Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/1ab1498d548b6d3c608078bb07adb6b243c01458.roa
File:                     1ab1498d548b6d3c608078bb07adb6b243c01458.roa (raw, json)
Hash identifier:          sZDROtAg1UmE6hFJmNDpHsBeOIIrk0ntFD6xngxwmnE=
Subject key identifier:   59:74:DF:4B:22:CC:D8:15:AD:3A:E0:AC:B7:49:F9:CE:E5:93:E2:CE
Certificate issuer:       /CN=b35f1930ed1c716d45057c8f46fdd684adafd041
Certificate serial:       11BCFE
Authority key identifier: 2C:71:B1:BF:CD:51:BC:65:DF:4A:BA:5C:BB:70:5B:2A:19:38:A2:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b35f1930ed1c716d45057c8f46fdd684adafd041.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/1ab1498d548b6d3c608078bb07adb6b243c01458.roa
Signing time:             Thu 19 Oct 2023 07:30:02 +0000
ROA not before:           Wed 18 Oct 2023 07:30:02 +0000
ROA not after:            Fri 17 Oct 2025 07:30:02 +0000
asID:                     263693
IP address blocks:        45.70.184.0/22 maxlen: 24
                          2803:3220::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162494 (0x11bcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35f1930ed1c716d45057c8f46fdd684adafd041
        Validity
            Not Before: Oct 18 07:30:02 2023 GMT
            Not After : Oct 17 07:30:02 2025 GMT
        Subject: CN=1ab1498d548b6d3c608078bb07adb6b243c01458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:8f:5b:67:52:d3:b6:42:58:03:38:4b:17:
                    18:23:73:21:c3:d8:f8:97:49:b6:56:31:aa:fe:f6:
                    7e:2b:65:32:f3:00:cd:94:51:95:7a:a5:2e:28:96:
                    b8:47:ef:50:e9:f7:7b:55:69:78:0f:48:08:0c:83:
                    a3:e5:f6:95:53:60:b6:30:55:80:0b:5b:f9:b8:63:
                    ae:dc:7e:08:67:61:32:47:0a:3d:90:d4:68:3d:92:
                    1e:5e:10:9c:da:38:76:a1:28:79:b0:a5:b8:bb:27:
                    02:b2:40:8c:bb:ab:6b:59:97:fe:4e:e4:17:05:47:
                    fd:ed:49:cc:93:11:38:4e:c8:0d:22:ea:fd:20:d0:
                    fe:89:ca:ad:5d:d0:cc:a3:92:e1:03:86:19:5a:62:
                    72:4b:e5:16:17:64:57:80:fc:c3:55:d0:67:92:99:
                    a2:2c:78:27:74:3d:9f:96:7e:15:22:3c:ee:9e:a5:
                    9c:61:c5:75:a6:f2:18:e2:38:38:10:23:2b:15:76:
                    ec:94:2d:c3:c4:f7:bc:b1:1b:62:99:34:e3:0d:21:
                    ae:e5:c3:01:25:1d:cc:28:d1:20:b5:62:ff:a4:d1:
                    82:db:3f:ee:39:45:46:c9:a3:9a:cf:cc:72:27:d0:
                    a3:c3:50:d7:9f:e9:c3:03:e8:20:2d:f6:8a:b1:39:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:74:DF:4B:22:CC:D8:15:AD:3A:E0:AC:B7:49:F9:CE:E5:93:E2:CE
            X509v3 Authority Key Identifier:
                keyid:2C:71:B1:BF:CD:51:BC:65:DF:4A:BA:5C:BB:70:5B:2A:19:38:A2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b35f1930ed1c716d45057c8f46fdd684adafd041.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/1ab1498d548b6d3c608078bb07adb6b243c01458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7cc85a64-655d-46bb-ae77-9278bc57887b/b35f1930ed1c716d45057c8f46fdd684adafd041.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.184.0/22
                IPv6:
                  2803:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:62:17:02:71:e5:c6:b3:f1:cb:59:7b:f9:e4:1c:65:94:
         08:5d:4b:3a:0f:1b:ea:9d:1a:2f:d2:12:d8:3b:f2:b3:20:74:
         7f:c8:4b:f2:8a:fb:b6:dd:e5:db:af:05:ec:71:96:d0:d3:fc:
         49:fc:55:f9:f3:4a:39:88:0a:8a:32:14:7e:3b:ef:bb:81:10:
         a6:f2:d4:af:b3:92:d2:d2:dc:8c:75:ba:0f:b2:b1:85:b4:bb:
         8f:0b:fd:00:6d:66:0c:27:c9:e2:9c:72:fa:1a:55:e2:ff:bb:
         95:e8:1d:84:2f:02:df:90:32:08:19:3a:41:75:5f:86:79:00:
         5c:61:45:c1:33:b5:b3:f7:3b:44:e3:72:f0:bd:46:19:76:b4:
         54:3b:cd:3e:54:6b:49:25:f5:4b:3d:19:83:fd:81:51:ac:5a:
         31:00:16:9f:c7:79:d1:5e:a7:30:e3:0e:b1:e0:d4:70:8e:d5:
         25:30:b7:fa:82:4f:43:f2:ae:43:fb:d3:0e:f7:62:fa:51:f8:
         89:01:5f:e0:8e:43:c3:fd:d9:c7:93:d7:11:4e:48:36:b8:db:
         bf:72:73:72:16:9a:99:11:27:ba:b1:39:18:04:28:ef:b3:f6:
         ac:dc:ec:07:60:d8:c5:94:14:17:da:88:18:8b:7b:d3:12:72:
         b2:9a:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----