2:be:d9:4b:ca:a1:75:
                    33:10:3f:0e:b4:19:ea:07:df:61:ec:dd:2a:c8:a4:
                    5d:35:d1:1b:7c:c3:4b:21:f4:6c:93:20:07:f5:95:
                    91:5a:be:f7:5f:f6:32:50:b6:97:b8:f0:73:a2:6b:
                    ba:63:4a:7e:d0:eb:4c:5a:bb:36:c4:d9:0d:c1:03:
                    66:f4:93:8f:5c:47:a0:04:f1:7a:8d:47:8b:65:48:
                    a6:4a:e9:c4:98:71:2f:26:9c:37:ea:6c:49:59:28:
                    6d:e2:e8:5d:5c:30:5a:1a:c2:b0:d2:18:20:2b:37:
                    02:92:bd:38:d7:d5:be:97:b4:af:e4:14:46:28:33:
                    ac:51:99:63:5d:38:88:3b:86:88:5e:60:bd:89:89:
                    8d:7b:79:af:b7:64:15:cd:a4:d8:49:1f:7f:70:89:
                    57:a2:c5:98:22:db:46:c5:58:4b:1a:de:64:c5:ef:
                    e8:cd:eb:20:e7:b7:a8:df:0a:30:8c:b6:f9:94:14:
                    fc:20:2e:f2:22:45:98:6f:49:50:5e:1c:32:1f:eb:
                    f7:b4:c7:19:53:91:31:9f:ff:17:17:9d:77:4e:df:
                    2d:9d:0f:1b:74:ca:22:5f:b8:2d:bd:26:dc:73:1f:
                    06:b8:a4:a7:48:c8:72:2b:13:c4:d6:a4:42:5d:b1:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:C6:1A:F6:3D:9D:AE:F2:70:B9:43:85:11:7A:22:68:F7:E5:D5
            X509v3 Authority Key Identifier:
                keyid:5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/8a97caf80b7109ef9d867688a1521dd44233ea43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.124.0/22
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:e0:47:28:86:7b:b8:1b:d8:51:73:13:c2:eb:3e:f8:ce:
         59:e2:3e:e2:41:0f:48:61:65:0a:bf:05:61:f9:6d:86:12:0b:
         85:41:47:74:6a:8f:12:64:38:9a:c7:da:47:40:00:cc:d4:7a:
         f2:6a:f0:30:d0:72:f8:4e:93:f3:0a:19:c2:e4:a3:51:3b:35:
         8c:39:6f:c3:ab:09:43:ef:3d:66:ee:4e:12:cb:d2:be:a8:4d:
         3b:c6:03:0c:00:6d:f9:d7:51:5f:18:6a:af:e5:7f:c1:06:72:
         92:00:31:0f:69:fa:17:44:00:7a:95:00:66:b8:39:98:26:75:
         e6:2e:ca:17:13:93:35:45:62:ae:9a:b3:40:70:f7:5e:a6:85:
         92:f8:14:1a:86:21:59:21:fb:cb:b7:b1:7d:03:cb:ce:1a:7e:
         51:e8:27:1a:70:84:98:d9:b3:ed:98:81:54:08:95:10:86:6b:
         32:8e:13:2d:95:b6:96:16:ea:b2:65:f8:fb:a0:c9:c7:64:c5:
         d4:bb:39:80:63:d3:ab:87:ab:7f:d7:3d:5b:8e:fb:76:87:b3:
         20:cd:5b:83:87:f5:fe:90:e1:d0:01:40:c1:23:8b:3e:fb:42:
         f3:29:83:26:b8:43:ee:3d:67:2d:9b:c6:71:77:d5:e1:02:5b:
         e6:0b:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----