Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/7c4c437e712eb48b4b8e72ae317ddc7924c7c080.roa
File:                     7c4c437e712eb48b4b8e72ae317ddc7924c7c080.roa (raw, json)
Hash identifier:          JosWhKO1FngNHOWRO95ohKlMhJeyyzHxD1yZyyJH4W8=
Subject key identifier:   61:07:2E:2B:9A:90:C3:26:D0:C4:5C:BF:38:A0:08:6B:9D:8D:49:56
Certificate issuer:       /CN=a15b01c2a8902bf345199fd88a365f092418a1fe
Certificate serial:       1EF5A6
Authority key identifier: BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/7c4c437e712eb48b4b8e72ae317ddc7924c7c080.roa
Signing time:             Tue 07 Mar 2023 16:38:00 +0000
ROA not before:           Mon 06 Mar 2023 16:37:33 +0000
ROA not after:            Fri 07 Mar 2025 16:37:33 +0000
asID:                     52477
IP address blocks:        45.70.88.0/22 maxlen: 24
                          2803:e420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028966 (0x1ef5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Validity
            Not Before: Mar  6 16:37:33 2023 GMT
            Not After : Mar  7 16:37:33 2025 GMT
        Subject: CN=7c4c437e712eb48b4b8e72ae317ddc7924c7c080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:e9:c0:09:67:94:86:8c:bf:61:64:78:46:
                    f9:13:89:e6:9b:1d:ce:1c:f8:36:48:75:76:ac:3b:
                    90:d7:21:da:5f:9e:4e:4b:b5:3d:71:16:d9:b2:d9:
                    43:5a:a2:e5:49:99:5d:fc:e8:f8:27:ec:2f:38:45:
                    1a:a6:10:82:7c:0d:22:32:d1:3a:13:df:a0:22:0e:
                    64:be:ae:83:e4:fb:a5:d6:f3:a6:51:b2:b1:94:9c:
                    9e:89:1b:b0:9c:8f:7e:53:1e:e1:37:d6:42:7e:f1:
                    27:cc:08:05:6b:f2:3c:13:fc:da:2f:b2:76:8e:ec:
                    52:be:dc:48:16:0c:36:fd:a3:86:a2:cc:11:8d:fc:
                    ac:a6:65:fd:4b:ba:ce:00:ba:fd:e4:97:4a:b9:e8:
                    ae:07:46:04:3e:90:f0:8a:ff:d6:73:44:ff:f1:48:
                    bb:cd:b8:b8:b6:a4:c2:97:6a:30:dc:5e:23:69:ca:
                    86:11:53:f7:6d:8c:2d:2e:6f:db:84:74:b4:a9:72:
                    90:7c:d9:42:54:a2:e2:7d:fc:62:84:bd:5c:b5:7d:
                    3d:b4:87:57:b8:8d:63:e4:32:b0:4e:dd:12:6e:7d:
                    f7:37:ea:65:65:5a:0a:6b:c7:42:38:cd:20:23:d6:
                    48:34:c2:a9:6e:95:21:4f:72:0d:18:2b:a7:5b:96:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:2E:2B:9A:90:C3:26:D0:C4:5C:BF:38:A0:08:6B:9D:8D:49:56
            X509v3 Authority Key Identifier:
                keyid:BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/7c4c437e712eb48b4b8e72ae317ddc7924c7c080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22
                IPv6:
                  2803:e420::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:5a:e4:b3:80:70:10:05:2b:4b:2a:c9:0f:72:0d:45:6c:
         90:fa:91:3a:ca:1a:69:e1:18:71:c1:51:c1:69:b0:77:93:15:
         84:0f:ed:d9:96:46:f6:53:67:bb:e9:3b:8e:25:de:ee:dd:05:
         c0:ce:e7:86:d9:b9:de:3b:98:41:29:78:fc:40:10:98:da:b4:
         44:63:ff:5d:d9:c7:f7:3f:85:d9:81:d3:16:5b:75:3a:a1:ea:
         9c:e8:a5:d7:82:61:14:30:6a:ee:8d:6d:85:b9:48:e5:07:f0:
         a3:2f:2b:92:62:18:1c:e6:af:d6:cb:d6:4c:8e:36:22:cb:42:
         b8:2f:35:49:cd:35:e3:77:80:ff:ba:3a:83:4c:1b:6d:80:54:
         ae:19:3c:19:60:2b:80:96:79:47:f5:36:8c:40:67:98:d8:9e:
         d8:92:52:63:ef:43:b3:2f:6a:12:fb:6f:ba:93:88:f5:54:9e:
         60:b2:63:34:ec:5b:9a:d0:98:3f:22:e3:f4:ab:ba:59:ff:45:
         29:59:89:f6:63:44:69:e2:50:6f:d1:5c:b4:55:10:0c:b5:51:
         df:e6:13:8a:9f:78:0a:ce:a2:bf:e5:2b:b9:a0:13:69:42:03:
         6f:4e:9f:7d:7f:32:3a:40:52:76:79:b5:84:a6:e9:b5:98:87:
         7b:bd:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----