Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/756064d60d97a5503252de9a9080e0b15ea6720c.roa
File:                     756064d60d97a5503252de9a9080e0b15ea6720c.roa (raw, json)
Hash identifier:          2X68kddYBOwsOENj51ZDsQS7GktzUZsZp1nzjN+H6sk=
Subject key identifier:   B4:2C:88:CE:4F:EB:E9:8F:9E:8E:57:D3:41:E1:A3:20:11:D9:C9:BB
Certificate issuer:       /CN=2ef571adb012b3671bada59a339d19495e1bafe3
Certificate serial:       0D714F
Authority key identifier: 0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ef571adb012b3671bada59a339d19495e1bafe3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/756064d60d97a5503252de9a9080e0b15ea6720c.roa
Signing time:             Wed 24 Mar 2021 14:32:59 +0000
ROA not before:           Wed 24 Mar 2021 14:32:59 +0000
ROA not after:            Tue 24 Mar 2026 14:32:59 +0000
asID:                     61475
IP address blocks:        201.131.41.0/24 maxlen: 24
                          2801:19:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880975 (0xd714f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef571adb012b3671bada59a339d19495e1bafe3
        Validity
            Not Before: Mar 24 14:32:59 2021 GMT
            Not After : Mar 24 14:32:59 2026 GMT
        Subject: CN=756064d60d97a5503252de9a9080e0b15ea6720c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:e8:cd:ba:93:af:75:00:48:52:8a:34:0b:
                    b9:59:78:de:0b:b6:50:b3:14:8b:d8:b0:ef:b2:97:
                    ab:41:e6:7d:8f:fa:05:89:47:1f:92:20:4a:76:1d:
                    5f:0a:cf:e7:1a:d9:2f:87:b3:df:62:38:cd:43:8d:
                    b2:fb:16:a6:15:1a:44:bb:4e:8f:ee:14:e3:5d:ed:
                    a0:d6:09:01:6e:21:f1:21:30:71:54:68:bd:a1:aa:
                    a6:2b:69:6f:ac:70:ac:aa:81:15:b8:ba:ec:7c:52:
                    9f:4a:79:b9:42:4a:96:5e:99:00:8c:e3:0b:bc:67:
                    33:fa:50:16:0d:5f:1b:55:d3:9b:58:fd:b0:cc:d3:
                    f5:a9:de:85:f9:36:cf:7e:ab:ba:2f:01:9b:74:b7:
                    19:a9:61:52:cd:75:d9:df:73:b6:a1:24:68:62:8e:
                    42:96:d8:b0:e5:ec:fb:94:dc:1b:53:0c:8b:11:cf:
                    89:84:2d:02:03:51:e2:76:e5:59:8a:02:8e:2b:b8:
                    26:84:da:28:7e:9e:b7:99:6f:40:56:f2:1b:84:d9:
                    61:9d:70:b2:0f:f2:41:ea:25:62:c0:e3:8b:74:bf:
                    0a:68:3d:a7:a5:24:d6:a0:98:a1:dd:c3:16:74:d6:
                    ab:3e:10:77:9d:60:c5:17:53:d2:3b:8d:8c:af:0a:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:88:CE:4F:EB:E9:8F:9E:8E:57:D3:41:E1:A3:20:11:D9:C9:BB
            X509v3 Authority Key Identifier:
                keyid:0F:66:0E:39:86:10:B3:91:A1:CC:B8:3C:4F:0E:3E:7B:A2:D8:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ef571adb012b3671bada59a339d19495e1bafe3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/756064d60d97a5503252de9a9080e0b15ea6720c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/512aeb3f-91e1-4c6a-b80a-79aaf76bf1a1/2ef571adb012b3671bada59a339d19495e1bafe3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.41.0/24
                IPv6:
                  2801:19:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:17:71:01:82:cd:ef:60:56:39:9b:23:1d:d9:70:31:25:db:
         5e:45:81:37:95:23:8f:f5:5c:75:fa:f1:42:42:96:b0:82:83:
         1a:96:4c:5f:d6:8b:0f:11:85:5e:79:d9:0b:b9:c2:c7:b9:c0:
         f5:03:10:f9:8c:59:92:93:de:72:ae:cb:68:9d:dd:fc:45:69:
         c3:2f:38:8a:49:af:f5:3a:d0:b4:f7:cf:03:89:e6:ed:3b:23:
         ed:d3:34:f7:a0:f8:30:d6:71:fb:1b:16:4d:76:08:7f:85:33:
         32:6f:e6:02:89:63:49:a9:c4:ef:7c:fc:72:8d:1c:d1:14:c1:
         5d:91:d7:f7:e8:5c:ed:46:cb:b3:18:df:36:d8:3b:f8:57:bf:
         01:61:3b:41:35:a4:8d:f8:b3:ce:c4:cf:ac:0a:a5:d7:08:e6:
         93:af:15:33:70:a3:6e:1b:20:bb:68:3e:95:be:75:8e:8d:ee:
         b9:f5:a0:16:2d:a8:42:64:2e:af:ba:59:a7:39:63:5e:c9:91:
         c8:8d:03:85:89:fa:0f:a5:48:98:25:4b:3c:45:c6:19:65:dd:
         83:2b:0a:29:69:e9:25:e4:91:64:3f:2b:fa:49:0c:99:86:48:
         4c:f4:bc:13:b9:fa:8e:16:4b:14:6a:4b:2f:3a:c2:86:e7:3b:
         6c:c5:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----