Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3a2f33322d3332203d3e20323733383833.roa
File:                     323830333a343335303a3a2f33322d3332203d3e20323733383833.roa (raw, json)
Hash identifier:          ko/8uCNKQFUU+JbVrMT7H5JTV//lZkAn7E+d0SJf6y0=
Subject key identifier:   56:F7:E6:7A:DA:BF:3C:62:3D:2E:8B:86:94:D6:19:EB:D2:AB:1B:76
Certificate issuer:       /CN=25A203486AF30C31B552BF40DB8DC77D392BCF35
Certificate serial:       026A7E4EBD0846E0DF3F1967EDB3109E8327B651
Authority key identifier: 25:A2:03:48:6A:F3:0C:31:B5:52:BF:40:DB:8D:C7:7D:39:2B:CF:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A203486AF30C31B552BF40DB8DC77D392BCF35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3a2f33322d3332203d3e20323733383833.roa
Signing time:             Fri 16 Aug 2024 15:50:00 +0000
ROA not before:           Fri 16 Aug 2024 15:45:00 +0000
ROA not after:            Fri 15 Aug 2025 15:50:00 +0000
asID:                     273883
IP address blocks:        2803:4350::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:7e:4e:bd:08:46:e0:df:3f:19:67:ed:b3:10:9e:83:27:b6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25A203486AF30C31B552BF40DB8DC77D392BCF35
        Validity
            Not Before: Aug 16 15:45:00 2024 GMT
            Not After : Aug 15 15:50:00 2025 GMT
        Subject: CN=56F7E67ADABF3C623D2E8B8694D619EBD2AB1B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:15:ac:d8:bf:84:55:14:7d:36:42:c2:f2:
                    e9:10:75:e3:f6:9f:67:40:72:1e:1d:45:98:01:58:
                    ce:5c:94:30:6c:65:8f:97:1b:84:95:92:bf:6b:e0:
                    5d:8b:ff:74:ca:44:49:7f:f3:6c:76:45:66:9c:50:
                    af:72:61:2f:66:65:ab:00:99:b6:c2:31:e6:e4:9d:
                    7c:d4:c6:c2:c8:ec:97:04:60:f1:7c:e6:62:62:ac:
                    e0:8d:b4:fb:aa:cd:01:d1:fa:7a:dc:3d:e9:f1:5a:
                    4b:87:c6:87:ca:9f:06:75:d2:4e:90:1e:37:d7:50:
                    66:f5:aa:3d:05:c0:cf:73:5f:bc:4f:51:c2:dd:7b:
                    29:e4:25:b9:57:6c:f6:44:cd:9d:86:16:56:f0:a2:
                    83:79:e0:ea:30:4e:bc:de:56:c3:c3:78:85:42:43:
                    65:e5:e6:c0:6d:db:9d:c1:96:63:fe:73:47:00:b0:
                    38:77:10:e5:a8:d6:99:88:dd:ef:2f:ba:83:67:8b:
                    12:5d:88:80:dc:7b:e2:36:3e:3b:94:79:42:49:7b:
                    14:77:9e:38:46:48:d9:5f:b5:0b:21:a7:88:6c:5b:
                    3f:83:d5:e9:6d:c2:fa:40:84:90:6c:a3:4c:96:7a:
                    37:2c:9d:fa:44:06:0b:44:b5:69:fd:ad:ec:a8:3f:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:E6:7A:DA:BF:3C:62:3D:2E:8B:86:94:D6:19:EB:D2:AB:1B:76
            X509v3 Authority Key Identifier:
                keyid:25:A2:03:48:6A:F3:0C:31:B5:52:BF:40:DB:8D:C7:7D:39:2B:CF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/25A203486AF30C31B552BF40DB8DC77D392BCF35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25A203486AF30C31B552BF40DB8DC77D392BCF35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2426F1357BCCE68115004A5E63061793303E971AE62EC06F48B8B8D568AA82E0/0/323830333a343335303a3a2f33322d3332203d3e20323733383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4350::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:8e:51:ff:6d:6e:9e:f6:15:46:41:73:e8:eb:dd:a8:4f:
         46:e1:53:b3:84:c4:e0:dc:ce:90:fa:fa:7a:d1:1c:b6:23:c3:
         0e:ff:15:cb:65:75:d9:37:f4:c4:32:0e:c3:21:05:7a:11:95:
         d2:4f:f1:74:80:7d:71:c1:0f:cd:db:5e:0e:32:5a:42:cb:e8:
         1c:73:01:7a:26:96:01:bf:e8:c7:f0:92:be:60:7b:45:29:d1:
         fe:f4:8d:a2:ed:9b:6f:ac:43:9a:6a:f7:21:66:e5:eb:6a:c4:
         4a:be:e0:2d:b2:5d:3b:32:3e:19:be:ee:18:da:19:b1:84:2e:
         81:96:0f:f7:a5:1c:5b:37:21:00:20:94:74:2d:55:aa:76:f2:
         ff:c3:36:a5:87:b9:dd:75:40:7f:91:c4:26:74:a1:f5:45:00:
         41:4c:5e:4a:25:f9:9e:9a:58:3e:ec:e9:2a:8c:d7:da:58:66:
         db:7c:4b:bf:c5:59:35:28:4a:28:39:4e:a0:30:82:ff:30:23:
         68:f1:54:4a:63:35:a0:e4:a6:63:e1:09:57:5c:aa:18:1c:59:
         6b:b1:84:43:37:e4:b4:01:87:34:7c:f1:0c:29:c7:24:15:4f:
         8a:54:9d:51:49:41:bf:d6:03:c4:38:52:a2:5b:bb:12:cf:60:
         c1:82:2e:f7
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUAmp+Tr0IRuDfPxln7bMQnoMntlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVBMjAzNDg2QUYzMEMzMUI1NTJCRjQwREI4REM3N0Qz
OTJCQ0YzNTAeFw0yNDA4MTYxNTQ1MDBaFw0yNTA4MTUxNTUwMDBaMDMxMTAvBgNV
BAMTKDU2RjdFNjdBREFCRjNDNjIzRDJFOEI4Njk0RDYxOUVCRDJBQjFCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnhWs2L+EVRR9NkLC8ukQdeP2
n2dAch4dRZgBWM5clDBsZY+XG4SVkr9r4F2L/3TKREl/82x2RWacUK9yYS9mZasA
mbbCMebknXzUxsLI7JcEYPF85mJirOCNtPuqzQHR+nrcPenxWkuHxofKnwZ10k6Q
HjfXUGb1qj0FwM9zX7xPUcLdeynkJblXbPZEzZ2GFlbwooN54OowTrzeVsPDeIVC
Q2Xl5sBt253BlmP+c0cAsDh3EOWo1pmI3e8vuoNnixJdiIDce+I2PjuUeUJJexR3
njhGSNlftQshp4hsWz+D1eltwvpAhJBso0yWejcsnfpEBgtEtWn9reyoP55bAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUVvfmetq/PGI9LouGlNYZ69KrG3YwHwYDVR0j
BBgwFoAUJaIDSGrzDDG1Ur9A243HfTkrzzUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDI2RjEzNTdCQ0NFNjgxMTUwMDRBNUU2MzA2MTc5MzMw
M0U5NzFBRTYyRUMwNkY0OEI4QjhENTY4QUE4MkUwLzAvMjVBMjAzNDg2QUYzMEMz
MUI1NTJCRjQwREI4REM3N0QzOTJCQ0YzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUEyMDM0ODZBRjMwQzMxQjU1
MkJGNDBEQjhEQzc3RDM5MkJDRjM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQyNkYxMzU3QkNDRTY4MTE1MDA0QTVFNjMwNjE3OTMzMDNFOTcxQUU2
MkVDMDZGNDhCOEI4RDU2OEFBODJFMC8wLzMyMzgzMDMzM2EzNDMzMzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM4MzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDQ1Aw
DQYJKoZIhvcNAQELBQADggEBAAPYjlH/bW6e9hVGQXPo692oT0bhU7OExODczpD6
+nrRHLYjww7/Fctlddk39MQyDsMhBXoRldJP8XSAfXHBD83bXg4yWkLL6BxzAXom
lgG/6Mfwkr5ge0Up0f70jaLtm2+sQ5pq9yFm5etqxEq+4C2yXTsyPhm+7hjaGbGE
LoGWD/elHFs3IQAglHQtVap28v/DNqWHud11QH+RxCZ0ofVFAEFMXkol+Z6aWD7s
6SqM19pYZtt8S7/FWTUoSig5TqAwgv8wI2jxVEpjNaDkpmPhCVdcqhgcWWuxhEM3
5LQBhzR88QwpxyQVT4pUnVFJQb/WA8Q4UqJbuxLPYMGCLvc=
-----END CERTIFICATE-----