Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5b00b2379decceb5b6067c5eae650aac9976cd57.roa
File:                     5b00b2379decceb5b6067c5eae650aac9976cd57.roa (raw, json)
Hash identifier:          2o4rB6SucT8OGNNgbsgDU8ZAdlRLup+VjOMtGHwkeKk=
Subject key identifier:   2E:16:52:8E:9C:6F:EA:10:18:D7:9F:38:FC:A0:13:89:38:93:F5:D3
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1C3EBC
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5b00b2379decceb5b6067c5eae650aac9976cd57.roa
Signing time:             Thu 27 Oct 2022 22:24:47 +0000
ROA not before:           Mon 24 Oct 2022 22:15:02 +0000
ROA not after:            Wed 27 Oct 2027 22:15:02 +0000
asID:                     272121
IP address blocks:        2803:2220::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851068 (0x1c3ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 24 22:15:02 2022 GMT
            Not After : Oct 27 22:15:02 2027 GMT
        Subject: CN=5b00b2379decceb5b6067c5eae650aac9976cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:31:c8:29:34:b9:a7:a0:5f:84:5b:cb:c9:
                    d9:01:1c:5f:67:db:d9:83:d0:11:5e:11:93:1f:82:
                    da:00:1d:3a:7d:92:89:34:13:f2:78:75:2d:0e:93:
                    9d:c8:7c:7a:55:57:8b:74:ae:1c:67:13:b9:a9:4e:
                    33:84:36:21:7f:79:ed:37:13:1f:76:0b:dd:55:50:
                    ac:88:2f:7a:a6:21:69:46:ab:90:5f:05:39:d9:c6:
                    6b:ae:3c:39:c0:04:49:6c:b9:b5:ba:c2:c1:38:b9:
                    6c:92:93:4d:7e:75:1f:87:0b:d6:9a:91:25:14:f1:
                    9f:46:69:3b:cd:0b:3a:69:2a:ce:52:04:68:c7:24:
                    68:89:16:41:ba:89:22:14:ec:d7:a2:6e:b0:5b:c7:
                    c8:fc:b1:db:d6:44:55:bb:cb:5b:22:e7:03:56:98:
                    f3:6c:ef:47:3e:53:76:08:87:ca:94:03:81:2e:13:
                    20:54:ef:8c:6b:09:0c:53:3f:61:1c:e1:94:4e:ec:
                    67:af:2d:48:dc:fd:d0:b8:cf:a3:90:76:e5:43:d6:
                    25:eb:fc:cd:44:35:46:46:bf:b1:d3:1e:ac:8b:18:
                    56:f2:42:ab:0a:a5:51:dc:b8:f8:bf:0d:f4:05:83:
                    40:1a:d6:1b:03:0c:c9:4e:47:07:4a:3a:aa:e0:fe:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:52:8E:9C:6F:EA:10:18:D7:9F:38:FC:A0:13:89:38:93:F5:D3
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/5b00b2379decceb5b6067c5eae650aac9976cd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:d7:b3:52:94:c9:da:fc:d7:22:20:23:d9:19:69:4c:be:
         6c:38:04:55:3c:8b:08:c9:24:c6:ce:82:6f:25:b3:89:cd:2c:
         ab:77:fd:ec:6b:98:5f:06:0b:ee:01:0a:7b:3c:e8:67:12:cc:
         7f:2c:b8:cc:1b:9c:c3:31:0f:f9:2a:07:e7:c8:d2:1d:1b:cc:
         af:93:01:d8:ef:33:1d:60:0f:df:84:eb:24:aa:2f:20:97:9b:
         ba:be:62:52:f2:45:27:e8:01:96:8a:bb:8e:2a:23:b7:2c:a9:
         5e:03:73:38:9b:99:d2:aa:64:fa:3f:19:e4:9e:c0:9e:26:42:
         42:83:39:35:49:c9:1e:a1:e6:e5:3a:d5:dc:4b:b6:89:2f:4f:
         16:00:ef:97:7f:2a:d0:b8:fa:13:02:50:d1:bc:bc:c0:fb:46:
         e9:5d:cc:53:ec:e1:12:5f:6f:94:97:ae:7f:cd:3a:2b:47:27:
         d3:98:52:f9:0f:31:d5:ad:4d:58:b2:12:c5:cd:73:ee:87:ee:
         2c:ea:a4:a6:9e:3c:8e:6d:77:f6:b3:94:4d:1c:ec:37:ee:6c:
         fc:d2:a5:33:fc:24:ec:12:d2:85:8e:5e:33:d3:f7:41:2a:ab:
         2d:16:0e:3b:cc:1b:8f:ed:7a:ce:1b:71:d6:7d:52:d8:99:a5:
         4c:4a:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----