Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/282e1ed68dbecfd0bea47adcb681119d63336977.roa
File:                     282e1ed68dbecfd0bea47adcb681119d63336977.roa (raw, json)
Hash identifier:          UF4i+PMQLSQrv/tuh6WDuyc9+QyBFLRMxo57rI6/Xy0=
Subject key identifier:   EB:7E:1D:9C:2F:68:94:1C:CF:FD:73:23:45:41:11:98:A9:9A:46:09
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       2047BB
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/282e1ed68dbecfd0bea47adcb681119d63336977.roa
Signing time:             Thu 16 Mar 2023 03:24:01 +0000
ROA not before:           Sat 24 Dec 2022 15:07:53 +0000
ROA not after:            Wed 29 Dec 2027 15:07:53 +0000
asID:                     272121
IP address blocks:        2803:2220::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115515 (0x2047bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Dec 24 15:07:53 2022 GMT
            Not After : Dec 29 15:07:53 2027 GMT
        Subject: CN=282e1ed68dbecfd0bea47adcb681119d63336977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:f0:35:c9:92:42:ea:98:f7:77:81:ee:8f:
                    1a:3d:ba:e2:c7:82:ff:61:59:ee:55:16:79:ce:b1:
                    55:dc:58:4b:a1:51:6e:af:eb:b6:43:7e:c9:98:f8:
                    30:d6:fd:1e:2c:7b:2c:61:40:9f:a1:a0:31:dd:16:
                    2e:07:cc:25:e6:44:47:d7:a8:a5:7b:38:6e:e0:07:
                    84:bf:ef:92:21:2c:e1:1c:d6:dc:59:ff:20:4c:49:
                    ba:c1:46:af:a7:34:55:b9:46:9e:e9:bf:0d:83:11:
                    5d:aa:33:32:a2:39:0c:7d:51:c3:6a:3c:6e:07:0f:
                    28:32:0b:ea:b6:20:b6:b7:72:03:3b:df:45:69:95:
                    b4:92:99:f6:c9:f2:e2:59:0f:39:0e:b5:7b:dc:4c:
                    ce:3e:cd:d5:54:1c:40:04:8f:aa:69:29:c8:d8:80:
                    9f:9d:ee:df:48:c7:60:3b:46:b3:ef:47:63:35:e8:
                    de:cf:7f:7d:0a:f5:d8:ba:3a:94:5c:f1:84:45:05:
                    c0:09:e0:b3:0a:30:14:51:81:cf:f9:40:3d:d6:7c:
                    60:88:d9:ab:83:24:bc:72:b5:b8:c3:46:63:c3:aa:
                    63:dd:94:52:7d:75:17:7b:61:1b:4a:3f:0c:99:14:
                    54:d8:5f:8c:27:8d:39:36:fd:10:51:3e:f2:89:a7:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:1D:9C:2F:68:94:1C:CF:FD:73:23:45:41:11:98:A9:9A:46:09
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/282e1ed68dbecfd0bea47adcb681119d63336977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:d2:02:c6:32:87:b0:e6:5f:00:de:b2:d7:6f:d0:cd:71:
         a4:9a:ed:bb:e7:57:40:87:0c:27:a0:5a:20:c9:5f:7c:6b:f6:
         d4:ba:46:9b:83:dc:5d:1e:cc:ac:bb:51:83:c3:59:b2:73:2f:
         ab:f9:d8:58:5f:4a:11:2f:6d:74:67:ea:8f:2e:81:b3:52:c1:
         92:b7:13:57:bd:55:99:d8:f8:33:8f:7f:85:62:f7:b6:5b:a2:
         cd:0f:8d:6c:cc:16:1a:7c:a9:b5:c8:34:c4:27:14:13:4d:66:
         48:99:04:5d:15:fc:fa:0f:49:b7:79:c7:69:a0:53:cc:bd:f0:
         96:31:4c:e6:89:ae:66:b3:66:54:37:24:02:ef:a5:02:3d:01:
         f5:57:51:94:65:63:55:72:a0:9e:85:5d:b1:9f:aa:2a:53:e2:
         77:15:ed:bb:a1:f4:46:48:d9:f5:fe:7b:7e:1f:14:56:20:40:
         47:03:38:4f:35:d5:eb:15:11:bb:99:d0:79:ab:61:2e:a5:63:
         5c:77:ea:eb:bf:6c:c3:24:5a:61:e6:99:e3:ba:94:80:9b:7f:
         da:b2:38:c1:b4:40:f5:e5:2b:42:38:22:27:dc:2e:61:91:8a:
         11:b3:d3:f1:f6:96:fa:ee:8a:ac:53:b3:0b:1b:3c:48:5b:45:
         c0:2f:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----