Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c4a03eff05f562c7f37f9610944cd2fa9ba794fd.roa
File:                     c4a03eff05f562c7f37f9610944cd2fa9ba794fd.roa (raw, json)
Hash identifier:          4wWKspZRVq0xCCp8kUpS1pUCxwCq66Gpum9BOAwGdTU=
Subject key identifier:   12:71:67:CA:C0:F3:72:D3:54:80:75:0B:95:73:98:69:84:A9:06:E9
Certificate issuer:       /CN=c51088545d67fa073263cda959bf704f45a92d2e
Certificate serial:       03C54A
Authority key identifier: 9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c4a03eff05f562c7f37f9610944cd2fa9ba794fd.roa
Signing time:             Fri 10 Jun 2022 15:45:14 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     18747
IP address blocks:        2801:111:2::/47 maxlen: 48
                          2801:111:4::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247114 (0x3c54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51088545d67fa073263cda959bf704f45a92d2e
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=c4a03eff05f562c7f37f9610944cd2fa9ba794fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:38:38:53:39:2f:88:6b:00:fc:40:a8:2b:
                    9b:8b:1e:ac:d2:e6:53:e7:58:c0:0f:5d:26:45:71:
                    26:e3:b8:8f:30:1b:54:87:41:e1:d9:91:cf:eb:6a:
                    b4:b2:66:d6:34:12:b0:d4:60:68:69:da:ba:e5:00:
                    4c:43:5f:0d:5a:f8:78:42:43:39:49:df:3a:10:ff:
                    46:39:91:27:8d:6f:ec:f3:3a:4f:dd:64:1d:8a:1a:
                    d2:05:01:26:0e:1a:1c:1a:9d:04:e0:5f:56:76:bd:
                    23:5f:d7:87:6e:27:95:bf:cf:23:aa:17:e5:e9:94:
                    2f:bf:1d:a4:2d:f6:7e:06:65:47:32:cf:f3:85:42:
                    4b:9f:a7:6c:c2:1d:6f:5b:f1:91:e8:f6:a8:c1:5d:
                    0f:71:f6:66:44:a3:45:66:de:29:cc:30:a9:f4:fc:
                    50:f6:e1:73:bc:63:1d:8d:c9:bb:2b:97:bf:6d:35:
                    86:19:48:96:65:ea:f4:83:f3:bf:63:36:af:28:db:
                    9e:04:ff:78:77:0d:74:d2:80:56:5e:f4:53:7f:91:
                    b2:70:21:a2:09:35:ef:1b:4b:12:78:5d:44:27:58:
                    2d:34:55:2a:e6:ac:90:32:22:d3:c6:1c:00:23:b3:
                    d6:e5:06:ab:f9:9b:c6:c8:35:44:bb:21:5b:95:9b:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:67:CA:C0:F3:72:D3:54:80:75:0B:95:73:98:69:84:A9:06:E9
            X509v3 Authority Key Identifier:
                keyid:9D:F8:D6:8A:EE:DF:99:C1:D3:22:52:C4:9E:9E:D7:F9:1C:88:4E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c51088545d67fa073263cda959bf704f45a92d2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c4a03eff05f562c7f37f9610944cd2fa9ba794fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5d6e518-e3d8-483c-bf2e-5193ce3b4f56/c51088545d67fa073263cda959bf704f45a92d2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:2::-2801:111:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:1d:06:d3:45:c2:e9:15:ed:0c:1a:e8:f1:2a:b3:b7:27:
         d1:c4:e1:38:8d:a7:46:73:2e:2a:d7:55:f3:b5:52:6a:4b:1b:
         2e:79:5d:5e:9f:9b:a4:52:1f:32:82:5c:59:00:ee:a8:b9:97:
         09:9f:f3:3a:2f:f1:e9:e1:c6:56:c4:c3:2b:e2:a7:c2:7a:6b:
         22:28:9a:ba:ed:2d:4e:4c:a9:9a:0b:18:14:fe:c4:f1:42:c7:
         5b:1e:8a:90:6c:24:cb:48:d6:1d:88:bd:33:c9:7a:50:e8:91:
         6a:51:16:df:d0:34:6a:fd:42:60:75:c1:73:60:10:8e:6b:ef:
         5c:1a:80:f7:6d:5e:4b:85:aa:63:a5:c9:ed:ae:e7:02:1b:5e:
         fa:f7:c8:66:82:b3:16:87:4a:2c:8a:d1:12:96:af:9d:d5:13:
         29:96:ba:b2:ed:ec:bd:ba:37:15:7a:3e:86:72:4e:84:45:98:
         b6:3a:67:2d:25:3e:99:07:90:5a:4b:ab:64:bf:35:15:01:c4:
         56:c7:50:97:44:41:25:ed:d3:5c:47:c0:86:54:9d:62:28:73:
         43:33:ce:d4:23:f1:21:08:ae:1e:82:1b:e7:44:17:9a:eb:e3:
         d3:42:05:cf:26:15:f3:2c:25:4c:70:85:87:a9:f1:12:d9:5f:
         16:c8:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----