Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/7994b09da5eed658b742277c74eb7b96b0b83277.roa
File:                     7994b09da5eed658b742277c74eb7b96b0b83277.roa (raw, json)
Hash identifier:          1e9hYedZR9IF31zvlB9P6ZPfcQ54/jRgPHTgoHn7O4c=
Subject key identifier:   0A:B2:AE:90:5A:B7:42:DA:17:60:B7:19:AB:58:E6:E3:CA:2F:83:67
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       0CB056
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/7994b09da5eed658b742277c74eb7b96b0b83277.roa
Signing time:             Wed 24 Mar 2021 14:33:01 +0000
ROA not before:           Wed 24 Mar 2021 14:33:01 +0000
ROA not after:            Tue 24 Mar 2026 14:33:01 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 22
                          2803:7420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831574 (0xcb056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Mar 24 14:33:01 2021 GMT
            Not After : Mar 24 14:33:01 2026 GMT
        Subject: CN=7994b09da5eed658b742277c74eb7b96b0b83277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:30:21:6f:23:4f:3a:f7:7f:2f:5e:7f:bc:
                    31:f2:94:ba:b9:5c:bc:4e:b1:66:6e:86:18:ae:9f:
                    b6:00:6c:ed:e4:27:bb:18:ac:5a:aa:d3:37:27:12:
                    c0:7b:9f:1f:d5:94:ae:3e:1a:bb:ad:67:06:67:81:
                    a7:cb:3c:fd:13:38:f1:1b:6a:41:16:69:53:cd:28:
                    c7:45:44:55:2b:7c:d5:c2:23:29:c0:f8:58:0a:f7:
                    71:2f:ef:5e:95:b6:39:f4:ab:85:ad:50:85:71:9f:
                    d4:8a:39:60:c1:ca:86:8c:9b:57:75:71:5c:9e:4d:
                    a2:2b:f7:8e:2b:21:98:5e:88:a3:0d:4c:be:82:68:
                    66:1d:d8:68:e1:4c:61:da:9a:24:ec:82:62:b2:e9:
                    66:8b:d9:67:a2:aa:c0:e2:e6:b0:d1:df:0e:21:af:
                    88:30:b2:63:20:e0:32:74:1f:52:8d:da:74:5e:9a:
                    1c:83:08:80:20:5b:04:e6:78:93:0f:06:bd:0a:87:
                    b8:15:d7:77:00:64:bf:88:57:9b:6e:c6:ea:b1:a7:
                    1c:d7:c4:d7:32:ed:ac:b4:0e:2a:d1:7f:1a:2a:40:
                    2f:e3:d1:9a:ad:e7:f7:4d:a9:d7:94:3d:09:15:31:
                    d1:68:f7:1a:a1:a7:13:93:61:89:19:70:ca:93:41:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:AE:90:5A:B7:42:DA:17:60:B7:19:AB:58:E6:E3:CA:2F:83:67
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/7994b09da5eed658b742277c74eb7b96b0b83277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22
                IPv6:
                  2803:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:3b:08:c2:f5:37:8b:b8:2f:61:b5:0a:09:4e:12:0c:2a:
         0f:85:cc:fc:0b:a0:41:e9:a6:a4:47:b1:48:4c:cd:5a:9a:1c:
         0b:32:ba:01:98:4d:5d:80:25:3d:7c:45:fc:f5:b5:3d:3d:f1:
         01:f9:38:54:58:ab:8f:f5:67:c3:81:f9:c6:57:5a:f7:0d:bf:
         e4:39:cb:a6:79:f4:a9:e4:ad:9b:26:9c:20:cb:03:8d:7c:9b:
         3d:f2:cf:28:75:58:7d:4a:65:d2:0a:3f:5d:06:54:1f:98:71:
         9e:da:19:1e:ed:fc:dc:54:80:27:57:0d:06:a8:aa:4d:f5:1a:
         c6:9b:b0:0b:81:95:67:42:c1:53:cd:40:2e:6f:99:c4:e8:25:
         44:22:8c:20:8f:ac:68:f0:08:25:0d:56:3b:c8:6a:c9:7d:d1:
         4e:80:ca:38:1e:62:71:ee:73:93:8b:cc:8e:e0:87:4a:28:f2:
         1d:fa:f0:46:8b:9d:d1:1a:6b:f9:a8:24:90:bb:6a:6c:10:37:
         51:fa:a6:86:0b:0d:9d:48:fb:dc:71:1e:ba:36:2c:ff:1e:59:
         c6:9c:a6:0d:cb:15:77:5c:28:ea:e2:7a:d9:14:a3:bc:da:e9:
         62:14:32:ec:fc:01:23:2b:a1:4e:7d:60:e5:93:dd:ec:6c:40:
         0d:2a:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----