Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/2bd70ab36da050cd378c5f68d14e6b91b83784d5.roa
File:                     2bd70ab36da050cd378c5f68d14e6b91b83784d5.roa (raw, json)
Hash identifier:          P9FlkwBatNl+46PpNw3NeQmIcPctUo7Y0dG7hwQCgOk=
Subject key identifier:   60:2D:AD:07:51:69:3C:2F:A1:49:E8:9C:61:BB:DB:35:C6:3D:36:F1
Certificate issuer:       /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial:       228964
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/2bd70ab36da050cd378c5f68d14e6b91b83784d5.roa
Signing time:             Thu 13 Jul 2023 14:44:38 +0000
ROA not before:           Wed 12 Jul 2023 14:44:37 +0000
ROA not after:            Sun 13 Jul 2025 14:44:37 +0000
asID:                     264668
IP address blocks:        45.71.36.0/22 maxlen: 24
                          2803:cc20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263396 (0x228964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
        Validity
            Not Before: Jul 12 14:44:37 2023 GMT
            Not After : Jul 13 14:44:37 2025 GMT
        Subject: CN=2bd70ab36da050cd378c5f68d14e6b91b83784d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:f2:d9:f0:71:e2:2a:0f:25:c4:9e:d2:6f:
                    cf:da:5e:3d:e7:04:0c:18:ab:f4:89:6b:0d:a2:e3:
                    92:75:18:92:b3:07:8b:41:80:18:d9:3a:c9:ee:7d:
                    6c:49:0f:a7:c6:15:49:67:5d:b3:19:f1:4b:42:26:
                    5f:13:f6:ec:4a:46:6f:ac:40:ff:0d:33:4e:7c:51:
                    96:74:ae:7b:c2:d5:c7:f6:6b:78:ab:01:76:e4:36:
                    b6:1f:7c:47:93:7c:54:dd:2b:79:a5:fc:c4:b4:c4:
                    90:2d:9f:54:e6:9c:2f:df:72:ef:90:11:83:9e:f3:
                    74:ff:41:21:d7:1e:71:fb:86:9e:aa:47:15:99:11:
                    e5:6e:f7:1d:d7:e2:6f:4e:68:4a:ba:39:d6:d9:d4:
                    62:10:c7:67:bc:88:24:d1:8d:de:20:10:83:dd:d9:
                    52:f1:05:b8:7c:75:4d:ca:6a:e6:ba:cb:4a:a1:32:
                    15:26:d4:49:ff:11:d7:9d:27:3a:04:e4:3d:b6:f7:
                    15:6d:d2:25:64:bf:4b:42:05:30:24:76:bf:bc:13:
                    e7:15:a8:a6:3d:57:10:50:73:93:08:1e:e3:f8:09:
                    0a:60:66:e5:64:76:5f:59:2e:21:e8:ed:cc:1c:2e:
                    5d:aa:8d:aa:03:fd:fa:e0:98:bc:5f:b9:ba:cd:03:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:AD:07:51:69:3C:2F:A1:49:E8:9C:61:BB:DB:35:C6:3D:36:F1
            X509v3 Authority Key Identifier:
                keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/2bd70ab36da050cd378c5f68d14e6b91b83784d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.36.0/22
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:fa:0f:57:55:c3:ab:94:f5:8a:35:94:ff:e5:c4:5d:48:
         13:85:8e:ad:20:78:d9:c8:f0:9a:bb:b9:c5:15:1a:9e:85:07:
         bd:c4:b1:2f:4e:8e:f3:66:a1:7c:61:66:17:d2:ed:26:bf:09:
         78:94:a7:5b:9a:4c:71:3e:62:42:c6:54:ae:c1:94:6b:ff:d3:
         a4:5a:0f:bc:20:ac:42:ed:6f:e0:5f:27:61:39:63:39:41:35:
         54:f5:79:0d:cf:22:ed:82:ce:38:15:5a:26:14:4c:ae:b8:09:
         7b:12:84:cc:af:41:fb:49:98:a9:10:68:7a:be:49:d8:fa:80:
         e5:4e:2e:96:23:43:52:4d:fa:48:1f:87:13:1f:27:e0:97:d6:
         5d:31:f6:21:ac:d3:55:86:38:19:f5:87:40:e3:66:54:3b:75:
         85:99:cb:e8:95:84:33:d4:c1:4c:44:f1:58:22:2c:9e:51:aa:
         a2:b2:a6:96:bc:ec:97:fd:5e:da:88:29:b5:bb:bd:0a:97:29:
         33:a2:c9:dd:15:d4:19:a2:ed:a0:60:b2:cf:4b:e1:36:b5:ba:
         23:3f:3e:c0:5e:cd:32:26:9b:39:12:0e:55:40:61:70:cb:2a:
         37:ae:e4:10:40:e3:41:0f:5f:a2:6c:3e:a4:88:bb:b6:2d:6b:
         be:fd:f3:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDIolkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm
NzRmM2FhNDIzNDBhNGMwM2E3MjRiY2ZlOWQ2MDQzOTBkMDA5OTgwHhcNMjMwNzEy
MTQ0NDM3WhcNMjUwNzEzMTQ0NDM3WjAzMTEwLwYDVQQDEygyYmQ3MGFiMzZkYTA1
MGNkMzc4YzVmNjhkMTRlNmI5MWI4Mzc4NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA02Py2fBx4ioPJcSe0m/P2l495wQMGKv0iWsNouOSdRiSsweL
QYAY2TrJ7n1sSQ+nxhVJZ12zGfFLQiZfE/bsSkZvrED/DTNOfFGWdK57wtXH9mt4
qwF25Da2H3xHk3xU3St5pfzEtMSQLZ9U5pwv33LvkBGDnvN0/0Eh1x5x+4aeqkcV
mRHlbvcd1+JvTmhKujnW2dRiEMdnvIgk0Y3eIBCD3dlS8QW4fHVNymrmustKoTIV
JtRJ/xHXnSc6BOQ9tvcVbdIlZL9LQgUwJHa/vBPnFaimPVcQUHOTCB7j+AkKYGbl
ZHZfWS4h6O3MHC5dqo2qA/364Ji8X7m6zQNWzQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFGAtrQdRaTwvoUnonGG72zXGPTbxMB8GA1UdIwQYMBaAFPjADna6vDze/iOT
okrklwo0hX7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWY3NGYz
YWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmUxMzk0YjktYjA3OC00NGZmLThjNzUtOTM2NTMw
M2FjYTRmLzJiZDcwYWIzNmRhMDUwY2QzNzhjNWY2OGQxNGU2YjkxYjgzNzg0ZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTEzOTRiOS1iMDc4LTQ0ZmYtOGM3NS05MzY1
MzAzYWNhNGYvYWY3NGYzYWE0MjM0MGE0YzAzYTcyNGJjZmU5ZDYwNDM5MGQwMDk5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi1HJDANBAIAAjAHAwUAKAPMIDANBgkqhkiG9w0BAQsFAAOC
AQEAjyD6D1dVw6uU9Yo1lP/lxF1IE4WOrSB42cjwmru5xRUanoUHvcSxL06O82ah
fGFmF9LtJr8JeJSnW5pMcT5iQsZUrsGUa//TpFoPvCCsQu1v4F8nYTljOUE1VPV5
Dc8i7YLOOBVaJhRMrrgJexKEzK9B+0mYqRBoer5J2PqA5U4uliNDUk36SB+HEx8n
4JfWXTH2IazTVYY4GfWHQONmVDt1hZnL6JWEM9TBTETxWCIsnlGqorKmlrzsl/1e
2ogptbu9CpcpM6LJ3RXUGaLtoGCyz0vhNrW6Iz8+wF7NMiabORIOVUBhcMsqN67k
EEDjQQ9fomw+pIi7ti1rvv3zSg==
-----END CERTIFICATE-----