Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/25e53f6336e31b619f1687cee5422c5219757924.roa
File:                     25e53f6336e31b619f1687cee5422c5219757924.roa (raw, json)
Hash identifier:          YYUTGIQX07s7+04dQ7S6KV3vhBbI9DVQZhF8GCjvDNk=
Subject key identifier:   7C:69:ED:00:18:6A:1C:D0:3F:BA:76:D2:E2:27:CB:ED:8E:BE:EC:4E
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       13DCC1
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/25e53f6336e31b619f1687cee5422c5219757924.roa
Signing time:             Wed 29 Dec 2021 03:10:54 +0000
ROA not before:           Wed 29 Dec 2021 03:00:00 +0000
ROA not after:            Mon 29 Dec 2025 03:00:00 +0000
asID:                     64120
IP address blocks:        2803:f080:8800::/43 maxlen: 43
                          2803:f080:8400::/43 maxlen: 43
                          2803:f080:8600::/43 maxlen: 43
                          2803:f080:8800::/43 maxlen: 43
                          2803:f080:8900::/43 maxlen: 43
                          2803:f080:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301697 (0x13dcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Dec 29 03:00:00 2021 GMT
            Not After : Dec 29 03:00:00 2025 GMT
        Subject: CN=25e53f6336e31b619f1687cee5422c5219757924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:e5:df:c8:bd:59:e6:6d:e3:46:53:55:fe:
                    c1:8a:1f:8b:1e:d4:bf:77:fc:0e:58:8e:e9:fd:3f:
                    4a:e1:35:35:e8:9f:bf:77:6a:cc:17:e8:e2:65:cf:
                    1d:7e:87:4c:12:4c:8d:6e:b0:78:48:f4:87:35:42:
                    48:7c:c6:90:b6:86:7e:5f:fe:61:11:7b:38:d3:18:
                    32:18:1e:7e:49:e6:d2:95:66:42:9a:2f:9e:9f:2a:
                    3c:80:42:56:1a:09:05:95:a2:53:0d:bc:72:aa:2d:
                    fb:50:1a:b6:e9:63:fa:f4:fc:ea:cb:92:d7:ba:52:
                    58:ea:87:a7:d7:04:bf:71:fa:97:15:b4:34:af:b9:
                    22:4d:95:e7:8a:e5:8a:28:6f:ed:6d:0a:4c:18:d0:
                    15:d1:41:cb:3e:85:6c:55:42:23:ef:a6:b3:2f:ff:
                    7b:65:5e:13:60:cb:56:fc:34:85:9b:b0:24:fb:9e:
                    2b:ba:30:f7:ed:91:91:03:3d:b8:1d:27:68:4d:f9:
                    a4:28:e3:1a:0d:5b:91:ef:68:33:85:92:ed:61:c8:
                    11:9c:50:ef:76:b9:e6:9c:7d:54:c6:94:9b:a9:4f:
                    bd:64:d1:5d:4a:cd:f8:0e:b4:9e:6f:50:83:bf:c4:
                    21:6e:20:0e:1a:3d:c2:ed:d4:24:0c:1e:4f:0c:3a:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:ED:00:18:6A:1C:D0:3F:BA:76:D2:E2:27:CB:ED:8E:BE:EC:4E
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/25e53f6336e31b619f1687cee5422c5219757924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:83:9a:35:17:20:d9:ff:b0:17:4c:89:ac:a2:ee:32:22:2c:
         3d:fe:2d:76:07:04:ec:ea:83:c8:4b:5f:d7:63:51:30:61:15:
         99:5e:40:8e:16:bb:8f:a5:91:3e:36:4e:c0:87:b1:eb:e0:50:
         49:28:c4:1e:56:d0:a3:28:a1:49:01:89:10:c4:75:2d:68:8f:
         12:71:d1:8f:6f:27:07:de:83:af:e4:36:20:f0:0e:a7:e0:a7:
         8f:5f:1c:c2:e1:3b:79:8b:5a:ec:51:e8:90:62:b2:84:0e:cf:
         13:7f:12:97:88:41:e2:0d:2f:2b:47:2b:0b:28:b0:44:75:4b:
         45:1a:a0:9d:5a:5b:8f:d4:ee:11:f6:05:e4:6c:10:c5:4e:3c:
         ad:23:a6:c8:79:8e:f8:2b:35:77:08:d0:2c:d8:c4:4b:24:a7:
         a3:7b:ae:87:f7:1c:69:b2:dc:66:b2:97:d8:7a:40:c5:a5:c8:
         e1:78:43:1e:58:b8:f7:d4:6f:0a:92:98:72:d2:0f:cb:3c:ed:
         92:84:50:07:3c:1c:2e:81:86:81:0f:79:37:95:97:ed:22:d8:
         f4:6a:f6:9a:3f:97:56:8c:06:9f:7a:63:8c:a6:7d:f1:c3:53:
         d5:aa:66:72:78:51:1d:41:58:72:f1:c7:89:b9:f5:a4:ed:23:
         05:9c:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----