Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/622681cbd8e2126ed490b10f6ce49acfebd6d089.roa
File:                     622681cbd8e2126ed490b10f6ce49acfebd6d089.roa (raw, json)
Hash identifier:          xILlS/p9JuDHVpn+1vRvb1bXlUPCzTYp39LzEO2kC0g=
Subject key identifier:   D5:21:C7:F2:A6:83:E8:DA:D6:29:99:33:F4:0E:86:C7:20:88:16:1F
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       24370F
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/622681cbd8e2126ed490b10f6ce49acfebd6d089.roa
Signing time:             Thu 14 Sep 2023 21:01:39 +0000
ROA not before:           Wed 13 Sep 2023 21:01:39 +0000
ROA not after:            Sun 14 Sep 2025 21:01:39 +0000
asID:                     52468
IP address blocks:        45.70.202.0/23 maxlen: 24
                          2803:bc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373391 (0x24370f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Sep 13 21:01:39 2023 GMT
            Not After : Sep 14 21:01:39 2025 GMT
        Subject: CN=622681cbd8e2126ed490b10f6ce49acfebd6d089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:f8:a2:f0:20:b7:73:94:5e:b9:4a:ed:fe:
                    9f:12:5b:65:d9:00:31:89:cf:db:b9:d9:b2:aa:bd:
                    d7:8a:b6:f6:70:97:e0:81:78:33:6e:20:1d:6c:41:
                    ef:37:82:f9:49:0f:00:3c:49:70:45:83:b7:bf:f8:
                    80:11:02:f3:63:2b:7f:97:1d:d9:72:09:b1:8c:47:
                    6d:a4:f0:cd:30:76:8d:a5:78:64:3f:61:94:5b:5c:
                    65:69:62:0f:da:3a:9e:dc:9a:df:94:a3:1a:f2:fe:
                    46:a3:ec:bd:09:fd:b4:6a:2d:85:89:42:29:3a:a8:
                    df:0e:0c:37:cb:dc:a8:16:fb:3c:95:08:8e:d8:46:
                    da:de:70:b6:dd:75:f3:09:b7:2c:1a:13:1d:d5:7a:
                    1f:c9:13:27:69:1d:01:4c:83:70:a8:9c:cd:1b:c9:
                    a3:72:d3:e3:71:d8:76:85:ab:7a:61:b4:cc:04:09:
                    06:7a:82:85:e4:35:2c:51:11:e7:d2:d9:a4:c5:2e:
                    24:fe:c0:0d:ef:94:ef:27:7a:24:c9:f1:7f:bd:0d:
                    cf:7f:ad:6c:9e:33:2b:fb:21:81:30:63:7f:f5:d8:
                    4f:a3:89:a6:a2:45:34:50:5f:b4:46:92:c6:33:dc:
                    d7:1a:be:0e:14:9e:6a:96:35:4d:c9:d5:b7:46:e9:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:C7:F2:A6:83:E8:DA:D6:29:99:33:F4:0E:86:C7:20:88:16:1F
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/622681cbd8e2126ed490b10f6ce49acfebd6d089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:4b:a0:89:e7:09:bb:3d:1a:29:d4:59:59:49:44:75:49:
         ec:7c:ef:71:36:51:82:27:60:79:b2:ec:04:40:42:dd:84:cf:
         4b:e4:c8:9c:eb:de:b8:54:1a:f6:34:55:f7:e4:30:4f:23:e7:
         e4:ea:0f:74:59:94:e4:5b:01:90:12:d4:a1:28:99:3f:ce:43:
         5b:ca:83:91:7c:dc:42:6b:c3:65:80:ec:f7:9b:29:74:fa:e9:
         76:0e:98:df:86:5e:81:99:c6:04:d9:1b:d9:26:7a:8d:48:dd:
         51:25:39:26:ee:7e:2d:e2:5d:d5:77:20:a2:ac:13:3f:4d:0a:
         2b:d3:0f:3b:ef:27:c7:00:97:ad:ba:c2:c8:63:92:c0:ac:fe:
         57:99:5a:68:b9:88:3f:e8:a9:9f:4d:e4:86:06:30:b5:bb:69:
         c2:0f:1a:fe:3d:f4:05:f5:aa:a6:e5:72:fd:73:5a:38:97:19:
         5b:40:ad:3e:90:61:fe:a7:8c:64:06:33:eb:ab:99:60:81:e5:
         f8:ff:a8:91:e0:46:e2:08:cc:bb:86:b8:d7:7e:02:79:57:e0:
         7e:6f:b2:64:ea:b6:bf:00:45:22:11:62:6e:8c:ef:00:86:da:
         c8:bb:d3:24:0f:75:94:b9:a6:0f:4e:a2:6d:47:c1:a7:11:94:
         7d:fa:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----