Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/2effe1334a44b241de2b7e18bc7ffbdacbe50c9e.roa
File:                     2effe1334a44b241de2b7e18bc7ffbdacbe50c9e.roa (raw, json)
Hash identifier:          7I4aTtn3HZs3QoMXNeaeHVSGLKolm7VDTBnPKdyqfPQ=
Subject key identifier:   2B:80:02:8E:E1:01:B2:59:FE:67:53:46:5F:07:89:D6:87:DE:3D:A4
Certificate issuer:       /CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Certificate serial:       1EB5
Authority key identifier: FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/2effe1334a44b241de2b7e18bc7ffbdacbe50c9e.roa
Signing time:             Mon 03 Apr 2023 18:09:12 +0000
ROA not before:           Sun 02 Apr 2023 18:08:29 +0000
ROA not after:            Thu 03 Apr 2025 18:08:29 +0000
asID:                     272973
IP address blocks:        2803:1590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7861 (0x1eb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
        Validity
            Not Before: Apr  2 18:08:29 2023 GMT
            Not After : Apr  3 18:08:29 2025 GMT
        Subject: CN=2effe1334a44b241de2b7e18bc7ffbdacbe50c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:8d:32:31:5e:cf:5b:4f:0a:4e:1e:40:f6:
                    05:38:a8:3b:6c:9e:6f:1d:a0:c1:3f:2f:6b:20:2b:
                    e3:e1:71:cd:94:56:79:e4:8b:f6:eb:e7:f0:6f:63:
                    2b:7e:a0:70:e9:d4:35:ea:f3:e5:46:49:0f:0f:2a:
                    20:0d:31:43:85:f0:4d:ad:06:e6:71:dd:79:68:a7:
                    eb:93:4b:68:b6:b2:d4:b5:1b:45:f6:cd:b6:09:69:
                    c6:f8:96:6f:78:c9:f6:4b:8a:cc:75:8e:05:ff:b7:
                    30:61:f5:19:e9:50:b7:44:4b:5f:bb:97:e8:4a:f0:
                    8e:39:fd:02:ff:bc:73:be:17:81:6a:0e:f1:61:04:
                    0a:65:00:76:2e:19:9b:28:66:27:77:3e:88:fa:7d:
                    5c:b8:c0:d3:0a:b6:ec:90:76:c6:1c:dc:eb:09:2b:
                    3c:66:d0:b9:7e:5b:2b:ac:f8:56:46:fd:9a:cc:6d:
                    38:42:01:1a:b1:9d:c2:e8:c1:f6:c1:e6:49:e5:95:
                    60:45:9f:7e:aa:03:7f:83:b2:a1:39:34:b0:66:98:
                    3c:e8:7f:d3:22:ea:41:6e:10:40:15:39:88:10:d9:
                    12:ba:39:03:62:2a:d9:13:0d:e2:f0:0d:6a:ed:88:
                    2a:17:a0:07:b0:71:6c:9e:00:48:c2:dc:18:51:68:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:80:02:8E:E1:01:B2:59:FE:67:53:46:5F:07:89:D6:87:DE:3D:A4
            X509v3 Authority Key Identifier:
                keyid:FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/2effe1334a44b241de2b7e18bc7ffbdacbe50c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1590::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:a1:ac:53:42:c6:68:bd:ee:e7:0a:a3:6d:a2:c4:ce:55:
         ed:65:e6:11:83:72:ff:68:4b:f9:a2:85:47:8c:1b:3d:90:11:
         9f:a6:b3:d2:d1:7c:8c:d1:1d:54:79:ba:3c:ea:40:54:68:19:
         26:ec:98:0d:8a:4c:0c:cf:c3:b9:29:87:1a:c2:2e:64:45:f1:
         2b:f1:9a:ed:48:b3:9f:ff:ad:77:69:fd:ae:d1:4a:e9:be:c0:
         a5:00:3f:5c:13:5d:ca:6a:1f:14:8b:4e:48:22:cc:32:3a:94:
         bd:e7:1d:8d:49:21:41:b9:c4:76:6e:b1:40:0c:5d:04:1a:c0:
         6b:f1:8e:ac:1e:65:49:0d:1a:6d:9d:75:78:5f:bc:bf:3c:75:
         cb:4b:25:2b:fe:13:75:33:d7:dc:c9:82:f8:71:39:43:18:73:
         43:57:ae:52:d1:99:6e:49:d3:6e:0a:70:f1:eb:48:ac:30:60:
         3f:26:cf:d5:04:33:55:3a:c4:56:39:10:59:6a:db:70:73:26:
         90:48:e8:7a:fb:a1:3d:2b:de:e2:01:51:16:fa:c9:a3:c4:5c:
         b0:24:12:a2:f4:e4:32:69:80:02:d9:1d:28:7d:75:a4:8b:98:
         fb:e0:18:68:95:03:a2:5a:0f:a6:28:87:e4:cc:87:8b:0f:25:
         23:83:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----