Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9270c7a08a636178074da2ec1c606c6f6b17d1cd.roa
File:                     9270c7a08a636178074da2ec1c606c6f6b17d1cd.roa (raw, json)
Hash identifier:          t14CE6DXAHI9zsWmvMmOwdeHp2JRkO5B5su0qaoIrXo=
Subject key identifier:   DA:84:12:90:79:4B:05:0D:76:5A:F3:82:DF:7C:E3:6A:D4:8A:D3:F9
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1D54C7
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9270c7a08a636178074da2ec1c606c6f6b17d1cd.roa
Signing time:             Wed 07 Dec 2022 00:54:34 +0000
ROA not before:           Wed 30 Nov 2022 22:11:53 +0000
ROA not after:            Wed 04 Dec 2024 22:11:53 +0000
asID:                     272121
IP address blocks:        2803:2220:800::/37 maxlen: 37
                          2803:2220:1800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922247 (0x1d54c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Nov 30 22:11:53 2022 GMT
            Not After : Dec  4 22:11:53 2024 GMT
        Subject: CN=9270c7a08a636178074da2ec1c606c6f6b17d1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:b1:4e:dc:c1:48:ed:c4:23:84:92:e1:26:
                    48:43:fc:95:1f:0b:f4:ce:c0:76:ce:5e:0a:0d:9f:
                    f9:54:54:36:be:d9:77:a9:49:3e:dd:3b:6c:94:ef:
                    c3:93:ec:aa:90:aa:47:dd:f2:89:f7:91:19:b3:de:
                    89:7c:11:be:dd:00:35:4b:74:91:76:80:9b:9a:49:
                    04:22:1d:ed:c5:77:df:ee:40:a7:0b:27:1d:bd:78:
                    08:09:1c:c2:4b:a0:de:05:2a:df:62:96:e7:f6:0c:
                    d8:2e:5a:0c:c4:b6:18:47:bb:8a:1a:fb:cd:7f:ac:
                    0b:82:32:be:5b:1f:ac:a6:7d:44:69:0d:7e:1d:c1:
                    e4:c0:f2:ff:53:7f:97:8a:80:03:62:d7:54:4b:e3:
                    96:25:13:11:6c:eb:1b:db:03:bd:a2:51:3b:3c:da:
                    df:35:1f:a0:e8:e7:0c:e9:c4:fd:0b:06:d7:95:7e:
                    54:cc:03:5f:1a:1d:de:7e:89:e0:0b:a8:48:b8:cf:
                    fd:20:6e:74:09:be:0e:41:81:f8:5a:7a:83:0c:dc:
                    57:29:93:64:a7:c8:8c:8e:9f:bf:bd:ae:af:df:93:
                    73:e4:27:c2:3b:aa:cf:1d:0e:4d:fd:57:ce:1c:20:
                    44:c3:f2:f7:5f:73:33:a5:1a:ba:6b:c2:23:fc:82:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:84:12:90:79:4B:05:0D:76:5A:F3:82:DF:7C:E3:6A:D4:8A:D3:F9
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/9270c7a08a636178074da2ec1c606c6f6b17d1cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:800::/37
                  2803:2220:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         62:16:e6:68:fc:b5:b5:e5:10:6e:28:3a:90:a5:82:5b:4f:f1:
         4f:79:30:d2:ae:56:b1:d1:8b:65:32:e4:4a:aa:b5:0f:8b:9b:
         d5:6f:10:e1:4f:cd:b0:14:a0:b8:71:3f:50:e0:8f:4d:d9:44:
         ad:fd:f7:25:ac:c4:27:41:4c:04:fa:51:16:54:91:51:c0:92:
         bc:9b:a3:38:b5:b5:5f:71:55:bd:c9:24:5d:f0:63:17:1f:5b:
         6d:ec:6f:3f:1e:93:a6:74:90:ec:04:6c:4b:48:4c:5a:54:72:
         2e:5b:9e:b1:28:1d:84:45:5e:d2:db:bd:2b:c3:46:07:90:bb:
         24:c6:eb:ae:ef:94:b1:92:5c:45:aa:61:1e:65:ea:ce:4a:bb:
         32:31:f7:ba:d8:9a:d9:33:d2:bc:c7:f5:b9:07:24:a0:2c:b7:
         aa:af:44:62:9c:fb:10:0d:df:50:1b:35:ea:63:5f:1e:80:c6:
         ff:ed:e9:88:f1:e9:6e:b4:0f:04:8d:88:a5:ac:e0:c3:d4:7a:
         c5:f1:b1:52:37:ab:9e:b4:fd:d1:9d:c8:a3:f7:62:56:07:31:
         36:47:2f:f9:a9:85:ef:f5:fa:a1:80:d1:fe:2e:cf:34:2c:16:
         a6:2c:72:b8:03:d1:73:dd:7d:ec:46:80:9d:ad:88:2b:92:3d:
         5e:b5:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----