Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/25f9060777eccfe53d0445c5366ed20812ada96d.roa
File:                     25f9060777eccfe53d0445c5366ed20812ada96d.roa (raw, json)
Hash identifier:          zABpBZdo0Pz0tTp2S3fVxkhn8Qjq1UChkc5IEL2+Xus=
Subject key identifier:   24:5A:1F:7F:C8:B5:F4:D7:77:51:A8:44:E7:48:EB:62:BC:A6:0E:AB
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       10FA99
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/25f9060777eccfe53d0445c5366ed20812ada96d.roa
Signing time:             Fri 27 May 2022 19:52:09 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     271842
IP address blocks:        2803:b0e0:9980::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112729 (0x10fa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=25f9060777eccfe53d0445c5366ed20812ada96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:14:a0:84:7e:6e:5c:48:d1:ab:ea:46:ff:
                    72:9f:05:3b:2b:3b:27:7b:73:ce:8a:b2:5f:52:83:
                    80:02:6c:27:86:6a:83:28:d5:04:c7:b4:61:04:52:
                    67:47:58:e8:9f:eb:2a:cd:f6:6c:c3:5f:24:8b:0f:
                    aa:20:19:1f:96:12:a4:fd:30:68:70:53:70:61:9a:
                    fe:54:30:4e:9e:20:36:b0:57:b8:03:2d:55:79:30:
                    d3:66:ca:09:dc:69:37:22:d5:e5:6c:a8:1c:36:f3:
                    37:0e:42:0d:b2:cd:43:e1:63:a5:dd:8b:a5:96:c4:
                    6e:ea:77:ae:8e:a0:08:46:fe:18:36:21:ff:99:8e:
                    62:9b:cb:20:1e:0c:1c:d0:a6:ee:34:ca:20:65:a1:
                    0b:b1:e5:b3:73:56:0b:a8:e1:4c:e0:36:26:c8:3a:
                    3e:e6:92:3d:41:45:e1:da:1f:e6:e9:6e:5d:58:11:
                    f1:9e:0e:fd:5e:9f:93:f6:39:fd:8b:3c:5f:86:1e:
                    0c:4a:9d:7c:99:0c:d1:5c:0b:77:51:57:74:65:03:
                    bd:44:bb:f3:44:09:e3:40:fd:dd:7a:98:8f:5b:6e:
                    24:4e:a4:2a:ce:84:c2:29:d9:04:a0:b3:00:19:bf:
                    ae:56:dd:7b:e7:62:d2:af:6b:07:28:b9:f6:d7:fa:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:1F:7F:C8:B5:F4:D7:77:51:A8:44:E7:48:EB:62:BC:A6:0E:AB
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/25f9060777eccfe53d0445c5366ed20812ada96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:56:fd:f0:ee:a0:a8:83:a2:d5:08:f6:38:43:8b:c1:ae:
         a6:80:59:07:c5:b0:c2:d8:8a:30:bf:6d:55:91:31:0f:be:ed:
         a6:6b:4f:38:5f:bd:a2:75:00:82:97:bf:10:62:4a:69:0b:c5:
         84:f3:96:63:fa:e1:b8:d2:bd:33:fa:69:da:e5:a4:99:d7:78:
         c9:9b:0e:19:06:18:a7:1a:79:6d:3f:71:b8:ff:57:14:6f:f7:
         35:e6:9e:d1:b9:e3:21:c3:13:4b:8d:d8:9d:f2:f5:37:b2:47:
         de:c5:c5:32:f0:07:00:85:bf:49:68:08:45:e4:e7:a3:07:08:
         31:c6:4f:3d:a0:ca:56:09:76:e9:92:a6:e4:e1:f3:f5:06:37:
         fd:29:a5:7f:85:74:6d:88:6e:59:17:75:25:42:43:4e:93:b2:
         48:09:fe:94:a2:52:b3:71:b4:1d:00:d9:04:18:fd:69:26:87:
         fd:3c:6b:7a:5b:95:61:83:1d:b4:82:55:2b:11:cc:78:0e:f3:
         00:da:29:57:31:4e:2c:4c:bf:a7:01:d0:c5:10:05:93:5c:ed:
         b7:48:e4:7f:65:77:2c:30:26:6e:6f:e3:87:5c:a9:e8:f9:08:
         d0:49:0d:0d:6f:91:c4:ab:72:84:0f:27:ec:61:80:4e:db:66:
         f5:4b:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----