Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/b45adcb8b01eeff9e4e3cdfbe86abadfd9438b68.roa
File:                     b45adcb8b01eeff9e4e3cdfbe86abadfd9438b68.roa (raw, json)
Hash identifier:          9Uwp/1PwIBaZuC8O1+SPe/DcRiZQyUYY/PnLsX8xVek=
Subject key identifier:   B0:99:5F:6B:AC:DA:2F:D7:0E:27:86:04:3C:1D:3D:66:1F:4F:10:D8
Certificate issuer:       /CN=e5cb1422732fb0905512803e74a682044f078d09
Certificate serial:       0D0512
Authority key identifier: 61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5cb1422732fb0905512803e74a682044f078d09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/b45adcb8b01eeff9e4e3cdfbe86abadfd9438b68.roa
Signing time:             Wed 24 Mar 2021 14:36:31 +0000
ROA not before:           Wed 24 Mar 2021 14:36:31 +0000
ROA not after:            Tue 24 Mar 2026 14:36:31 +0000
asID:                     19429
IP address blocks:        2801:0:210::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853266 (0xd0512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cb1422732fb0905512803e74a682044f078d09
        Validity
            Not Before: Mar 24 14:36:31 2021 GMT
            Not After : Mar 24 14:36:31 2026 GMT
        Subject: CN=b45adcb8b01eeff9e4e3cdfbe86abadfd9438b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:c9:9f:4e:47:cb:5b:af:3a:e4:5d:e7:2d:
                    34:a5:c5:f9:14:b8:4b:38:dd:c5:a6:34:f7:c9:50:
                    f3:8c:51:ff:be:1d:a5:68:3c:e0:58:80:66:9c:04:
                    ab:5a:2c:d2:f3:2a:7e:b1:e4:e3:61:9d:9d:ac:f9:
                    1c:7e:8a:d6:e7:25:79:df:07:20:bc:84:56:ea:26:
                    fc:2f:61:0d:4b:93:a6:00:48:5c:e7:39:6c:cc:07:
                    fa:c1:40:b9:9a:04:41:4e:d4:4d:1d:a3:5b:69:d1:
                    74:ec:d5:40:77:8b:95:a2:8f:2d:f6:1e:3b:b5:e3:
                    db:d4:ea:71:53:11:ad:06:c3:6c:dd:ac:f6:24:e7:
                    4b:64:61:96:d3:04:93:06:fe:50:b7:83:24:7a:c5:
                    2b:cb:d0:9c:ea:00:64:aa:e3:5c:d2:14:cf:2c:da:
                    48:6a:8d:2a:66:fd:19:73:64:6d:41:d3:fb:53:b3:
                    80:31:1d:3f:65:22:1f:f1:27:3c:4e:1a:b2:ff:71:
                    0c:fd:d7:3b:c0:98:96:77:47:1d:89:50:29:b2:cc:
                    8a:ea:d7:ff:93:16:f7:cc:4d:13:a2:6c:f6:c8:cc:
                    10:43:cc:ff:0b:25:e2:21:e8:14:b9:95:b7:76:79:
                    10:a5:83:c9:ed:49:85:68:0b:de:3c:35:b9:d3:69:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:5F:6B:AC:DA:2F:D7:0E:27:86:04:3C:1D:3D:66:1F:4F:10:D8
            X509v3 Authority Key Identifier:
                keyid:61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5cb1422732fb0905512803e74a682044f078d09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/b45adcb8b01eeff9e4e3cdfbe86abadfd9438b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/e5cb1422732fb0905512803e74a682044f078d09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:59:63:45:a3:27:92:77:4a:72:35:47:72:e4:de:40:a2:
         69:64:75:96:18:ad:3f:0e:7f:23:82:3d:38:70:60:10:04:41:
         fa:b4:4f:e4:88:d5:82:b6:22:f7:89:33:c7:72:3e:cc:7a:12:
         f7:20:77:11:f7:f0:a5:55:b1:56:86:44:8d:1f:b3:55:66:e5:
         c1:c7:49:f0:af:26:68:1b:a7:9b:d9:54:69:dc:38:60:cd:c5:
         d5:6a:eb:97:67:fa:4f:ef:1a:a6:7b:4c:4a:c6:bb:66:30:bb:
         76:54:2c:0c:32:a4:73:c6:2b:05:a3:91:fd:da:9b:e9:e3:b3:
         8b:1e:4e:bc:04:b5:0f:e3:ae:48:f2:78:10:e5:48:6f:15:d7:
         4b:f7:f2:f3:3e:57:a7:e7:d0:10:74:1a:94:d8:39:6f:22:f3:
         ce:41:26:3b:45:90:e0:5d:37:58:71:e4:dd:05:7d:a6:96:89:
         8c:d8:ef:fb:e7:3a:c6:95:cc:07:61:a3:92:cd:0e:68:90:27:
         e4:b4:58:9c:13:e0:9e:1a:d4:c1:74:83:3e:2e:1e:99:0e:b1:
         a8:d7:40:f5:51:73:5e:e5:d4:07:b0:2d:c8:83:dc:4a:7d:5c:
         de:5d:45:c5:db:0a:b3:b5:e5:47:73:97:e4:18:f7:59:3f:f6:
         d2:15:15:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----