Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/51a5e934580c8fb9e57b78df6f76443371d22eb2.roa
File:                     51a5e934580c8fb9e57b78df6f76443371d22eb2.roa (raw, json)
Hash identifier:          Rrj8ph0OCY5/TIR3zxZFXb//YbMkh5Hj0O4hDwT7m7I=
Subject key identifier:   C0:3E:33:55:3A:01:1F:99:07:7B:44:9A:77:15:A9:87:AB:63:25:39
Certificate issuer:       /CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
Certificate serial:       093B69
Authority key identifier: 01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/51a5e934580c8fb9e57b78df6f76443371d22eb2.roa
Signing time:             Sun 23 Apr 2023 02:41:40 +0000
ROA not before:           Sat 22 Apr 2023 02:41:40 +0000
ROA not after:            Wed 23 Apr 2025 02:41:40 +0000
asID:                     269919
IP address blocks:        2803:42e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605033 (0x93b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Validity
            Not Before: Apr 22 02:41:40 2023 GMT
            Not After : Apr 23 02:41:40 2025 GMT
        Subject: CN=51a5e934580c8fb9e57b78df6f76443371d22eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:8d:dc:a0:d2:b1:97:41:c9:b2:b5:f4:53:
                    25:48:e2:3a:e3:09:dc:b6:14:a1:d6:d0:ba:e1:b6:
                    9e:47:3f:61:f4:f1:fc:d7:38:10:5a:e9:ac:0e:7f:
                    c0:3a:61:4e:52:8d:8a:7b:9e:28:bd:e0:31:3b:b3:
                    b2:ab:6e:01:f7:dd:57:c9:22:c4:8a:eb:47:11:aa:
                    44:d4:fc:eb:a8:ca:5c:5a:69:58:11:7b:7e:27:68:
                    55:f3:c8:97:58:49:16:32:15:2c:6a:91:13:e0:3a:
                    29:b5:0f:9a:05:0d:0b:ae:6b:cd:fb:1b:9c:e0:e7:
                    3f:4e:ff:21:66:48:11:ca:85:d6:4b:51:5b:bc:cb:
                    58:cc:0e:37:0a:88:f1:85:66:71:28:53:35:92:f5:
                    dc:e3:89:03:ec:17:fc:66:b4:68:e1:76:ba:a9:80:
                    71:2c:91:8e:b7:a0:70:c2:d5:a4:42:cc:6b:6a:a8:
                    6b:9b:99:c1:e0:a2:d1:4f:98:7c:96:da:7d:62:8d:
                    0a:ee:f8:6f:d4:c5:85:16:19:4b:bf:69:b3:ff:0d:
                    74:4e:72:bf:ba:ec:c9:98:19:f0:98:cb:a6:e7:52:
                    84:b2:02:43:1a:86:80:43:06:62:44:f9:69:97:87:
                    98:ca:a0:47:a9:2b:66:af:09:4a:94:c9:c1:d0:3b:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3E:33:55:3A:01:1F:99:07:7B:44:9A:77:15:A9:87:AB:63:25:39
            X509v3 Authority Key Identifier:
                keyid:01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/51a5e934580c8fb9e57b78df6f76443371d22eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:42e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:f4:a9:64:85:bc:09:30:a3:86:ff:8c:e6:06:c8:23:cd:
         7f:f6:d5:77:28:c9:76:4a:6e:9f:63:d2:b7:5a:31:01:61:e9:
         e9:47:d2:1d:81:8c:fa:16:a4:7b:a3:b1:2b:5b:20:a6:06:4f:
         89:3a:8e:11:87:db:0c:7c:a2:64:e6:e9:3e:f9:47:89:d9:f8:
         5e:7e:91:ff:a9:91:55:00:ef:3b:11:32:b6:de:fd:1f:d3:d4:
         66:3c:b3:1e:6c:7b:6a:89:68:26:d8:41:6a:ca:6c:8b:88:c9:
         01:db:fb:21:c5:2f:00:35:51:f5:cf:d1:1b:a2:1b:64:89:02:
         db:ba:4d:ea:e7:4d:d2:e0:b7:50:b7:8b:db:a7:c0:48:3d:b4:
         55:87:f3:84:1e:54:91:28:a9:a4:08:d2:7d:78:86:0d:20:25:
         bd:17:31:a2:54:b3:e6:86:f5:3a:4c:d2:ad:d7:fd:4e:92:c2:
         46:5f:23:7e:27:6e:42:5b:32:b9:80:55:68:69:c0:66:c4:33:
         54:b6:14:2d:0f:ee:88:47:42:73:c3:2c:41:11:d0:4f:c3:37:
         52:8b:b3:51:0d:79:a9:e8:d0:d8:91:ab:37:fe:e8:dc:4b:19:
         d5:22:a1:6b:19:9c:57:5f:2e:54:be:46:6a:ba:db:8d:90:91:
         13:de:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----