Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/51ac2606ec0949f5819a2b0adac3ea6753f3fe8e.roa
File:                     51ac2606ec0949f5819a2b0adac3ea6753f3fe8e.roa (raw, json)
Hash identifier:          6UIK+ndx4Crps5IWOpqthMEp/4CUYbltwxSqyr7DY9E=
Subject key identifier:   1B:78:3C:25:F7:B8:51:F4:C5:8C:32:59:8D:90:95:28:C7:B4:D5:D7
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E2524
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/51ac2606ec0949f5819a2b0adac3ea6753f3fe8e.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4017::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927012 (0xe2524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=51ac2606ec0949f5819a2b0adac3ea6753f3fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:77:85:63:1e:92:c0:1c:7c:8b:5b:3f:ff:
                    f4:fa:77:0f:f0:3e:3e:7c:89:77:aa:fa:56:67:0a:
                    d4:22:6c:2e:e5:3a:1a:29:1b:3e:b8:0a:5e:68:ad:
                    4f:f0:13:46:d6:8a:7f:b5:80:82:c4:61:73:73:8c:
                    c2:b0:c5:5d:a5:2d:84:01:d1:e8:6b:f6:92:ae:f2:
                    88:6c:79:07:ea:e9:db:92:00:cc:de:71:f2:10:41:
                    23:05:63:0a:40:55:b1:bc:b7:de:b8:7b:b1:ed:ee:
                    c8:fc:7b:30:32:ae:6a:e4:5b:89:ec:6c:e9:18:fc:
                    29:ce:90:e4:e6:9c:7c:f5:68:e3:9d:b7:df:bd:96:
                    ca:83:67:8f:f6:30:29:cc:75:c6:22:03:ec:b4:0d:
                    40:d1:e9:48:f1:11:55:cf:89:ee:3c:ce:fe:08:b6:
                    8c:ef:72:21:71:50:63:05:e5:cf:4e:e1:af:ab:2c:
                    6f:45:2c:77:2b:59:fa:c3:f4:38:80:a9:56:94:c2:
                    ea:80:cf:60:1a:24:b7:b2:c8:51:84:90:41:b3:5e:
                    92:3c:01:ab:1f:f9:d7:b2:9c:a7:25:5c:f5:e9:dd:
                    d4:58:a5:b9:41:45:88:49:2f:97:7c:69:59:6a:65:
                    72:42:1d:bb:71:ca:e6:eb:8d:53:bb:0b:52:1c:71:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:3C:25:F7:B8:51:F4:C5:8C:32:59:8D:90:95:28:C7:B4:D5:D7
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/51ac2606ec0949f5819a2b0adac3ea6753f3fe8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4017::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:5b:b7:ff:2e:48:0d:bb:d5:f1:45:8a:a1:36:eb:24:59:
         ef:1f:e3:d9:05:24:2b:35:a0:2c:ca:bb:76:6c:10:22:81:6b:
         08:f1:40:d8:29:e5:cf:31:1b:57:65:37:a4:89:61:2a:25:db:
         9e:9c:b3:2d:79:d5:3b:66:eb:b1:82:cb:e5:ff:34:d0:88:7a:
         ca:3e:33:56:19:e2:17:e2:7f:b9:65:df:3d:fa:23:a3:e8:dd:
         e6:83:d2:0b:d8:a7:5a:92:87:92:2d:ee:be:9c:09:a4:14:9c:
         30:1d:98:2e:96:01:32:6b:f5:ec:95:f3:d1:e5:ff:b9:b8:10:
         23:d4:52:98:68:7f:91:99:7a:9a:18:a6:5a:74:fe:0d:50:7d:
         63:8f:1c:b9:14:47:3c:d5:57:6d:fb:fa:25:2a:26:7c:0e:60:
         a8:83:e6:48:eb:5f:67:13:f6:ab:c5:ee:d8:be:c1:90:3a:7d:
         f7:b5:44:41:56:33:76:15:ef:2f:86:fe:97:bd:03:86:7b:cb:
         92:dd:b5:6f:17:6d:bc:35:66:5b:71:45:c7:1a:af:25:08:6d:
         79:32:99:37:83:61:a8:44:aa:ff:93:d5:63:5b:4a:dd:e2:b2:
         c8:cc:c5:ef:6d:ef:3d:de:ac:33:4b:e3:4b:0a:b5:b2:9d:f6:
         d9:15:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----