Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa
File:                     580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa (raw, json)
Hash identifier:          ulTfGUG0iyKFKd2c0bur0ukRI37thoFkE1Glh4AgK/o=
Subject key identifier:   F2:7F:59:68:B5:73:A0:19:CD:51:2B:44:0E:BB:04:3D:93:9F:87:74
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       23B388
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa
Signing time:             Mon 14 Aug 2023 16:46:25 +0000
ROA not before:           Sun 13 Aug 2023 16:46:25 +0000
ROA not after:            Thu 14 Aug 2025 16:46:25 +0000
asID:                     64124
IP address blocks:        200.25.80.0/24 maxlen: 24
                          2800:1e0:2430::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339720 (0x23b388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Aug 13 16:46:25 2023 GMT
            Not After : Aug 14 16:46:25 2025 GMT
        Subject: CN=580f4f7276ce1be8d8b9a42b577f16d6318d9f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:c3:ab:b0:9f:9e:16:4b:18:61:ce:8a:4d:
                    33:c3:7e:d5:9f:ac:75:c8:cb:aa:7a:4b:30:9d:b6:
                    d1:19:94:61:1c:52:83:ae:c9:f4:ef:56:05:1a:03:
                    97:1f:6d:57:65:ce:45:1f:f0:4e:af:f1:7a:3c:6f:
                    04:c6:ed:5e:5b:48:29:15:97:b8:d2:52:ec:b7:bb:
                    6b:ac:9a:6e:76:01:ad:6c:57:ef:e3:36:fc:93:5c:
                    d4:c0:b1:f2:be:97:ec:b3:63:cc:e8:62:95:c8:d4:
                    c8:4d:43:f8:0e:08:78:0e:03:9e:8f:d0:e9:ab:7b:
                    d5:ca:87:bc:28:9e:b2:f8:0a:99:97:6f:2f:17:d1:
                    db:f3:83:99:d6:b6:4c:93:f6:ab:a2:39:07:c0:7c:
                    52:42:43:ce:1a:e7:d2:99:4a:77:ce:66:98:49:66:
                    6d:6b:66:7c:18:da:02:e8:5c:46:dc:52:f6:0d:e3:
                    51:fd:2c:2a:30:d2:6f:6d:d6:ea:cf:98:84:99:18:
                    a3:d4:03:50:a1:82:aa:6d:a0:02:60:23:5f:8e:7e:
                    8e:7b:bf:2d:36:78:07:7f:b5:5c:10:df:94:d1:f0:
                    18:2b:37:53:cc:89:0c:25:ee:7d:21:6b:94:0d:54:
                    76:46:23:dc:10:6a:67:02:59:e9:dd:13:aa:57:82:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:59:68:B5:73:A0:19:CD:51:2B:44:0E:BB:04:3D:93:9F:87:74
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/580f4f7276ce1be8d8b9a42b577f16d6318d9f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.80.0/24
                IPv6:
                  2800:1e0:2430::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:95:9c:83:9a:30:3c:b7:3d:d1:50:5a:aa:0d:d6:36:22:96:
         51:a2:c0:4f:fd:8f:c5:e7:71:b7:15:c7:fd:11:b4:eb:33:f3:
         91:a2:09:9e:47:9b:c5:1d:09:2f:4d:98:7e:e2:68:fe:e8:18:
         df:a1:01:b9:23:9d:7a:92:ff:13:70:13:36:4b:9d:91:dc:35:
         b6:ee:f7:f5:e8:94:e6:09:ed:f0:9d:99:5d:74:5a:7d:8b:30:
         9f:37:ff:fc:9c:42:2b:85:b8:f0:d4:57:3c:1a:de:7a:e8:5f:
         07:68:21:4c:d9:a7:9b:d4:81:cf:59:d6:7a:f4:32:78:2c:77:
         f0:37:00:64:0e:10:08:ce:63:18:3f:4c:f7:ab:9e:31:86:58:
         e7:1a:56:ad:a0:e4:33:e6:40:6c:49:ad:96:ec:7f:50:84:95:
         75:25:aa:37:ca:17:bc:8e:ea:2c:02:be:4e:a9:90:25:d1:b3:
         8b:32:49:c1:55:c8:4b:82:5f:a0:3c:cb:6b:66:3c:79:20:d6:
         0f:81:61:34:ac:0d:e0:24:7d:b9:ff:66:86:ce:e6:7f:24:de:
         8e:76:96:3b:af:c3:45:72:ab:84:b4:24:07:1f:21:2f:03:81:
         ea:a5:e1:e4:11:38:f5:b7:64:99:92:3b:14:18:90:a6:54:f7:
         e5:82:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----