Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/92aedc5f1d39a249684d47fc0c3ba24883e12806.roa
File:                     92aedc5f1d39a249684d47fc0c3ba24883e12806.roa (raw, json)
Hash identifier:          TR2FIcxR7E80jQAEwqrR5PEPNohmf5C0E1mSy//Mpkw=
Subject key identifier:   75:3A:6D:DD:EB:6D:21:21:2B:12:A8:B5:6D:69:D5:5E:DB:60:A0:0F
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1DFDB9
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/92aedc5f1d39a249684d47fc0c3ba24883e12806.roa
Signing time:             Thu 29 Dec 2022 15:07:53 +0000
ROA not before:           Wed 28 Dec 2022 15:07:53 +0000
ROA not after:            Wed 29 Dec 2027 15:07:53 +0000
asID:                     272121
IP address blocks:        2803:2220:800::/37 maxlen: 37
                          2803:2220:1000::/37 maxlen: 37
                          2803:2220:1800::/37 maxlen: 37
                          2803:2220:2000::/37 maxlen: 37
                          2803:2220:2800::/37 maxlen: 37
                          2803:2220:3000::/37 maxlen: 37
                          2803:2220:3800::/37 maxlen: 37
                          2803:2220:4000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965497 (0x1dfdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Dec 28 15:07:53 2022 GMT
            Not After : Dec 29 15:07:53 2027 GMT
        Subject: CN=92aedc5f1d39a249684d47fc0c3ba24883e12806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:b8:5f:aa:c0:a3:21:34:37:e8:a1:46:c6:
                    81:c4:d9:d3:e4:7d:f8:9b:5c:12:32:96:82:6c:10:
                    d2:e1:3c:1f:f7:f8:9c:83:4a:d8:6c:db:42:1d:f2:
                    28:7a:56:19:30:b4:a3:3b:68:ec:fe:83:19:84:6e:
                    ee:92:9b:52:da:59:8d:89:aa:b1:84:da:21:16:08:
                    d4:06:7b:c5:37:4e:5e:b4:06:65:4d:58:34:dc:68:
                    58:69:41:e6:bb:d0:17:9e:27:06:a5:af:44:4f:af:
                    62:c8:e0:6e:7d:35:85:81:91:c3:57:43:b5:ad:b6:
                    7b:ac:ee:7b:cc:7b:70:65:c7:58:7f:4a:a6:e9:a3:
                    a2:a5:8e:48:73:6e:46:ec:e7:be:97:df:41:64:e4:
                    a6:61:66:91:37:31:60:3d:99:3d:9a:c9:a5:78:09:
                    db:44:56:a4:fb:e1:b8:5e:78:02:cc:47:e9:f5:d8:
                    67:af:5b:45:27:ee:ab:de:92:23:be:4e:17:d3:9d:
                    09:9e:4d:c7:8c:ed:d2:f1:79:5a:8a:ab:83:84:71:
                    fd:97:18:68:1d:e5:62:05:c3:5e:ef:ec:af:d3:5d:
                    94:65:92:d9:02:5f:43:68:73:37:3d:76:7a:a4:f4:
                    e4:27:3b:24:17:5f:76:c1:44:aa:da:79:a4:6d:0b:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3A:6D:DD:EB:6D:21:21:2B:12:A8:B5:6D:69:D5:5E:DB:60:A0:0F
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/92aedc5f1d39a249684d47fc0c3ba24883e12806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2220:800::-2803:2220:47ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:02:7d:92:8a:d4:19:64:8a:9b:ae:b3:9e:9e:b9:cc:31:
         82:6a:b5:ee:d7:b5:ec:d3:7c:d5:61:79:70:13:62:2c:17:12:
         39:41:0e:c5:3d:56:b5:cc:3e:58:71:8a:ae:35:3a:3b:6d:5d:
         e8:29:f5:1e:2c:b5:92:c5:d7:aa:94:bc:d4:62:5d:62:72:74:
         fb:f2:37:da:8d:eb:dc:3d:64:64:b9:f1:15:4a:8c:c1:25:f5:
         8d:94:22:ab:18:5e:a0:10:06:ad:0c:ee:78:90:f7:e3:0f:6a:
         58:0e:95:6b:01:5c:d5:79:b7:f7:80:78:bb:32:68:d1:cc:60:
         e0:40:fa:aa:a4:a7:55:2e:99:ff:b3:87:23:39:27:c5:6b:24:
         e0:07:8a:01:35:15:ce:cb:f0:91:0e:61:1b:5c:ef:66:b2:be:
         f8:d9:32:09:45:e5:1c:1b:24:3d:56:6b:cb:70:09:a5:9c:c1:
         c8:40:34:97:3d:dd:d6:d7:27:0b:e2:b6:ae:e2:ef:19:9d:c3:
         b4:45:3f:bf:49:26:b5:98:04:ee:c6:42:5f:13:a1:9b:6d:94:
         52:04:d9:bd:ad:68:96:9d:dc:8a:aa:2e:7c:94:9b:82:33:a9:
         24:eb:af:13:57:f0:5f:e8:ed:33:23:5c:cb:95:43:e0:8f:48:
         c1:6a:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----