Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/be52a0cabb7e497ed8fb8dd301d2376a1d698621.roa
File:                     be52a0cabb7e497ed8fb8dd301d2376a1d698621.roa (raw, json)
Hash identifier:          VVGDMaWkxu20uiBGXBlUnbef8xQYyvvUcrFqtTTIFak=
Subject key identifier:   E0:63:8F:EB:A3:17:9C:EA:63:CE:B4:6C:D7:6E:77:ED:39:8E:3C:38
Certificate issuer:       /CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
Certificate serial:       16A6F6
Authority key identifier: 5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/be52a0cabb7e497ed8fb8dd301d2376a1d698621.roa
Signing time:             Wed 06 Mar 2024 18:27:07 +0000
ROA not before:           Wed 06 Mar 2024 18:27:06 +0000
ROA not after:            Fri 06 Mar 2026 18:27:06 +0000
asID:                     52327
IP address blocks:        45.224.124.0/22 maxlen: 24
                          2803:3a20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484534 (0x16a6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf
        Validity
            Not Before: Mar  6 18:27:06 2024 GMT
            Not After : Mar  6 18:27:06 2026 GMT
        Subject: CN=be52a0cabb7e497ed8fb8dd301d2376a1d698621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:92:e3:64:ee:53:c7:65:6d:55:b0:e6:4a:
                    d9:9d:84:19:1b:a8:44:8d:4d:39:98:38:67:52:f3:
                    d5:27:e3:00:05:2c:a8:94:70:c4:74:30:31:5d:f8:
                    4f:a6:ae:da:45:cd:40:7e:41:80:d1:29:f0:f3:82:
                    db:d2:3c:c2:e6:e5:32:7f:58:44:85:b8:bf:1f:ca:
                    6c:c9:51:13:4a:50:72:d5:a8:09:b2:82:cc:c7:8d:
                    5c:18:08:26:10:11:ce:79:3c:60:77:81:c0:80:b1:
                    67:7b:71:b3:6f:48:fa:cb:37:c4:45:ab:a2:e4:6d:
                    99:32:69:1a:04:31:d6:03:96:4b:1b:8f:61:de:a2:
                    19:61:b5:fb:f7:b7:bc:de:d5:f6:64:5c:dc:09:52:
                    0f:0c:e2:73:6b:1d:24:31:28:33:b4:e4:20:eb:7b:
                    ca:6b:8c:da:73:18:4e:6f:ef:3f:4a:31:54:c8:a2:
                    1e:2d:c2:e9:75:87:b1:56:6b:df:84:70:65:b6:98:
                    74:d5:8a:0d:8b:e7:8d:6a:87:fe:97:4b:18:f5:5b:
                    36:70:57:17:6d:11:0c:ca:93:99:4a:c8:43:36:9a:
                    9e:7f:85:e4:2b:00:41:13:19:d4:67:a3:26:0a:9d:
                    78:c2:ca:54:3c:ee:c7:2e:21:f7:81:07:ed:d3:f7:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:8F:EB:A3:17:9C:EA:63:CE:B4:6C:D7:6E:77:ED:39:8E:3C:38
            X509v3 Authority Key Identifier:
                keyid:5B:57:FC:1D:76:F8:AE:62:4A:C1:88:7E:6A:4F:83:02:9A:21:CA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/be52a0cabb7e497ed8fb8dd301d2376a1d698621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24804db7-a062-49a0-9047-977861b7c2d0/63d834e8aaa78e7d7df73f8a9b60d4fecfd2bdcf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.124.0/22
                IPv6:
                  2803:3a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:e2:b6:2f:ed:af:a0:09:1a:df:05:91:17:88:54:32:85:48:
         c7:64:5e:fc:31:c6:c0:bc:67:bb:3c:4f:9b:b6:65:b3:8b:70:
         e0:53:62:5d:36:07:b1:aa:1b:a8:00:6e:1d:3a:0c:33:5d:d9:
         99:72:50:97:0f:78:f9:f5:a5:67:72:9d:bb:80:e6:6d:4a:c1:
         8e:38:90:45:29:2b:25:67:fd:ff:62:9f:38:fe:60:c5:6a:25:
         12:27:4f:da:b6:e7:0f:2d:eb:fe:49:d4:38:e8:9b:79:64:5c:
         1c:41:c2:9f:82:e1:10:fc:08:75:ae:d8:49:d1:7d:76:80:f7:
         dd:2d:20:86:6a:51:83:56:3a:e5:2b:8a:b1:ec:b2:ea:40:ae:
         52:e1:d9:d6:8c:4f:ea:db:4e:ce:c0:0d:65:de:23:e2:e5:67:
         aa:b1:2f:c7:13:cd:86:d3:22:06:b6:b2:69:6c:c5:56:ad:42:
         a9:ee:12:c6:07:18:96:ed:85:0b:17:17:0a:82:48:4e:f4:15:
         a8:d7:3c:cd:93:09:ff:bb:2a:15:0d:5b:47:d4:5b:54:76:be:
         30:42:50:45:c5:34:2b:96:12:0a:b9:62:f0:cb:24:c2:96:cb:
         1e:ec:3e:7d:36:99:2f:1a:d9:8f:9f:a1:b3:89:eb:57:9a:98:
         20:6e:f4:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDFqb2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
ZDgzNGU4YWFhNzhlN2Q3ZGY3M2Y4YTliNjBkNGZlY2ZkMmJkY2YwHhcNMjQwMzA2
MTgyNzA2WhcNMjYwMzA2MTgyNzA2WjAzMTEwLwYDVQQDEyhiZTUyYTBjYWJiN2U0
OTdlZDhmYjhkZDMwMWQyMzc2YTFkNjk4NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg4SS42TuU8dlbVWw5krZnYQZG6hEjU05mDhnUvPVJ+MABSyo
lHDEdDAxXfhPpq7aRc1AfkGA0Snw84Lb0jzC5uUyf1hEhbi/H8psyVETSlBy1agJ
soLMx41cGAgmEBHOeTxgd4HAgLFne3Gzb0j6yzfERaui5G2ZMmkaBDHWA5ZLG49h
3qIZYbX797e83tX2ZFzcCVIPDOJzax0kMSgztOQg63vKa4zacxhOb+8/SjFUyKIe
LcLpdYexVmvfhHBltph01YoNi+eNaof+l0sY9Vs2cFcXbREMypOZSshDNpqef4Xk
KwBBExnUZ6MmCp14wspUPO7HLiH3gQft0/eJwwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOBjj+ujF5zqY860bNdud+05jjw4MB8GA1UdIwQYMBaAFFtX/B12+K5iSsGI
fmpPgwKaIcrZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjNkODM0
ZThhYWE3OGU3ZDdkZjczZjhhOWI2MGQ0ZmVjZmQyYmRjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjQ4MDRkYjctYTA2Mi00OWEwLTkwNDctOTc3ODYx
YjdjMmQwL2JlNTJhMGNhYmI3ZTQ5N2VkOGZiOGRkMzAxZDIzNzZhMWQ2OTg2MjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNDgwNGRiNy1hMDYyLTQ5YTAtOTA0Ny05Nzc4
NjFiN2MyZDAvNjNkODM0ZThhYWE3OGU3ZDdkZjczZjhhOWI2MGQ0ZmVjZmQyYmRj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3gfDANBAIAAjAHAwUAKAM6IDANBgkqhkiG9w0BAQsFAAOC
AQEAOOK2L+2voAka3wWRF4hUMoVIx2Re/DHGwLxnuzxPm7Zls4tw4FNiXTYHsaob
qABuHToMM13ZmXJQlw94+fWlZ3Kdu4DmbUrBjjiQRSkrJWf9/2KfOP5gxWolEidP
2rbnDy3r/knUOOibeWRcHEHCn4LhEPwIda7YSdF9doD33S0ghmpRg1Y65SuKseyy
6kCuUuHZ1oxP6ttOzsANZd4j4uVnqrEvxxPNhtMiBrayaWzFVq1Cqe4SxgcYlu2F
CxcXCoJITvQVqNc8zZMJ/7sqFQ1bR9RbVHa+MEJQRcU0K5YSCrli8MskwpbLHuw+
fTaZLxrZj5+hs4nrV5qYIG70uA==
-----END CERTIFICATE-----