Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/c1415f696c2568576234cd63b93346b0f9d7749a.roa
File:                     c1415f696c2568576234cd63b93346b0f9d7749a.roa (raw, json)
Hash identifier:          jxlNqHLmXvqy4ESNgE4TEmEvYAd1kPI+lQhY66GPctY=
Subject key identifier:   ED:05:DA:53:49:64:71:A8:C6:C7:C7:0E:C3:22:B4:B6:4D:3E:11:57
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       252C8E
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/c1415f696c2568576234cd63b93346b0f9d7749a.roa
Signing time:             Tue 17 Oct 2023 20:19:26 +0000
ROA not before:           Mon 16 Oct 2023 20:19:26 +0000
ROA not after:            Fri 17 Oct 2025 20:19:26 +0000
asID:                     264668
IP address blocks:        45.70.56.0/22 maxlen: 24
                          2803:a820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436238 (0x252c8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Oct 16 20:19:26 2023 GMT
            Not After : Oct 17 20:19:26 2025 GMT
        Subject: CN=c1415f696c2568576234cd63b93346b0f9d7749a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:43:e6:a9:47:fe:da:cc:a9:43:25:01:fe:
                    c8:38:3a:cc:74:bc:17:1a:53:50:34:9b:83:c3:c6:
                    4c:3f:c6:00:82:c0:ba:3e:c9:c8:e9:41:e9:43:6a:
                    a1:d9:e7:54:ce:87:dd:bd:43:a7:bf:ea:8f:a3:1b:
                    cc:4d:5b:08:89:91:d4:42:36:df:6c:c6:b3:0c:b7:
                    17:3f:52:18:1a:9d:87:4f:9e:5f:c8:e1:6b:b1:55:
                    ab:e6:51:59:fc:3a:c0:f6:5e:c5:75:00:36:7a:70:
                    98:98:90:b1:ea:7e:d1:cb:f0:ce:39:d1:74:1b:45:
                    df:ff:09:18:88:41:a2:68:e3:13:94:63:22:79:9f:
                    a9:d0:fe:13:31:04:ff:d1:e4:2e:75:95:57:5b:f4:
                    e1:a6:94:f8:dd:37:26:03:1f:f5:61:99:b4:58:8e:
                    68:e5:96:83:28:68:83:70:79:ce:64:4c:f4:9c:c0:
                    35:09:0c:23:23:7c:06:ba:49:96:3c:28:ef:0c:4e:
                    ed:23:c6:8a:49:5f:96:17:1d:ff:64:5e:fa:18:11:
                    e3:38:f6:1a:69:ea:56:32:5b:26:e4:8b:c8:54:20:
                    d5:e9:15:99:1d:30:36:2a:27:b3:f2:aa:a6:89:4f:
                    b0:e6:18:0b:2d:a7:94:a8:0b:b1:07:1e:bd:1a:5e:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:DA:53:49:64:71:A8:C6:C7:C7:0E:C3:22:B4:B6:4D:3E:11:57
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/c1415f696c2568576234cd63b93346b0f9d7749a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22
                IPv6:
                  2803:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:b9:ef:1c:e0:65:7d:9d:72:e8:50:b4:74:f2:ca:05:c7:
         af:be:14:99:e3:dd:4f:08:26:d6:5c:4d:4c:b9:54:be:45:75:
         49:e1:ae:3d:ed:1d:64:56:79:19:17:14:55:49:ad:fa:13:6e:
         d5:fd:c6:bb:b2:27:0f:fd:2a:e4:41:63:09:f0:b5:c9:82:7d:
         d0:00:88:1f:ab:f8:1c:f1:48:25:e7:5d:4d:ac:cb:93:b2:7a:
         c6:fe:04:a4:9c:8f:45:40:1e:7a:e1:76:a8:3c:66:57:bb:33:
         3a:18:e7:ae:35:57:48:73:8b:80:03:0e:df:d2:b2:5a:85:35:
         e9:cb:a3:1f:01:4e:b4:8d:f9:78:de:87:85:6e:3b:47:b1:38:
         e1:aa:18:78:b4:3d:a9:a8:16:a5:5a:0a:cc:01:d0:fb:83:de:
         7e:7b:35:7a:46:a6:5c:42:01:89:01:42:9b:6d:25:af:e8:18:
         c2:58:66:28:a5:ff:b3:9c:4b:29:2a:6b:a3:1d:06:3f:71:9b:
         3b:ae:75:0b:42:39:38:01:fd:b2:92:0e:cf:b7:8e:5c:1a:7e:
         0c:ee:d0:36:66:60:92:15:1b:f6:a1:38:c8:62:61:33:eb:61:
         ed:36:fd:c1:8a:39:54:23:4b:4e:34:6e:41:66:aa:87:4e:85:
         cc:60:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----