Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/c51deaa8c7029566db41f9a33e3e3ddb25922086.roa
File:                     c51deaa8c7029566db41f9a33e3e3ddb25922086.roa (raw, json)
Hash identifier:          tj9TGfOn4QJq4LEcLqJgL7/MAfo23Vv/nY+TtTXnnhg=
Subject key identifier:   C0:53:DB:1A:26:12:AA:DA:3E:1B:B5:76:9F:43:6A:45:3B:6A:E9:B5
Certificate issuer:       /CN=227fd99f85ce60d1b1b511e37e626686b25a57d4
Certificate serial:       06CB74
Authority key identifier: 25:59:35:6D:11:35:FC:54:3C:F0:65:CA:2F:CC:FF:B4:60:54:75:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/227fd99f85ce60d1b1b511e37e626686b25a57d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/c51deaa8c7029566db41f9a33e3e3ddb25922086.roa
Signing time:             Wed 24 Mar 2021 14:31:32 +0000
ROA not before:           Wed 24 Mar 2021 14:31:32 +0000
ROA not after:            Tue 24 Mar 2026 14:31:32 +0000
asID:                     267854
IP address blocks:        2801:13:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445300 (0x6cb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227fd99f85ce60d1b1b511e37e626686b25a57d4
        Validity
            Not Before: Mar 24 14:31:32 2021 GMT
            Not After : Mar 24 14:31:32 2026 GMT
        Subject: CN=c51deaa8c7029566db41f9a33e3e3ddb25922086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:05:ae:1e:5f:6c:13:4f:46:b6:17:df:06:
                    81:da:24:3c:ff:b8:1e:95:91:cb:58:36:e3:dd:ad:
                    af:2a:10:f0:36:f8:db:7e:c6:cb:31:c2:f1:be:4f:
                    7a:25:d6:dd:e9:a3:96:9d:2d:dd:47:ba:ed:dd:15:
                    8d:fc:67:1c:52:0e:92:42:68:a7:3b:e5:d3:ba:32:
                    b1:f5:05:8f:ea:3d:71:15:3e:c3:f4:76:a5:57:89:
                    13:9b:3d:d2:65:59:7d:37:8e:a2:ce:2f:3c:73:cb:
                    3a:da:39:3a:f7:1e:3a:a8:df:7e:88:dc:13:d2:83:
                    c5:92:f7:b7:7a:5f:b3:36:0a:d6:f1:69:46:6c:e7:
                    2c:b3:54:d8:80:52:6e:cb:72:45:11:85:0e:76:67:
                    57:67:dd:28:76:17:a9:a7:57:45:0e:0b:e4:a2:21:
                    3b:84:90:ae:9c:dc:e6:45:0b:69:1d:22:00:4a:f4:
                    14:f0:9d:4b:2f:10:68:11:4f:0e:90:86:b1:46:8a:
                    eb:4f:eb:55:64:1d:96:1c:06:d0:b5:58:43:c1:38:
                    7e:01:5f:0d:67:10:bf:1f:80:23:47:44:20:58:b8:
                    2c:72:2e:88:e7:0e:bf:e2:86:2a:bd:5c:3f:26:44:
                    af:27:88:cc:66:fb:c2:7d:93:dd:09:50:b1:6a:d1:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:53:DB:1A:26:12:AA:DA:3E:1B:B5:76:9F:43:6A:45:3B:6A:E9:B5
            X509v3 Authority Key Identifier:
                keyid:25:59:35:6D:11:35:FC:54:3C:F0:65:CA:2F:CC:FF:B4:60:54:75:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/227fd99f85ce60d1b1b511e37e626686b25a57d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/c51deaa8c7029566db41f9a33e3e3ddb25922086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8ed7bc0-daf1-46c8-8e41-73fd916c745a/227fd99f85ce60d1b1b511e37e626686b25a57d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:33:b6:75:ba:62:e4:c5:76:28:3a:59:90:0b:44:5c:20:
         40:39:a6:77:99:00:ec:ed:7e:9c:5a:a7:cd:6e:23:0b:f8:75:
         da:44:07:61:69:2e:9e:4e:2e:03:d8:aa:ca:da:24:15:c3:1d:
         d7:4f:d7:cc:86:ba:91:39:e0:aa:08:a7:ee:60:ab:d1:1a:1c:
         5a:68:d0:43:45:4c:cf:16:4e:2b:c7:01:c6:cc:e4:93:65:a2:
         df:02:3e:ab:8d:d8:3f:f7:d9:75:28:6c:2b:39:42:62:a7:bc:
         14:09:63:d6:cf:0c:f7:56:d5:0e:f5:5c:0a:c1:65:bc:ae:8b:
         3c:14:0b:89:14:06:fb:fb:ec:a2:dd:0d:14:31:73:d9:57:2c:
         b8:f4:20:9f:0d:f6:c3:02:c0:43:d8:6d:89:f9:ac:f1:7e:5e:
         01:88:69:10:b9:15:58:c0:69:7d:cd:3f:61:a1:cf:5f:0f:83:
         aa:82:d9:f8:0f:93:38:33:e4:bc:77:6e:2f:86:32:c5:4c:2e:
         09:02:3d:59:85:94:97:44:cc:ae:76:47:2e:88:86:2e:77:46:
         c2:c2:87:a2:aa:e4:96:98:05:3c:2a:c5:5c:b3:f8:29:07:c3:
         c3:ca:a7:c8:84:2a:8b:b0:97:50:66:46:28:e7:73:a8:b9:17:
         2f:b3:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----