Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/69497debc41bfb8e05580db77a8d81afed557696.roa
File:                     69497debc41bfb8e05580db77a8d81afed557696.roa (raw, json)
Hash identifier:          9Bq5oMUXkf1THwk2JMeYBEawmZAD6zrb2Hgo8ZHfaYY=
Subject key identifier:   2A:80:12:E1:A4:02:BB:DC:EE:12:07:88:02:B3:58:AD:07:71:D3:AD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06A70A
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/69497debc41bfb8e05580db77a8d81afed557696.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     54133
IP address blocks:        181.215.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435978 (0x6a70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=69497debc41bfb8e05580db77a8d81afed557696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:c9:06:ec:1e:5d:60:57:71:1e:6b:a0:01:
                    a2:f2:02:2b:f1:a5:58:50:3b:7e:fb:6c:1f:1d:5d:
                    c9:2d:bb:2e:53:d8:aa:e2:53:64:aa:55:e4:50:a5:
                    66:c6:8f:a9:41:1a:6a:d9:dd:15:27:fb:30:54:bd:
                    4e:58:d6:20:27:ef:35:cc:fc:39:09:55:28:67:87:
                    f8:64:5a:47:07:cd:f8:cd:d0:0e:f8:86:32:0d:b9:
                    de:05:73:a6:cd:99:df:d7:87:bc:4b:15:aa:18:ac:
                    7e:7e:b4:ae:a6:05:81:11:0c:e0:36:da:8e:98:ec:
                    9a:42:df:86:a5:35:ce:c9:52:99:f3:0c:ce:23:ea:
                    41:e6:75:9a:5c:3e:34:ea:64:6a:b8:ba:33:fe:53:
                    40:5c:5f:c2:f0:36:2a:0a:61:fd:dc:27:1d:64:5f:
                    06:60:6d:59:01:8c:e6:16:ed:c1:82:a3:4c:e9:a0:
                    43:c0:6f:df:65:41:2e:29:ee:20:4a:02:dc:a6:76:
                    7f:42:fc:01:6b:54:4d:3a:d3:6f:9b:26:90:12:db:
                    81:fe:a8:04:a5:bb:82:c0:04:cf:0a:d7:10:fd:4f:
                    8c:2c:a4:cd:fe:36:b4:e1:76:a3:ca:7c:13:6e:0e:
                    82:9d:81:2e:d6:84:d6:24:30:64:6b:28:dd:fc:9c:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:12:E1:A4:02:BB:DC:EE:12:07:88:02:B3:58:AD:07:71:D3:AD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/69497debc41bfb8e05580db77a8d81afed557696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4f:e3:9d:d2:e5:3e:f0:fc:cd:ab:bc:07:ae:53:e4:84:d7:
         61:b3:d4:4a:75:61:f7:72:06:3e:37:ce:c6:b9:d7:e7:ec:ae:
         9f:96:b6:0d:28:4a:1a:70:c0:93:a1:19:97:b3:66:64:ed:29:
         d2:14:3a:10:36:ae:28:b1:c1:29:59:0b:33:1f:f7:6a:47:8c:
         be:b8:bf:1e:99:62:05:50:4d:4d:bc:06:eb:2a:e9:17:44:5f:
         8d:bc:68:b8:90:6c:f8:8c:39:64:4d:43:c4:e7:46:cb:a3:5b:
         98:0d:e1:71:fe:bb:6e:83:33:05:71:f6:d4:ca:7f:87:08:ea:
         f7:35:98:e2:00:0e:f3:1b:60:85:ab:f1:23:57:d6:a5:df:f3:
         5c:38:11:cd:f7:de:2b:c1:fb:f2:4f:ca:88:65:c1:f8:31:dc:
         1d:b4:68:26:79:03:25:b7:da:d4:5b:2d:78:9d:07:db:66:55:
         13:43:1b:e4:e7:cd:c9:67:3e:58:a7:fe:3e:00:60:bf:ba:93:
         cd:ef:0a:d2:9f:8f:fc:1c:0b:8c:c5:1e:e0:08:70:81:0e:3c:
         ef:84:ae:f9:bb:55:4b:46:a8:02:3f:ee:2c:0d:b4:39:ee:a1:
         cf:64:67:13:b7:6d:30:40:d8:2a:7d:a1:77:80:f8:16:ff:48:
         63:6d:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----