Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/68f4941ca223a5a994f049692123ef3e07a10b54.roa
File:                     68f4941ca223a5a994f049692123ef3e07a10b54.roa (raw, json)
Hash identifier:          OEefYHKi2fazUHfsEDIG449YDETnAdeNjk6sesaYx4U=
Subject key identifier:   AA:DC:69:3B:BA:EC:92:93:E1:A0:0C:61:EF:61:59:36:19:A9:B1:64
Certificate issuer:       /CN=a15b01c2a8902bf345199fd88a365f092418a1fe
Certificate serial:       1EE039
Authority key identifier: BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/68f4941ca223a5a994f049692123ef3e07a10b54.roa
Signing time:             Tue 07 Mar 2023 14:10:33 +0000
ROA not before:           Mon 06 Mar 2023 14:07:19 +0000
ROA not after:            Fri 07 Mar 2025 14:07:19 +0000
asID:                     265837
IP address blocks:        45.70.88.0/22 maxlen: 22
                          2803:e420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023481 (0x1ee039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Validity
            Not Before: Mar  6 14:07:19 2023 GMT
            Not After : Mar  7 14:07:19 2025 GMT
        Subject: CN=68f4941ca223a5a994f049692123ef3e07a10b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:c2:f5:f9:14:dd:19:f3:7f:5f:23:d6:14:
                    6f:28:2a:d7:c1:25:65:ca:6c:3e:88:0a:4d:32:19:
                    84:ed:d9:4f:1e:04:53:67:7d:43:9a:8c:85:7c:d8:
                    54:a3:8f:50:03:c9:3f:e3:cd:8d:a9:55:6e:32:d7:
                    81:92:d7:52:74:9d:ae:a9:39:de:27:4b:18:17:07:
                    33:7f:dc:02:30:ec:a6:ed:95:13:99:ce:a0:70:10:
                    86:52:6f:11:00:02:74:06:9a:49:cd:6c:6f:62:3a:
                    9c:48:ee:f0:8b:ec:a9:78:50:f0:e1:01:f8:ec:8a:
                    a2:61:af:2b:91:5a:63:ae:4a:3b:d1:89:c8:6c:cb:
                    73:1c:78:04:16:f5:8f:42:ca:0d:57:41:7e:4a:b1:
                    a8:04:d6:27:46:47:7a:33:8f:75:e7:39:2f:14:c2:
                    e7:4d:f2:2b:f0:fb:24:7c:5c:9f:7d:79:d8:61:f0:
                    ba:28:35:0d:aa:88:b7:4c:9a:bc:da:03:01:a1:ef:
                    5e:0c:23:2f:18:6e:e3:16:f1:a0:9f:12:21:b1:6b:
                    67:ee:e4:b9:ad:59:99:2f:85:6d:39:ad:fb:a6:82:
                    17:cc:6f:a8:53:d7:a1:2b:d3:96:d8:10:8a:65:69:
                    18:ce:bb:59:ec:aa:02:38:ec:ae:76:65:95:72:03:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:69:3B:BA:EC:92:93:E1:A0:0C:61:EF:61:59:36:19:A9:B1:64
            X509v3 Authority Key Identifier:
                keyid:BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/68f4941ca223a5a994f049692123ef3e07a10b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22
                IPv6:
                  2803:e420::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:95:1f:19:2a:31:5c:eb:f5:0d:f5:6f:7a:bb:16:80:12:91:
         cf:8b:c8:67:6c:33:24:a5:f7:c2:6f:d7:39:68:a4:7c:68:b8:
         80:77:5a:d5:45:c1:4a:cb:c3:90:e0:99:e0:33:ae:eb:79:16:
         66:7c:43:c0:96:08:62:59:cb:3a:a2:d4:91:63:d9:fc:59:7e:
         bb:6d:3a:4f:fb:45:ad:13:34:e1:9b:b3:eb:70:12:75:0e:b0:
         a7:e2:18:e5:7f:75:b2:88:22:58:83:9e:aa:ab:5a:be:e3:9d:
         c3:43:79:51:8c:0b:a3:bf:71:54:ff:d3:79:f3:eb:76:f1:82:
         ce:b2:56:59:3f:fd:5d:74:34:f1:72:dd:48:06:9c:2d:33:4f:
         07:71:a1:42:25:05:24:1c:ae:ec:08:b6:60:84:45:f4:e4:92:
         32:22:40:e0:3e:14:68:de:19:a8:68:85:58:41:7a:e9:eb:8a:
         4a:b2:8f:4f:99:2e:50:da:af:8c:95:29:aa:a8:25:9c:87:44:
         6f:2a:e2:88:f6:22:2b:0b:3c:6f:2e:11:1e:81:3b:64:3e:2b:
         f0:47:5d:d1:26:e8:9d:31:66:56:bb:7a:18:93:56:6b:ee:82:
         74:8e:8f:79:65:a1:78:af:1c:e5:f1:c4:a8:76:51:26:5b:7c:
         d4:5c:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----