Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/71be11b1d13c4119e5758905d5b0c49353e2bd09.roa
File:                     71be11b1d13c4119e5758905d5b0c49353e2bd09.roa (raw, json)
Hash identifier:          O+fVzYV1KGKaIpuP+cTGjBQOdT62P48/JECud4FKyQU=
Subject key identifier:   B5:BD:86:11:B4:FC:E7:6A:2A:2D:66:05:58:D0:FF:FD:E7:1C:56:6F
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       250450
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/71be11b1d13c4119e5758905d5b0c49353e2bd09.roa
Signing time:             Wed 13 Sep 2023 22:53:12 +0000
ROA not before:           Tue 12 Sep 2023 22:53:12 +0000
ROA not after:            Sat 13 Sep 2025 22:53:12 +0000
asID:                     273079
IP address blocks:        2803:2220:8000::/33 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425936 (0x250450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Sep 12 22:53:12 2023 GMT
            Not After : Sep 13 22:53:12 2025 GMT
        Subject: CN=71be11b1d13c4119e5758905d5b0c49353e2bd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:bb:12:7e:b0:48:4a:39:e3:57:f0:ba:63:
                    a8:f0:dc:5a:6a:70:14:d9:28:81:0e:26:41:8c:3b:
                    15:ec:1e:1a:30:72:bf:16:2f:a8:c9:99:98:ea:cc:
                    ea:98:5f:e5:2a:cc:c4:46:8c:47:29:0f:e5:2a:33:
                    cb:b2:57:6c:9a:fe:39:ea:ac:ec:15:fa:62:c4:a1:
                    64:98:d9:f4:25:77:4d:9b:f8:d3:0c:5e:cd:89:3c:
                    e8:7e:a1:5d:20:73:ab:d0:c2:60:a2:31:65:e8:e1:
                    c0:51:fc:26:38:67:a5:8a:13:13:6f:40:94:a9:a3:
                    64:bd:f7:5b:08:1c:d7:c9:18:3a:25:ee:77:2c:a1:
                    fc:78:80:a5:2c:a5:c4:be:b4:fa:6c:9c:bf:00:b0:
                    8c:d6:e9:bb:e2:13:33:cf:73:a1:ab:41:60:16:01:
                    bb:10:e8:9e:89:a0:83:aa:1d:b0:b4:3c:24:9c:59:
                    00:88:69:a3:0b:0a:08:2b:1b:af:c9:62:1c:bd:71:
                    2b:94:79:01:93:1e:94:fa:69:58:2e:53:da:36:82:
                    aa:fc:86:58:ee:06:c8:4e:4f:b3:95:9e:98:b0:da:
                    1b:3a:77:cb:ed:84:c9:a6:45:e9:4d:9b:71:6f:07:
                    de:bc:43:be:1e:69:0a:c3:1e:bb:54:b8:61:42:31:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:86:11:B4:FC:E7:6A:2A:2D:66:05:58:D0:FF:FD:E7:1C:56:6F
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/71be11b1d13c4119e5758905d5b0c49353e2bd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:07:9c:38:b7:2c:96:b9:a0:e3:d2:c0:9f:09:11:d0:b9:
         49:e2:df:47:33:52:97:de:06:2f:89:ad:fe:a8:a9:38:89:a2:
         c3:d9:55:8b:4a:35:2d:63:f4:f0:6d:ec:67:d9:32:31:be:af:
         7a:3f:28:77:c2:db:58:57:5e:9f:1f:18:98:60:d0:6e:83:be:
         12:e7:e7:04:a6:b7:ad:ae:33:a6:57:e6:84:6a:22:9b:ad:db:
         e6:96:cb:51:dc:e6:3e:f6:94:c0:cb:7e:52:23:76:b8:cf:bd:
         25:e1:32:53:eb:26:ff:ce:41:94:65:1b:c4:e2:a4:d4:e1:b2:
         ad:4d:cc:c8:14:da:6e:7a:4b:53:83:51:23:0d:fe:bc:af:14:
         17:32:52:f8:8a:b9:62:53:e8:6a:51:d7:05:0c:02:81:23:a3:
         fc:08:91:a9:59:35:69:ff:cb:5c:be:33:30:db:db:f4:ac:56:
         84:9e:94:de:06:33:2e:9e:76:cb:bf:4b:8f:78:bc:1e:0a:ec:
         53:51:a9:ef:a0:cf:88:62:bd:3c:50:2b:27:20:d9:45:f6:96:
         80:8d:1e:83:bb:02:34:35:58:a0:d9:69:34:22:51:42:4f:8d:
         4a:3c:1e:ea:89:8c:d9:72:dc:2e:c5:e7:95:db:f7:2e:21:dc:
         58:ce:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----