Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/951b67b70d00e067525d58b74e9b1031c0341760.roa
File:                     951b67b70d00e067525d58b74e9b1031c0341760.roa (raw, json)
Hash identifier:          gUl0X7XDbd92VFC/f1lIOek7om2jY+suY/HwKNWG7Rk=
Subject key identifier:   30:84:E4:A7:87:52:FA:95:AE:66:30:2B:7A:8B:BB:97:D0:B8:70:49
Certificate issuer:       /CN=993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd
Certificate serial:       199D31
Authority key identifier: AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/951b67b70d00e067525d58b74e9b1031c0341760.roa
Signing time:             Fri 24 Jun 2022 21:34:07 +0000
ROA not before:           Fri 24 Jun 2022 03:00:00 +0000
ROA not after:            Mon 24 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678641 (0x199d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd
        Validity
            Not Before: Jun 24 03:00:00 2022 GMT
            Not After : Jun 24 03:00:00 2024 GMT
        Subject: CN=951b67b70d00e067525d58b74e9b1031c0341760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:f7:04:2c:70:ef:19:52:fa:f3:22:b4:44:
                    c4:a6:17:6c:41:46:45:e2:77:97:49:cc:8c:c8:50:
                    d9:42:5e:a2:f3:ad:9e:44:58:ee:35:70:9c:bb:e2:
                    d8:b6:a3:d0:3a:06:8d:71:c0:6b:13:5b:85:7f:e0:
                    6c:0c:b8:98:f4:53:3c:5f:55:a1:e2:5f:fc:96:89:
                    b6:1a:49:8e:8f:82:fe:8a:1f:19:e1:13:de:16:90:
                    7d:6f:ba:c7:3b:a6:ce:be:71:23:21:32:64:3c:fb:
                    bd:be:28:d7:ab:c5:bd:d8:13:c6:c5:bc:08:46:09:
                    54:51:ff:65:a9:44:d1:93:ff:1e:0b:58:64:87:fa:
                    1a:de:77:46:2d:bc:bd:af:92:a9:07:60:cb:0f:b8:
                    95:09:89:26:f9:14:78:2f:c4:fc:16:c1:d1:c8:47:
                    60:33:4f:f5:c4:e9:8b:5e:45:60:bc:c0:91:86:b2:
                    40:4d:ad:b0:c2:79:78:5a:d5:01:47:c9:4d:69:b9:
                    36:c8:56:ec:c4:6b:d3:e3:bb:a0:fc:7c:a6:45:50:
                    81:c8:4e:4a:b6:06:b9:21:2a:46:71:68:b2:74:63:
                    89:93:3f:93:46:e9:0d:1d:21:7c:14:5f:5c:2d:2d:
                    fd:b7:7a:bf:b6:b4:b4:d3:a2:cc:b6:64:94:77:6f:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:E4:A7:87:52:FA:95:AE:66:30:2B:7A:8B:BB:97:D0:B8:70:49
            X509v3 Authority Key Identifier:
                keyid:AE:C5:6D:08:2E:10:D8:BE:8F:7A:D5:1A:12:68:17:F7:38:FB:93:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/951b67b70d00e067525d58b74e9b1031c0341760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/993e0e1e7aaf89dab8d3c650f7a84d7e1db02acd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:02:13:0d:f3:28:06:55:09:58:3b:c7:92:a7:36:ac:c2:
         0f:69:17:4b:cb:e1:d0:83:cc:4c:db:da:5a:30:7e:6e:b5:05:
         25:57:43:3b:bb:9d:08:7c:d7:96:83:8a:4f:b0:bd:cd:8f:1e:
         3c:8a:a5:27:ba:c4:fb:dc:b0:ad:ef:48:6b:7f:b5:d9:e1:ab:
         4a:25:6d:95:42:d7:41:27:e9:5f:21:87:d9:50:41:87:9c:fa:
         bc:63:5b:01:70:84:a1:dc:58:68:96:c0:c2:cd:87:20:35:ed:
         df:f8:07:c3:f3:1e:dc:92:cf:d9:22:4f:00:70:8a:b8:93:f6:
         ae:06:ac:34:56:ae:e7:ba:63:52:6f:4a:41:7e:48:1a:58:27:
         eb:6c:73:f5:ee:96:76:41:b4:40:65:ee:f8:60:ba:8b:30:7b:
         c7:1b:9e:2b:20:f8:4d:f7:b1:c9:81:d8:9b:aa:96:98:21:21:
         17:af:77:49:91:da:2d:b5:d4:65:3e:df:9e:55:4d:3f:79:8b:
         4a:8d:d6:8f:81:47:dd:c4:85:1d:f7:04:82:68:28:d7:09:79:
         4c:2d:cb:74:74:5f:ef:a8:4b:16:4d:26:fc:97:3e:79:00:09:
         2a:48:88:3c:da:74:95:c8:22:cc:1e:fc:d8:85:c7:fe:3a:0d:
         fa:7d:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----