Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/151a34416191417050ee9bc037c54b51169a13ad.roa
File:                     151a34416191417050ee9bc037c54b51169a13ad.roa (raw, json)
Hash identifier:          3tJVaNH0/j61PIk9hIYVlbfDlJhaSoysFZ9I+mS3jRw=
Subject key identifier:   6C:74:9F:60:B8:C3:C6:85:C1:06:C7:F4:2B:9E:95:BB:81:EC:0E:4E
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       1A349B
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/151a34416191417050ee9bc037c54b51169a13ad.roa
Signing time:             Thu 22 Sep 2022 18:50:53 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     211612
IP address blocks:        2801:1d:a001:a::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717403 (0x1a349b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=151a34416191417050ee9bc037c54b51169a13ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:0c:25:55:88:c5:43:c0:0e:bf:bb:5e:78:
                    d2:32:d5:92:b6:30:2e:80:14:2f:1b:aa:30:9a:6e:
                    47:5c:63:b7:0f:e8:88:38:88:4e:d7:62:2d:64:f4:
                    d6:7d:6d:2c:f7:f6:59:80:78:ab:3a:15:9c:03:e7:
                    66:c2:c8:97:58:a0:8a:b0:41:0d:0d:bc:79:36:9e:
                    74:1f:53:5f:b4:8a:60:97:13:4e:78:5f:4b:31:fc:
                    68:ce:73:a8:1d:c2:ed:7f:15:b6:2d:5e:ba:d1:1f:
                    17:64:0c:c5:18:38:46:9a:d9:83:94:26:42:1b:04:
                    52:f5:a6:a5:2e:63:05:45:0e:19:45:91:3e:ae:69:
                    f5:f1:14:e3:2c:d8:04:c9:eb:f8:d2:cc:9c:e4:be:
                    09:a6:00:bc:d0:e5:ce:55:ff:c3:d0:d7:23:71:64:
                    33:39:ac:59:db:75:1a:a9:dc:33:3d:7b:ea:6e:9d:
                    63:37:7d:11:0e:e6:82:79:4a:bb:a0:23:38:68:24:
                    7c:05:c3:02:b1:06:ec:29:3c:30:9d:26:c9:0a:c2:
                    3a:7a:2f:3c:9b:e7:86:12:96:e1:c8:4c:e5:b5:08:
                    66:01:e2:4f:40:d9:e9:c5:69:cb:83:30:ef:c5:b9:
                    3b:ab:6c:9d:80:c5:44:b1:88:e5:4f:1d:7e:66:6d:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:9F:60:B8:C3:C6:85:C1:06:C7:F4:2B:9E:95:BB:81:EC:0E:4E
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/151a34416191417050ee9bc037c54b51169a13ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a001:a::/64

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:23:2d:0b:84:e2:40:9b:24:3d:6c:f0:fb:a4:e0:99:4e:
         d9:dc:29:99:a2:3d:7a:ac:9a:2d:6f:3a:21:f7:a4:99:7d:55:
         1f:2e:ca:c7:9d:dd:7d:a9:67:3e:cf:67:8c:b0:5a:de:5d:e5:
         02:e0:fe:de:79:a5:e8:13:94:28:84:02:23:69:2b:8b:d3:f0:
         4f:7c:fd:62:0d:70:c6:4b:49:b8:7b:aa:3c:32:51:8f:28:6c:
         c8:42:26:7e:3f:45:14:d2:66:95:76:11:0b:0f:63:b4:bd:db:
         74:b3:85:3c:e9:9d:bc:be:75:1e:c6:05:db:c9:d3:1b:a6:e5:
         28:31:8c:ac:3d:71:71:ac:e8:d1:c0:47:d3:bf:aa:ed:90:fc:
         27:90:d4:ea:a0:26:d1:b7:84:09:c5:2d:af:c8:28:02:e2:2d:
         1c:49:95:93:b8:89:42:e2:ce:c3:6a:17:a3:ef:04:25:28:9d:
         68:c1:a5:77:3e:91:1a:bf:c3:c7:c3:6c:e2:cb:58:bc:79:7f:
         73:d6:c4:89:1b:f9:dc:ca:ec:e5:0a:24:c3:44:b1:09:0e:38:
         c4:46:39:66:f7:7e:3c:2c:54:f4:5d:34:6d:dd:63:68:f2:f1:
         6f:1c:b7:e2:1c:29:c2:27:ab:a1:77:98:a9:40:c0:88:a6:43:
         c8:93:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----