Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/f8568c8c3723958037188b87a3b28b4223245cf9.roa
File:                     f8568c8c3723958037188b87a3b28b4223245cf9.roa (raw, json)
Hash identifier:          3nFBJ+HRBX5lAEB5KID9mFfIKGJl63qnv8/mzJ9P2bs=
Subject key identifier:   E5:3D:9A:84:E6:DA:B6:4C:C2:77:EF:77:F7:FF:58:58:7B:80:78:C3
Certificate issuer:       /CN=714626731563edac445f2a542b02422c8a96607b
Certificate serial:       19D3EA
Authority key identifier: DC:B1:B7:DD:94:FF:19:C0:69:E0:BA:43:F1:8E:AA:1D:60:04:3F:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/714626731563edac445f2a542b02422c8a96607b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/f8568c8c3723958037188b87a3b28b4223245cf9.roa
Signing time:             Sat 25 Jun 2022 15:55:20 +0000
ROA not before:           Sat 25 Jun 2022 03:00:00 +0000
ROA not after:            Tue 25 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 22
                          45.70.116.0/22 maxlen: 24
                          45.70.116.0/24 maxlen: 24
                          45.70.117.0/24 maxlen: 24
                          45.70.118.0/24 maxlen: 24
                          45.70.119.0/24 maxlen: 24
                          2803:d420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692650 (0x19d3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714626731563edac445f2a542b02422c8a96607b
        Validity
            Not Before: Jun 25 03:00:00 2022 GMT
            Not After : Jun 25 03:00:00 2024 GMT
        Subject: CN=f8568c8c3723958037188b87a3b28b4223245cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:f0:84:14:c2:b0:2d:52:ad:08:47:8b:b5:
                    87:fe:b0:dd:e8:a1:b5:16:d0:f4:26:5b:54:cc:85:
                    a9:c5:e2:90:d1:47:1b:5d:b2:1f:0a:2d:94:1d:dc:
                    fe:e0:a1:83:5a:f1:ec:44:19:49:0f:86:c7:19:25:
                    da:e7:28:5f:ac:41:92:83:68:bf:68:67:98:a9:8b:
                    3f:d9:8a:b6:6a:c0:a9:9a:f4:a9:30:4a:18:05:c9:
                    d6:90:16:79:de:94:b0:f7:0d:31:f8:cd:07:5d:7e:
                    44:8e:d2:48:a4:6c:60:06:d6:bf:ce:f2:b8:38:3f:
                    97:29:22:24:2a:58:57:3f:a7:99:90:b6:99:70:a6:
                    0a:88:d5:97:d2:94:df:e1:df:75:2e:ca:6c:55:db:
                    04:20:da:6c:e1:d0:e8:38:1c:a3:fe:38:1a:d7:11:
                    80:2f:61:29:dc:92:db:22:72:30:88:0c:64:2b:50:
                    2a:62:60:7d:f6:7c:43:7b:e9:e1:94:a8:57:98:bf:
                    5d:19:6e:ef:dd:ce:e6:24:b3:49:7f:c4:85:0f:81:
                    a9:9f:c0:04:d9:62:ad:5e:cd:c6:0f:62:98:19:41:
                    49:06:f0:3e:93:80:17:b3:89:cd:35:8d:75:18:98:
                    a9:b8:a4:28:21:82:8b:a5:ef:2c:5d:3e:97:4d:88:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:9A:84:E6:DA:B6:4C:C2:77:EF:77:F7:FF:58:58:7B:80:78:C3
            X509v3 Authority Key Identifier:
                keyid:DC:B1:B7:DD:94:FF:19:C0:69:E0:BA:43:F1:8E:AA:1D:60:04:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/714626731563edac445f2a542b02422c8a96607b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/f8568c8c3723958037188b87a3b28b4223245cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/714626731563edac445f2a542b02422c8a96607b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22
                IPv6:
                  2803:d420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:85:66:7f:13:b7:b9:ec:9b:41:55:38:22:06:7e:c0:0f:a0:
         e6:53:ac:8a:ee:46:1a:dd:b0:fd:28:71:37:a2:e1:45:ad:61:
         c0:83:07:5f:66:3e:46:05:49:2e:72:75:05:a7:8d:16:09:ad:
         6a:02:03:9b:b6:28:f7:2a:12:b0:b5:68:5d:4b:97:b9:f4:e8:
         76:7a:e1:da:b8:eb:49:66:1d:5e:0f:40:59:ab:ab:c4:75:0f:
         97:91:5c:f5:a6:29:06:8d:0f:ac:b5:42:cc:84:21:db:2b:5c:
         44:b0:a6:52:3e:cd:36:df:9c:64:fb:91:06:d7:fd:11:e7:c7:
         32:16:99:2b:49:a8:6e:74:84:70:ca:af:b7:85:25:f5:32:03:
         d4:a4:ff:8c:9b:29:4c:20:75:73:6a:d1:ca:9b:b3:67:3c:ac:
         bd:f8:ed:6a:8b:20:8a:66:86:de:9a:80:21:16:1b:ff:95:e3:
         8b:a2:09:fb:49:44:e5:eb:50:23:e0:f3:27:64:e1:e3:61:5c:
         94:ea:1e:ff:69:91:72:77:9c:4a:fd:1a:28:3e:88:31:eb:8d:
         f6:5b:84:0c:28:91:61:0c:b2:a9:19:10:bd:be:ee:7f:af:25:
         e3:ee:f1:d7:94:6e:80:ea:03:f8:e8:81:1e:0a:1f:e7:b5:55:
         23:a9:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----