Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/5b19b84103b61133c8803c66fcc573b5db87ef38.roa
File:                     5b19b84103b61133c8803c66fcc573b5db87ef38.roa (raw, json)
Hash identifier:          5EA+hydo1CjqB7DEYWtBgWyf2dkWDNPS7/0glvNN+Kw=
Subject key identifier:   9B:60:98:38:FB:E2:15:21:86:1E:92:0A:3B:9D:CD:00:98:73:CB:84
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       190303
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/5b19b84103b61133c8803c66fcc573b5db87ef38.roa
Signing time:             Tue 14 Jun 2022 09:36:26 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Fri 14 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639171 (0x190303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2024 GMT
        Subject: CN=5b19b84103b61133c8803c66fcc573b5db87ef38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:0b:27:5e:c2:8d:49:ba:ea:2c:9c:88:c3:
                    69:4c:db:62:a8:ee:de:2a:b0:8c:09:55:53:2f:7f:
                    04:e8:5c:d6:6a:db:c6:13:00:d6:46:ce:ef:80:6d:
                    8f:4e:14:3a:f0:91:71:18:76:c9:11:40:4b:d4:92:
                    e9:f8:7e:98:85:ef:8c:12:2e:c0:0d:96:0b:8c:33:
                    d5:34:33:02:d7:89:35:ec:2e:ca:0b:e9:c9:85:88:
                    13:86:a5:39:84:0a:97:a1:6d:e4:50:f8:5a:ab:86:
                    b2:2c:fc:68:51:c3:cd:e4:68:3f:52:54:0f:b8:75:
                    a8:8a:ba:71:67:17:a9:16:fa:61:62:17:2d:4c:4f:
                    82:5c:14:13:0e:6d:e4:0d:64:af:86:25:9f:e9:4e:
                    a4:2e:02:dc:c6:7c:61:12:ef:94:1c:47:15:40:80:
                    80:2a:a3:c9:fa:fb:60:7e:d6:84:f9:9a:7f:b7:25:
                    f5:af:91:25:30:a4:9e:73:22:5c:11:b0:28:64:14:
                    14:95:f5:ed:39:d4:30:15:6d:a8:42:0a:3f:50:8a:
                    ef:61:91:7f:bd:e7:2a:0b:e2:19:bf:40:38:b9:b0:
                    fb:cb:18:02:ca:d9:78:06:16:d2:fc:ea:cb:70:9b:
                    c2:89:50:89:01:ce:3f:cc:a4:b8:9e:f7:4c:85:66:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:98:38:FB:E2:15:21:86:1E:92:0A:3B:9D:CD:00:98:73:CB:84
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/5b19b84103b61133c8803c66fcc573b5db87ef38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:73:ef:7a:be:52:a7:d7:91:a4:0e:0e:b7:96:4c:f9:f3:e4:
         58:66:05:f7:b2:f2:5b:e8:96:d7:36:d3:53:e7:25:47:48:70:
         cf:bc:fb:4c:e3:ef:b0:78:88:8a:89:71:85:0d:b5:55:b0:cf:
         14:36:25:8d:1b:09:2d:44:06:53:e4:f2:f5:1a:e6:14:b3:66:
         ff:1d:25:59:58:13:42:e9:18:92:4a:e2:ae:1e:6b:0b:67:bd:
         e2:d8:54:85:e8:92:21:8b:97:bb:85:91:d6:9d:61:1f:93:99:
         49:c4:e5:88:81:8f:23:fa:a8:24:27:38:77:be:5c:b9:4b:7e:
         bf:d0:5b:a1:f5:91:8d:92:53:59:d2:71:e8:31:e2:e3:4a:66:
         42:d5:25:be:12:ed:04:a3:8a:b0:22:ec:80:4f:04:56:78:15:
         a2:cb:95:28:cc:c3:02:d5:8d:2e:8d:7d:75:f3:3e:06:7c:55:
         9f:9c:bd:1c:d3:c7:14:a8:3e:35:d0:90:0e:4e:04:de:ba:3a:
         2b:bc:28:6b:e2:56:3a:bb:35:1d:e6:32:f0:d7:62:62:de:4e:
         07:01:a1:db:07:c5:88:85:de:d8:be:47:7d:6d:42:26:bd:48:
         a1:c5:4f:c9:be:7d:aa:03:94:72:fd:69:16:93:53:42:d2:f5:
         6f:90:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----