Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/59004503453e11ad1676ac1dba510dc119441f2a.roa
File:                     59004503453e11ad1676ac1dba510dc119441f2a.roa (raw, json)
Hash identifier:          t4d3M39NWa3nn6EZQRXjR035yL+yLEeyGYlc8JpkT80=
Subject key identifier:   58:96:64:6A:E3:78:40:92:CE:ED:50:25:69:47:36:B7:8D:9F:B8:12
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       0D6F93
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/59004503453e11ad1676ac1dba510dc119441f2a.roa
Signing time:             Wed 24 Mar 2021 14:35:32 +0000
ROA not before:           Wed 24 Mar 2021 14:35:32 +0000
ROA not after:            Tue 24 Mar 2026 14:35:32 +0000
asID:                     7195
IP address blocks:        200.25.0.0/17 maxlen: 24
                          2800:1e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880531 (0xd6f93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: Mar 24 14:35:32 2021 GMT
            Not After : Mar 24 14:35:32 2026 GMT
        Subject: CN=59004503453e11ad1676ac1dba510dc119441f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:11:0b:a8:0c:a2:23:63:99:db:66:1e:a9:
                    85:f3:f1:73:81:1d:30:f1:43:62:d4:4a:ab:f6:81:
                    12:e7:ba:76:46:3f:91:1b:28:f3:68:39:de:0c:f7:
                    00:ca:e5:c4:2b:74:1b:6f:cf:c5:46:e6:eb:70:15:
                    ee:57:cf:c6:a2:ac:e2:be:66:bc:79:e7:80:54:ef:
                    25:c0:d5:ef:4a:d8:ec:ef:7f:27:a7:1f:a2:2b:22:
                    22:f9:85:e2:38:f9:29:2a:41:3a:21:2d:83:52:b3:
                    f8:11:d2:c3:a5:df:12:e9:e6:14:50:38:ec:55:ca:
                    a5:bd:32:20:53:8a:d8:c2:44:dd:41:2c:a9:e7:a2:
                    93:27:44:da:03:de:90:b8:50:7c:ff:88:be:6d:6a:
                    a9:b1:85:ac:93:11:41:a5:68:62:9c:bd:57:ba:96:
                    8a:cb:be:d9:e4:a4:a5:00:4e:b7:80:90:22:36:69:
                    1a:93:c5:a5:93:4d:cb:68:e4:06:c8:bd:ea:7a:e3:
                    ac:9f:fb:15:b3:65:0d:a9:c3:0f:f7:b7:79:38:ef:
                    6c:de:36:68:39:2b:39:42:a6:f8:21:20:bd:15:1d:
                    4f:db:b4:ad:a7:f6:80:4d:46:ba:85:d1:01:aa:8b:
                    ea:c1:49:5e:19:c8:5a:74:94:06:37:57:a3:8e:70:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:64:6A:E3:78:40:92:CE:ED:50:25:69:47:36:B7:8D:9F:B8:12
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/59004503453e11ad1676ac1dba510dc119441f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.0.0/17
                IPv6:
                  2800:1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:03:0b:21:75:47:17:8b:86:6c:df:47:4f:86:5b:a0:18:
         7a:0f:21:fa:63:d4:05:ea:d5:fb:ad:6e:b0:97:3c:2c:9a:a4:
         cb:ff:e8:d0:17:ad:9b:11:3a:86:65:9e:71:af:66:26:23:f0:
         d3:2d:e3:04:84:02:d3:d4:cc:a8:d7:03:d6:0f:50:8b:ec:5b:
         72:a0:04:1e:a4:1a:8a:ae:fb:f6:02:0a:23:9d:e8:34:66:eb:
         82:a6:33:5d:06:8a:31:93:07:f8:bb:29:56:c3:b4:5e:34:a8:
         3a:20:6a:c6:b0:44:e4:a5:fd:1c:b6:d9:05:11:fa:7a:d8:5b:
         db:f4:88:ed:df:80:43:c9:9c:4c:63:3b:10:4b:b5:77:4f:34:
         1b:f7:b0:39:c5:31:0b:9e:b1:f0:17:cd:7e:24:c0:a7:67:7b:
         f0:6d:9c:32:3e:fd:3c:71:ff:1f:49:74:ea:07:80:06:ab:6d:
         ab:fa:4c:80:35:d9:26:6b:18:b2:62:18:56:01:4a:8f:22:8e:
         68:00:b9:89:7e:5f:3e:c0:c6:7b:b1:e9:03:30:68:d3:25:6d:
         f1:59:d0:9e:fc:dc:00:1f:02:f5:47:c6:1c:40:0b:95:3f:37:
         78:c2:1e:35:67:67:11:8d:3c:a3:2f:d7:9a:de:6c:6b:63:cc:
         8d:40:17:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----