Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a8f1a92cfffe270e4abb96f812abd73c4fde1c2c.roa
File:                     a8f1a92cfffe270e4abb96f812abd73c4fde1c2c.roa (raw, json)
Hash identifier:          1I7RQ0c2EeliBov9ztYroRb2Esb0rVlG8YR/Dx5lEtY=
Subject key identifier:   EF:68:50:C6:9E:11:31:2E:65:C7:7F:73:3E:F3:A0:75:77:A1:07:0F
Certificate issuer:       /CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
Certificate serial:       24E9B6
Authority key identifier: 19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a8f1a92cfffe270e4abb96f812abd73c4fde1c2c.roa
Signing time:             Tue 17 Oct 2023 20:19:30 +0000
ROA not before:           Mon 16 Oct 2023 20:19:29 +0000
ROA not after:            Fri 17 Oct 2025 20:19:29 +0000
asID:                     264668
IP address blocks:        45.70.200.0/23 maxlen: 24
                          2803:c220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419126 (0x24e9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
        Validity
            Not Before: Oct 16 20:19:29 2023 GMT
            Not After : Oct 17 20:19:29 2025 GMT
        Subject: CN=a8f1a92cfffe270e4abb96f812abd73c4fde1c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:52:10:89:8e:5f:e5:60:5a:8a:bd:f1:15:
                    74:35:ac:ea:1d:34:d0:22:d6:d4:13:56:c2:ef:94:
                    c7:c1:3b:cb:b4:20:6f:be:23:10:b9:4a:e1:b4:ba:
                    f7:75:c4:60:f2:2f:e2:f9:53:2b:ca:57:3b:99:4f:
                    f6:0c:16:67:8f:08:a9:e0:e4:d7:a9:fe:90:d9:8e:
                    9b:f2:05:1c:38:4a:d3:29:05:57:59:f3:bc:da:fe:
                    75:5e:40:b0:65:8b:c1:23:c1:71:b0:98:4d:15:49:
                    1d:02:07:85:21:bb:c1:ee:8f:ff:1d:1c:40:1f:72:
                    15:47:f4:ac:c2:57:6b:73:76:68:84:04:6c:1a:12:
                    48:3c:32:fd:a9:a9:f3:cd:55:2f:e2:62:30:35:24:
                    9a:c1:cb:3c:04:b9:9c:c5:f6:b7:e2:ae:fa:4b:e8:
                    5b:40:c2:b3:4c:59:b9:f9:64:c8:fb:f6:dd:15:bb:
                    93:fa:28:1e:ec:81:b7:e6:a3:b2:6f:fb:bc:46:61:
                    1c:cb:aa:93:33:e7:85:bb:bd:1a:cb:04:d0:bf:b9:
                    39:ae:43:d7:19:c9:a2:39:92:f6:c2:f0:dd:13:91:
                    9f:10:e5:90:ee:44:04:83:78:28:5d:20:0b:bb:0a:
                    1a:ad:8f:70:d0:c5:76:3a:b3:74:61:a4:55:21:65:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:50:C6:9E:11:31:2E:65:C7:7F:73:3E:F3:A0:75:77:A1:07:0F
            X509v3 Authority Key Identifier:
                keyid:19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a8f1a92cfffe270e4abb96f812abd73c4fde1c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.200.0/23
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:e8:08:06:21:8e:5f:1b:22:f0:b9:71:16:58:52:95:08:
         88:53:64:bb:8e:41:7b:52:ca:d9:aa:1a:60:b6:27:dd:2a:c2:
         bb:e0:7f:18:bd:e3:29:3a:f1:65:34:1a:69:50:9e:9b:1b:9a:
         c4:ad:d7:73:5c:19:ca:33:42:fb:b2:72:80:f7:a2:53:74:0d:
         18:9a:80:84:3c:6c:de:9f:b2:87:a7:e4:24:9b:dc:b5:d9:a2:
         fc:80:3d:75:f2:84:d3:e4:e1:bc:7b:85:f7:a3:2b:5e:64:97:
         f2:04:76:81:03:79:a5:f9:91:4f:f8:30:4a:66:75:5a:95:f5:
         a9:da:4f:59:a0:86:c7:5f:89:ff:3f:9a:81:02:1f:a6:85:e8:
         3b:e1:83:44:92:67:40:74:76:fa:4a:53:fe:a2:92:76:9d:86:
         15:2f:fc:ec:0f:b3:19:67:3c:82:68:d7:67:a8:52:a4:b3:12:
         4b:4a:ff:50:3b:62:b4:d3:46:cb:a5:af:9f:4b:f6:44:82:e1:
         40:7b:15:4d:b1:e9:36:81:06:50:13:89:46:0b:e0:9c:09:48:
         8b:7e:ac:9d:69:d4:d8:a9:27:17:66:7e:c1:2d:3e:03:e6:0f:
         dd:3b:b8:29:87:88:56:9b:72:78:ec:63:07:ec:e1:91:55:b6:
         4e:ce:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----