Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/bab7672f542ca02f24dab54d156e19b2d3b4e996.roa
File:                     bab7672f542ca02f24dab54d156e19b2d3b4e996.roa (raw, json)
Hash identifier:          jOQ2TZ5BN3q0QLRosLhL72pzwHCxaV/ejgFT6NjTqeI=
Subject key identifier:   DD:74:2D:88:0B:AD:E6:23:6E:FA:19:AE:AD:50:32:D4:E0:D8:1F:28
Certificate issuer:       /CN=a15b01c2a8902bf345199fd88a365f092418a1fe
Certificate serial:       1EF185
Authority key identifier: BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/bab7672f542ca02f24dab54d156e19b2d3b4e996.roa
Signing time:             Tue 07 Mar 2023 15:31:22 +0000
ROA not before:           Mon 06 Mar 2023 15:29:59 +0000
ROA not after:            Fri 07 Mar 2025 15:29:59 +0000
asID:                     52477
IP address blocks:        45.70.88.0/22 maxlen: 24
                          2803:e420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027909 (0x1ef185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Validity
            Not Before: Mar  6 15:29:59 2023 GMT
            Not After : Mar  7 15:29:59 2025 GMT
        Subject: CN=bab7672f542ca02f24dab54d156e19b2d3b4e996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:45:29:c0:9f:18:62:83:39:10:99:a6:66:
                    82:e4:46:73:e2:d6:13:44:40:cf:8a:62:ab:30:9d:
                    63:2d:14:e1:eb:5e:c6:ef:5a:c3:8e:7f:4d:07:bc:
                    37:37:8e:2f:e7:8f:e7:93:7c:1c:44:bc:a5:a9:1b:
                    88:c9:f9:b3:a8:a7:bd:7b:aa:70:4b:0b:a1:ef:64:
                    19:ce:25:74:15:80:2d:25:d8:72:e0:b3:6b:f7:6b:
                    d6:c7:c5:9f:e1:92:f5:6c:43:20:31:97:db:99:7d:
                    b0:c7:3f:ae:9a:55:c4:e9:85:bb:29:6a:b6:b4:62:
                    28:38:5e:66:8a:03:09:51:47:94:83:0c:93:0a:15:
                    c9:9b:72:32:a2:51:36:d0:39:7a:05:ed:8e:ef:5f:
                    8f:ba:97:9b:d1:4c:16:2c:0c:cf:2d:b2:1c:94:8e:
                    8e:52:03:9c:63:8a:00:94:08:e9:95:05:a7:85:fe:
                    ea:2c:10:a5:3f:14:12:60:7c:d8:a3:94:f9:32:fb:
                    3b:91:8d:d1:f1:b2:72:d6:12:ff:14:70:d6:39:1a:
                    44:dc:f6:5f:7e:3a:ac:24:81:03:e9:f5:43:a8:3a:
                    93:84:6c:17:5a:d4:a9:b6:31:bd:b9:69:f3:27:5e:
                    a3:ca:ca:30:45:db:7e:25:a8:a7:09:a8:d2:38:c9:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:2D:88:0B:AD:E6:23:6E:FA:19:AE:AD:50:32:D4:E0:D8:1F:28
            X509v3 Authority Key Identifier:
                keyid:BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/bab7672f542ca02f24dab54d156e19b2d3b4e996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.88.0/22
                IPv6:
                  2803:e420::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:22:cd:ef:a6:50:18:ab:9a:08:55:4d:b8:e2:39:f0:29:83:
         a0:ce:d6:bd:12:a7:d3:a4:c7:7d:b0:9c:e9:1b:49:62:de:47:
         da:ee:00:1a:ca:99:40:30:bc:eb:09:ab:09:bb:1b:8f:7d:88:
         e4:32:52:b8:a1:b9:17:b4:ad:15:75:71:a2:4e:89:18:af:88:
         9f:ab:5a:95:17:9e:52:d4:fe:e0:4e:25:04:32:17:15:42:41:
         39:72:2a:2e:b9:84:89:7c:4a:45:6d:44:9c:e3:f6:ce:3e:f2:
         d9:a3:09:63:7c:36:41:f3:29:47:98:ac:d2:15:0e:38:94:fe:
         74:7c:e0:2c:75:a2:95:28:24:35:b0:8e:fe:0a:78:97:91:68:
         ae:ce:53:75:9b:b7:50:fd:7a:bd:00:7d:0e:0a:86:95:53:b5:
         04:02:e9:a7:44:7c:39:30:ee:58:0c:dc:30:f5:47:6d:42:44:
         c8:05:fa:8f:31:31:04:60:45:54:b3:64:d6:1b:66:9a:00:78:
         a1:7d:66:a7:c7:1b:2b:ee:6f:58:d9:46:f7:21:d9:bf:6f:60:
         e0:c3:5a:c1:2e:36:d7:4a:0b:c0:07:73:17:23:ed:e7:58:86:
         8a:bc:5b:0d:66:ea:b0:7e:45:a8:0e:09:c3:ba:92:b6:b2:1c:
         23:51:7b:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHvGFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEx
NWIwMWMyYTg5MDJiZjM0NTE5OWZkODhhMzY1ZjA5MjQxOGExZmUwHhcNMjMwMzA2
MTUyOTU5WhcNMjUwMzA3MTUyOTU5WjAzMTEwLwYDVQQDEyhiYWI3NjcyZjU0MmNh
MDJmMjRkYWI1NGQxNTZlMTliMmQzYjRlOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhi9FKcCfGGKDORCZpmaC5EZz4tYTREDPimKrMJ1jLRTh617G
71rDjn9NB7w3N44v54/nk3wcRLylqRuIyfmzqKe9e6pwSwuh72QZziV0FYAtJdhy
4LNr92vWx8Wf4ZL1bEMgMZfbmX2wxz+umlXE6YW7KWq2tGIoOF5migMJUUeUgwyT
ChXJm3IyolE20Dl6Be2O71+Pupeb0UwWLAzPLbIclI6OUgOcY4oAlAjplQWnhf7q
LBClPxQSYHzYo5T5Mvs7kY3R8bJy1hL/FHDWORpE3PZffjqsJIED6fVDqDqThGwX
WtSptjG9uWnzJ16jysowRdt+JainCajSOMne9wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFN10LYgLreYjbvoZrq1QMtTg2B8oMB8GA1UdIwQYMBaAFLv88ULEx7pdHEvG
PYX7s5DvGe4GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTE1YjAx
YzJhODkwMmJmMzQ1MTk5ZmQ4OGEzNjVmMDkyNDE4YTFmZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTdlMjQ0MzAtZTdmNC00YjJhLTg4YTgtMDdjM2Vi
OWExZmUwL2JhYjc2NzJmNTQyY2EwMmYyNGRhYjU0ZDE1NmUxOWIyZDNiNGU5OTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hN2UyNDQzMC1lN2Y0LTRiMmEtODhhOC0wN2Mz
ZWI5YTFmZTAvYTE1YjAxYzJhODkwMmJmMzQ1MTk5ZmQ4OGEzNjVmMDkyNDE4YTFm
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi1GWDANBAIAAjAHAwUAKAPkIDANBgkqhkiG9w0BAQsFAAOC
AQEAdyLN76ZQGKuaCFVNuOI58CmDoM7WvRKn06THfbCc6RtJYt5H2u4AGsqZQDC8
6wmrCbsbj32I5DJSuKG5F7StFXVxok6JGK+In6talReeUtT+4E4lBDIXFUJBOXIq
LrmEiXxKRW1EnOP2zj7y2aMJY3w2QfMpR5is0hUOOJT+dHzgLHWilSgkNbCO/gp4
l5Fors5TdZu3UP16vQB9DgqGlVO1BALpp0R8OTDuWAzcMPVHbUJEyAX6jzExBGBF
VLNk1htmmgB4oX1mp8cbK+5vWNlG9yHZv29g4MNawS4210oLwAdzFyPt51iGirxb
DWbqsH5FqA4Jw7qStrIcI1F7fQ==
-----END CERTIFICATE-----