Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/e4fdc00218a5db1c1618defcce28e05e1dd07824.roa
File:                     e4fdc00218a5db1c1618defcce28e05e1dd07824.roa (raw, json)
Hash identifier:          nzkS+SChsdEbEVDZa/eBQaAPPxVQLs8sdxCGyqF+fRs=
Subject key identifier:   6F:D9:03:3E:CB:22:C0:C4:C0:70:09:22:49:BB:9E:F6:D0:75:F3:35
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       221D75
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/e4fdc00218a5db1c1618defcce28e05e1dd07824.roa
Signing time:             Tue 27 Jun 2023 17:12:39 +0000
ROA not before:           Mon 26 Jun 2023 17:12:38 +0000
ROA not after:            Fri 27 Jun 2025 17:12:38 +0000
asID:                     271933
IP address blocks:        45.70.13.0/24 maxlen: 24
                          2803:c420::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235765 (0x221d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Jun 26 17:12:38 2023 GMT
            Not After : Jun 27 17:12:38 2025 GMT
        Subject: CN=e4fdc00218a5db1c1618defcce28e05e1dd07824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:26:19:3a:97:00:dd:93:7d:b2:a7:f9:4b:
                    59:70:de:52:ff:51:82:31:17:fb:68:b4:48:49:a3:
                    4b:28:f8:c0:b8:a8:90:86:5c:e7:9b:7f:ca:ee:04:
                    3e:c0:84:13:1e:f3:5a:34:88:52:2a:99:e1:d2:bd:
                    44:8f:86:be:fd:40:dd:37:ed:11:5f:0c:2f:12:72:
                    59:a7:cd:53:c3:d0:ff:bb:b4:a1:11:58:f3:0b:99:
                    2a:3c:95:e1:69:7c:4d:fc:08:67:ab:d3:37:65:23:
                    0b:dd:07:45:71:c0:06:80:a3:4b:f1:93:d4:eb:e7:
                    e6:38:24:96:1c:73:64:09:f9:10:55:c3:c9:c6:35:
                    1e:f4:da:47:a6:94:dd:4d:bb:f7:d9:01:fe:ba:a4:
                    f7:2d:f0:18:e9:4f:9e:23:ad:6a:98:40:8c:b0:fa:
                    34:33:10:a9:bd:71:6e:6a:ec:1c:43:72:78:d5:71:
                    22:ac:a6:9c:5b:11:1c:bd:4e:84:09:9b:2a:b7:1f:
                    bd:18:4a:b4:10:6e:59:b9:8e:31:9d:c3:92:47:f0:
                    6c:31:58:72:d3:55:31:f6:bf:ec:94:09:9b:ac:7c:
                    57:cf:44:15:ef:4d:96:1f:ef:60:4f:68:89:54:17:
                    de:13:7c:c1:ee:1c:35:87:8a:c0:60:33:2b:34:6d:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:03:3E:CB:22:C0:C4:C0:70:09:22:49:BB:9E:F6:D0:75:F3:35
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/e4fdc00218a5db1c1618defcce28e05e1dd07824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.13.0/24
                IPv6:
                  2803:c420::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:58:00:35:62:0d:68:12:62:7d:d6:1d:30:3d:aa:b6:5d:
         ad:ae:cc:32:d0:07:01:68:8b:e1:df:42:95:44:38:56:ad:51:
         28:23:b4:84:6a:c8:57:51:4e:b8:6f:15:02:e3:42:ae:ea:cc:
         bc:77:e2:f2:d1:85:d5:b9:36:b5:57:e3:03:e8:57:78:21:7c:
         6b:ab:35:73:4d:71:b1:d2:86:98:af:5c:b7:29:01:f2:a9:14:
         c7:f3:8b:cd:9b:26:3a:69:75:81:02:e7:3b:6d:c3:aa:57:cb:
         2f:fc:dd:4e:2f:ad:b3:bf:fd:64:27:d1:9a:19:51:b3:54:9b:
         58:cb:ee:65:6f:d3:d9:af:ac:b4:8b:f1:c8:9e:b4:00:a1:e9:
         8a:6a:ff:4d:c6:55:2f:df:f6:85:d7:28:27:80:e2:69:41:72:
         8c:70:cd:da:de:94:7d:31:c5:1b:6c:6f:50:42:96:f0:3f:e7:
         5b:ca:8f:8a:33:e4:5b:f3:89:1d:fd:87:9c:e2:95:c5:ea:16:
         7c:b8:34:e7:b3:09:f2:40:ab:2e:fa:c4:61:57:2f:c8:fe:89:
         96:7b:2e:a9:56:86:d0:9b:66:21:23:cb:33:2e:a9:3f:74:00:
         df:6e:8a:91:2b:df:6d:2c:57:0f:db:0f:64:dc:d8:d7:48:d3:
         04:3a:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----