Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/51e6c51ddfc16e714eccc213561e91a4d5c06df8.roa
File:                     51e6c51ddfc16e714eccc213561e91a4d5c06df8.roa (raw, json)
Hash identifier:          RZ9mF/yBiHznZYgC0tfebj9vc1xYwpYuCIHM9Pdr/sY=
Subject key identifier:   4D:6F:DB:7B:AD:A2:A6:44:71:57:1C:30:ED:D1:82:F1:7B:29:3D:7C
Certificate issuer:       /CN=d47f00a274e03808fa0dec44674469fe93bc88ba
Certificate serial:       102EA2
Authority key identifier: 47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/51e6c51ddfc16e714eccc213561e91a4d5c06df8.roa
Signing time:             Mon 30 Aug 2021 13:15:48 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266671
IP address blocks:        45.225.75.0/24 maxlen: 24
                          45.225.75.241/32 maxlen: 32
                          2803:1920::/32 maxlen: 32
                          2803:1920::b4b2:5f61:d37f:0/112 maxlen: 112

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060514 (0x102ea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47f00a274e03808fa0dec44674469fe93bc88ba
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=51e6c51ddfc16e714eccc213561e91a4d5c06df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:fe:fe:2b:4e:db:21:fb:95:b7:64:e3:cb:
                    ac:d3:06:fb:b8:b8:d2:9d:62:0a:da:f9:1b:ac:74:
                    61:da:ad:13:88:d1:74:25:f9:c7:25:63:d1:ab:2b:
                    a0:02:03:25:61:16:5b:aa:59:24:53:f6:8c:ad:c1:
                    ba:e6:c5:98:eb:d7:53:88:11:f6:b1:81:8c:32:17:
                    13:6f:df:0f:6f:bb:b4:20:ce:e2:b1:d0:73:90:a2:
                    7d:87:1f:53:f6:7d:5e:63:da:c5:93:3b:c0:0b:27:
                    2f:c3:5f:9f:cf:d4:95:6f:08:29:e4:44:04:5f:62:
                    df:9b:e0:02:fa:60:8d:15:4a:78:fd:fe:60:1e:60:
                    12:23:c1:52:ef:58:af:54:b1:1c:73:8c:a4:4a:06:
                    ee:f9:56:71:7b:0d:ec:1d:16:f8:4d:55:4e:30:d8:
                    fb:ca:0d:4a:1d:24:79:67:89:9f:84:2f:9b:74:a5:
                    a0:a9:90:ed:18:65:a7:cb:14:82:e4:f4:39:4a:b3:
                    74:20:77:d8:62:15:c6:97:93:02:59:6f:3b:58:7c:
                    ef:ca:29:52:e5:4c:b4:60:14:5a:51:e7:57:d8:88:
                    dd:72:9c:f5:57:b5:e3:a3:6a:89:cd:14:25:b3:d3:
                    cc:95:19:7f:18:5d:76:6c:8a:35:ee:fe:55:c6:dd:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6F:DB:7B:AD:A2:A6:44:71:57:1C:30:ED:D1:82:F1:7B:29:3D:7C
            X509v3 Authority Key Identifier:
                keyid:47:94:24:3D:15:EE:FD:D9:0D:CC:35:66:1F:C3:72:3C:74:CC:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d47f00a274e03808fa0dec44674469fe93bc88ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/51e6c51ddfc16e714eccc213561e91a4d5c06df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c14dc78-dd6f-43e7-a786-47cec0d7be11/d47f00a274e03808fa0dec44674469fe93bc88ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:85:ca:9c:ac:68:d0:5d:6f:64:5e:2c:10:a2:4c:be:92:07:
         1a:ab:15:c7:73:65:6c:b9:6b:82:c4:50:67:7a:a3:13:db:5e:
         89:d3:47:c9:65:41:f9:12:ac:6c:9c:53:df:ab:00:00:71:2f:
         9b:70:0d:cc:60:53:48:56:de:91:b8:1e:ba:c8:90:23:bf:c4:
         cf:fa:c4:f3:a9:e1:98:63:ac:b6:c4:25:da:91:9d:e5:0c:76:
         61:e5:c6:e6:f1:b1:2c:07:19:4b:f6:6c:38:64:f4:e0:19:d4:
         99:56:35:1c:d9:6a:76:d0:54:4d:92:2b:77:ab:02:9e:09:b9:
         21:8d:46:36:29:bb:e0:cf:8d:a6:f3:d9:3e:e2:c7:10:43:90:
         f6:90:bd:6d:7e:05:ef:a6:48:be:95:b1:4c:6d:77:f1:53:c0:
         34:11:53:83:8d:53:fc:09:22:8a:2d:ff:2a:fb:3d:03:d1:26:
         48:a6:85:04:8c:5f:6d:28:27:bd:32:77:0b:f6:be:34:e2:6d:
         ad:b5:ac:26:b0:7c:c1:47:ed:96:8a:b0:64:9e:93:00:3b:0e:
         01:e3:f8:85:20:41:9c:e4:07:7c:4f:6a:24:54:d0:63:00:17:
         d9:ea:1d:16:f5:f7:19:70:21:bc:f2:18:8e:e4:3b:ec:68:3f:
         ff:74:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----