Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa
File:                     25a83c7de9f0631b4c8848503aeebff4df8d4017.roa (raw, json)
Hash identifier:          cHu277a4Imj4sCGkJrODV5djbESl8j3h2O4psjyF9G4=
Subject key identifier:   9C:EA:67:06:2A:48:38:C6:EB:07:19:9D:DF:DD:5F:0D:81:46:B5:41
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       19539F
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa
Signing time:             Wed 13 Jul 2022 12:19:42 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     22927
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659807 (0x19539f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=25a83c7de9f0631b4c8848503aeebff4df8d4017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:78:73:cd:0f:95:0d:16:93:23:c7:bd:52:
                    fa:d4:49:88:56:bf:c5:34:08:2c:bb:41:14:6e:24:
                    5c:1d:0a:18:45:a1:8e:1c:6a:39:b9:f9:88:d2:bc:
                    a6:65:46:46:af:ec:66:db:1d:e1:72:6a:5c:27:2b:
                    e3:34:80:9e:35:aa:76:b4:15:9c:da:62:04:29:0c:
                    db:fb:7b:95:74:f7:a1:4c:e0:dc:ac:ab:ad:8c:66:
                    69:df:55:c4:49:91:3a:43:a3:7c:74:8d:13:33:d6:
                    1c:77:dd:e0:de:cb:ba:c2:57:15:c0:d8:be:04:eb:
                    16:41:2c:8f:d9:15:23:76:4f:17:de:eb:89:a5:fa:
                    c5:ef:a8:29:95:00:16:61:d2:ed:0a:2f:58:68:e8:
                    1c:ac:d7:e7:57:cc:d2:40:a4:fd:6d:6c:77:93:c7:
                    b4:38:42:0e:81:e2:cd:85:46:4c:a7:f4:4e:b2:03:
                    cc:49:44:de:e2:f5:f0:53:21:5c:d5:21:1b:95:b6:
                    0f:38:b4:90:f4:16:18:e5:0d:5f:1c:b5:d9:9a:8c:
                    2e:7e:92:70:89:a7:70:80:12:6b:62:f8:c1:81:c1:
                    b6:a5:ee:74:7c:67:29:93:a5:fe:31:b8:af:05:a5:
                    e6:83:69:1c:4c:f5:0a:33:a9:08:7f:22:01:d2:67:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:67:06:2A:48:38:C6:EB:07:19:9D:DF:DD:5F:0D:81:46:B5:41
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:1d:65:c7:b4:f7:31:7f:e0:89:8c:4e:d6:a4:67:57:63:
         03:d0:57:60:42:80:d6:1a:c2:92:8b:c9:2a:b3:c4:5d:8b:b7:
         2a:25:06:25:e4:f4:76:f0:5b:79:50:2e:16:dc:0f:1a:b7:a3:
         20:b0:40:d5:6a:e1:81:e4:60:a5:d5:25:3b:6e:03:46:9b:9f:
         27:1b:38:e5:2e:04:5f:9a:2c:b9:98:d3:11:63:1e:b1:6e:36:
         15:e0:47:e7:c4:47:6a:23:6c:e9:f2:37:ff:00:2f:8e:a4:12:
         db:31:17:9d:2f:24:3b:aa:39:d1:71:ae:c2:57:d5:35:86:d2:
         44:72:7d:2f:3d:3a:e5:fe:70:dd:0a:34:1c:86:9b:b4:e1:b1:
         05:7a:32:ed:9b:46:5e:42:e2:38:1f:9e:6e:cd:1f:1e:f5:b8:
         f8:71:a0:a4:78:55:e2:fb:41:6a:83:45:69:a5:ff:45:8e:a7:
         a0:fc:b1:b6:95:a5:f4:f8:49:0d:97:1e:59:a9:21:7b:09:55:
         3b:f4:24:df:81:6f:d3:4b:e3:a2:d3:43:c4:c2:b7:8d:09:8b:
         1b:d0:e0:a7:08:c1:c3:cd:f6:da:a6:68:1e:c6:73:7c:78:ad:
         9f:0a:31:0b:49:9f:f6:82:17:d8:56:ac:ba:48:0e:05:a4:75:
         74:65:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----