Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/647a46e3f89a82cea10b851ab4f7c8f592c39f77.roa
File:                     647a46e3f89a82cea10b851ab4f7c8f592c39f77.roa (raw, json)
Hash identifier:          hkH9kTmlzLzsHdCfVraAFyrONUgMu1l+4OH2bgzMMJ4=
Subject key identifier:   8C:EF:01:65:94:4D:E5:F2:69:DF:67:6D:D0:DC:D6:64:36:0E:82:90
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D50A0
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/647a46e3f89a82cea10b851ab4f7c8f592c39f77.roa
Signing time:             Wed 07 Dec 2022 00:53:51 +0000
ROA not before:           Fri 21 Oct 2022 22:15:02 +0000
ROA not after:            Wed 27 Oct 2027 22:15:02 +0000
asID:                     272121
IP address blocks:        2803:2220::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921184 (0x1d50a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Oct 21 22:15:02 2022 GMT
            Not After : Oct 27 22:15:02 2027 GMT
        Subject: CN=647a46e3f89a82cea10b851ab4f7c8f592c39f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:47:69:c1:52:ae:03:fd:a3:89:7b:9c:07:
                    5c:21:76:4c:95:fc:90:b7:23:bc:93:9e:05:09:11:
                    08:26:f2:03:be:03:f7:04:a0:12:07:27:03:78:53:
                    c8:4f:4d:02:28:0e:46:12:b3:58:ca:ce:fc:d2:63:
                    11:71:ec:0e:98:ef:81:03:50:03:2b:39:33:64:76:
                    22:51:d8:14:30:27:8f:88:88:00:60:ba:b7:94:7e:
                    c6:12:29:76:68:2f:ea:66:f0:bf:4d:ef:f4:46:23:
                    ce:24:4c:90:c7:b4:75:1c:97:68:74:e5:5c:cf:33:
                    f1:a7:d7:70:53:f7:cb:6a:02:0a:f5:39:61:a6:07:
                    99:ba:2d:3b:e5:37:64:3a:b6:2f:3a:ca:ec:52:31:
                    2c:4b:bb:54:4b:78:2e:e7:57:00:cc:2a:69:01:a0:
                    cc:26:c0:7b:9e:b4:63:70:8f:2f:c9:d1:5b:b9:e4:
                    c4:de:a3:43:8b:4b:0a:f6:c4:1b:74:2b:a2:2a:96:
                    97:5a:09:51:13:06:d7:72:49:44:9d:46:24:7e:c0:
                    e3:08:86:64:de:b0:c7:40:c2:e3:a3:61:2b:01:ec:
                    02:5b:b6:e6:7e:93:ce:5b:86:b0:e9:fd:54:f9:da:
                    04:31:b5:69:04:82:b0:fd:f6:72:02:2c:a7:73:70:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EF:01:65:94:4D:E5:F2:69:DF:67:6D:D0:DC:D6:64:36:0E:82:90
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/647a46e3f89a82cea10b851ab4f7c8f592c39f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:b0:51:90:60:4c:a3:87:ca:b3:60:be:6e:82:76:fd:cd:
         7a:84:10:11:12:e3:89:59:06:a9:b3:72:e8:f9:71:1b:1a:2e:
         10:1f:2d:b9:5d:04:06:d0:6e:fa:79:74:61:71:ba:90:62:27:
         6b:54:c2:54:7b:da:d5:53:56:fd:cb:a0:86:b4:9d:ec:e9:3d:
         fc:d4:19:00:0d:54:f9:57:d6:72:df:a2:0b:4d:34:dd:bd:d0:
         0f:33:83:98:db:f3:76:3f:a1:76:dd:29:2e:88:23:b6:fd:ad:
         95:34:73:43:cd:9a:32:01:37:a5:29:a0:fc:12:13:c4:8e:23:
         85:93:15:98:d5:84:01:a2:12:93:42:bd:7b:e0:fa:e3:e9:d9:
         0f:24:38:84:c1:32:01:84:78:14:27:c5:c9:2a:0e:5f:55:f6:
         ef:84:75:b7:94:1e:d3:d3:8a:b9:5d:60:8a:92:84:3e:4a:6d:
         c2:df:5f:08:eb:6a:85:a1:4a:ff:09:92:e5:b0:71:1a:74:1f:
         b4:51:71:66:40:92:13:db:a5:f9:93:aa:9b:c1:a7:d5:b5:9e:
         74:b9:4d:cc:1f:3c:57:9a:ba:17:2f:77:85:7e:59:43:cc:1c:
         37:b5:57:f7:7a:ae:42:54:9b:c6:5a:91:a6:42:3e:62:d1:c9:
         f1:f5:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----