Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/f14c5832f9e4877b984138f2d745c54e996e8cf5.roa
File:                     f14c5832f9e4877b984138f2d745c54e996e8cf5.roa (raw, json)
Hash identifier:          jsGYUGrcODFit0aZgCQ1sOmeEjZlz/I1HOU0xRU4mEw=
Subject key identifier:   CE:8C:5B:B2:0D:4D:63:DD:E3:E7:DE:A2:AB:F1:49:EC:BD:68:E7:A7
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       1FF483
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/f14c5832f9e4877b984138f2d745c54e996e8cf5.roa
Signing time:             Wed 26 Apr 2023 15:13:56 +0000
ROA not before:           Tue 25 Apr 2023 15:13:56 +0000
ROA not after:            Sat 26 Apr 2025 15:13:56 +0000
asID:                     262168
IP address blocks:        2803:500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094211 (0x1ff483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Apr 25 15:13:56 2023 GMT
            Not After : Apr 26 15:13:56 2025 GMT
        Subject: CN=f14c5832f9e4877b984138f2d745c54e996e8cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:03:d6:1d:c9:87:4f:6a:9e:03:6e:e4:5f:
                    33:53:0c:ef:54:e4:6b:85:e1:ec:86:b4:57:03:74:
                    c7:f1:41:02:5d:44:e7:4d:6a:86:4c:ec:9e:d5:e2:
                    1a:11:9e:6f:f5:ee:e0:d3:c8:e1:c2:a2:32:53:80:
                    8f:52:6d:5f:2e:3b:cf:9b:86:45:24:7b:ed:9f:53:
                    8d:d2:5a:09:bd:51:bb:c8:6b:7d:df:2b:17:82:00:
                    4f:0a:5d:a3:e8:bc:a0:af:8e:4c:15:55:13:33:e8:
                    d9:cb:9e:61:6c:a4:69:f0:e8:78:31:93:ef:58:5d:
                    c8:ae:63:2d:b3:47:48:3d:89:fd:df:14:91:5e:88:
                    fc:94:7c:19:3f:e6:7a:00:34:84:9b:84:9d:ba:3a:
                    06:b9:80:28:71:cc:b4:c6:2f:35:00:36:03:1d:eb:
                    83:89:12:5e:1d:58:bb:1e:a2:0f:1d:3a:92:5e:b0:
                    dc:12:f2:0b:44:e5:66:a2:ce:f7:7f:ef:b9:c4:5f:
                    35:d8:a3:c1:cd:08:dd:e1:bc:15:f9:f3:5e:3b:90:
                    c2:24:a9:a8:46:20:70:31:d0:f3:ac:46:67:d8:9f:
                    ef:fc:8e:cb:3a:74:f4:f9:34:14:b1:35:d9:2c:7d:
                    50:6e:d5:33:e8:1a:9b:cb:59:56:e6:b5:61:c5:a0:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8C:5B:B2:0D:4D:63:DD:E3:E7:DE:A2:AB:F1:49:EC:BD:68:E7:A7
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/f14c5832f9e4877b984138f2d745c54e996e8cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:02:21:e8:68:be:a9:df:1f:71:cd:90:3b:bd:01:42:65:0b:
         31:36:a6:8d:d0:d5:42:30:09:0a:db:a5:9a:ab:c2:f1:42:00:
         4b:03:44:0f:36:06:b0:0c:c5:87:8e:35:21:ea:c6:30:c5:10:
         a8:1b:57:7a:ec:a0:13:fc:45:a9:0a:22:e4:9c:8d:b5:5c:ee:
         d9:aa:b3:d9:10:a7:cf:a4:60:a9:6a:7f:a6:42:ab:48:1c:1c:
         01:69:26:f4:9b:11:35:9d:4c:58:90:29:8e:fb:44:32:b3:c0:
         32:b8:7a:e2:20:ca:54:2b:80:51:85:b0:4c:5f:be:22:6d:71:
         72:20:6a:9d:ed:60:87:f2:81:8e:a9:fe:ac:0e:0c:aa:7f:1f:
         fd:75:a2:ae:39:2d:56:c2:f0:24:a2:8a:27:d4:67:83:ad:a7:
         8a:14:e9:e0:61:f0:53:aa:43:11:89:b0:e2:9b:1c:17:9b:64:
         e5:9b:aa:59:c3:04:0e:f3:8c:c4:8e:dd:82:bc:82:d0:aa:4b:
         6a:2c:5c:c5:9a:70:12:e6:f6:a8:ee:60:31:c4:a9:a7:31:1e:
         46:b4:dc:dd:3c:08:8a:75:49:f7:d4:cc:03:bf:cd:5d:e9:bd:
         bc:c9:c0:9f:fd:fd:f5:a3:04:41:0d:d2:a0:d8:b2:02:16:f3:
         2a:e8:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----