Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa
File:                     d97c04b4fb7224684a5f18206df598707c1a948b.roa (raw, json)
Hash identifier:          h88dG33sPnVbsy209LKZi4oaLtGoduCvlr4pveAE9vs=
Subject key identifier:   EF:7A:60:0A:B6:2E:12:85:4F:FA:0D:7C:62:ED:17:0F:D8:E5:C5:0A
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       2438D6
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa
Signing time:             Thu 14 Sep 2023 21:01:40 +0000
ROA not before:           Wed 13 Sep 2023 21:01:39 +0000
ROA not after:            Sun 14 Sep 2025 21:01:39 +0000
asID:                     264668
IP address blocks:        45.70.202.0/23 maxlen: 24
                          2803:bc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373846 (0x2438d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Sep 13 21:01:39 2023 GMT
            Not After : Sep 14 21:01:39 2025 GMT
        Subject: CN=d97c04b4fb7224684a5f18206df598707c1a948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:3e:39:4c:96:d7:29:5e:d2:eb:56:4f:58:
                    75:3c:a5:38:99:91:6e:39:6d:18:e0:70:80:7b:ab:
                    d5:1e:8d:3f:0b:41:da:b8:42:73:b3:94:03:65:17:
                    a0:e6:5c:df:03:57:45:b4:4b:07:31:6a:71:57:25:
                    14:d3:cb:8e:c7:26:8f:d0:61:60:e2:49:88:5a:2e:
                    3c:28:21:36:a3:33:40:95:26:3f:7f:fc:3c:c2:eb:
                    71:23:14:e3:8f:0d:c5:12:ce:1a:6d:24:26:e1:f1:
                    29:24:c7:17:c8:51:6f:da:a3:7c:d3:83:74:4a:29:
                    df:1f:e0:fa:a0:e9:e7:4b:54:16:9c:09:32:08:01:
                    db:60:23:4c:0b:76:61:ec:33:97:8b:ba:53:24:7b:
                    c1:8f:8f:b8:13:04:e8:de:ce:a9:8e:d5:c2:56:63:
                    91:68:63:3a:a6:2b:e5:fe:85:77:2f:75:28:88:88:
                    25:6a:1d:00:56:5a:37:45:31:4d:c3:b9:b9:f1:0a:
                    24:ed:5d:b0:0d:71:64:f4:e7:cb:a3:3c:7f:b3:7b:
                    92:3a:03:15:35:7e:7f:9a:ce:3c:66:bc:67:b1:ef:
                    66:40:4f:ec:49:f3:8b:fc:5c:83:ff:4e:8a:28:59:
                    c2:97:7d:14:92:30:b0:c6:49:87:ae:eb:51:9e:61:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:60:0A:B6:2E:12:85:4F:FA:0D:7C:62:ED:17:0F:D8:E5:C5:0A
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/d97c04b4fb7224684a5f18206df598707c1a948b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:87:7a:45:46:d2:71:6a:d4:af:f8:c6:25:91:fb:06:87:5a:
         8d:6b:3b:15:29:4b:9e:15:2a:11:7f:81:e8:9e:1b:60:b2:e0:
         75:83:32:bd:be:4d:31:46:cb:c5:4e:a4:8e:14:ff:e6:1f:1c:
         89:4b:f1:14:d7:3e:8c:a7:57:3d:fe:1c:19:90:7f:44:bc:12:
         b9:75:ac:42:a2:ec:c8:07:6d:ad:9e:f0:ea:94:59:e6:86:d2:
         11:1c:b4:2b:4c:c0:2e:f8:a4:13:2f:06:39:24:5a:a8:26:12:
         ed:9e:9d:6f:51:93:1e:c4:d2:ba:74:f3:9b:ed:1d:ec:f9:cf:
         34:58:63:fc:8c:4f:a3:64:84:2b:02:e5:de:4a:32:8e:be:af:
         c4:92:18:d2:1d:6b:16:35:87:0c:06:5e:7b:b2:90:23:3b:80:
         52:cd:63:92:2b:91:cf:f9:55:3d:cb:e5:2c:dd:26:ee:94:86:
         58:df:42:21:12:e1:10:f9:9d:34:e9:81:dd:92:f7:c8:e2:d3:
         6e:37:d9:6a:cc:e7:b9:f2:65:e7:4d:b4:23:0c:26:f3:d7:71:
         d5:8b:49:ec:a5:e5:43:83:39:38:9f:d2:f8:e6:f7:ab:47:54:
         97:9f:ed:70:c2:1c:e5:71:0e:fa:8d:34:35:e4:76:88:54:d1:
         94:c6:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----