Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/0dcc3897322201555143fbac4a25c67cff311d17.roa
File:                     0dcc3897322201555143fbac4a25c67cff311d17.roa (raw, json)
Hash identifier:          EXB+4NXtjaJ1S+vxLIoH3MkC+FaKoiJnmoQnBtjgUhk=
Subject key identifier:   BC:B6:36:20:79:14:B1:CC:D1:E8:DC:AC:50:A2:5A:68:82:A0:22:7E
Certificate issuer:       /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial:       017EBE
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/0dcc3897322201555143fbac4a25c67cff311d17.roa
Signing time:             Tue 09 May 2023 23:01:28 +0000
ROA not before:           Mon 08 May 2023 23:01:28 +0000
ROA not after:            Fri 09 May 2025 23:01:28 +0000
asID:                     14080
IP address blocks:        2801:1f9:3::/48 maxlen: 48
                          2801:1f9:9::/48 maxlen: 48
                          2801:1f9:7::/48 maxlen: 48
                          2801:1f9::/48 maxlen: 48
                          2801:1f9:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97982 (0x17ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
        Validity
            Not Before: May  8 23:01:28 2023 GMT
            Not After : May  9 23:01:28 2025 GMT
        Subject: CN=0dcc3897322201555143fbac4a25c67cff311d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:2c:ee:fb:6a:57:1a:60:3d:4e:57:ca:f1:
                    e7:42:04:31:c1:36:44:39:21:19:e4:ad:fd:56:66:
                    4b:86:89:8e:c3:43:69:90:3f:31:7a:07:49:03:3b:
                    1a:31:4c:a8:1d:be:cd:a3:9d:49:86:bd:4f:d6:37:
                    87:cd:16:6a:8f:22:db:bf:9b:0a:2e:74:1e:ef:dc:
                    fd:bd:ae:d2:be:6a:a0:37:b0:4c:84:40:c8:b8:e7:
                    1f:1d:3f:a9:e2:7d:5e:3a:75:fe:6f:5f:cf:9c:5a:
                    26:78:32:11:32:f7:3b:10:96:fc:8a:75:9d:83:d1:
                    4e:d3:4f:18:2f:8a:b0:6a:77:98:21:99:7d:75:73:
                    75:df:6c:ac:a0:33:7f:d7:ef:dd:53:c0:2a:06:99:
                    00:f5:6a:80:05:1d:dd:a1:18:1b:58:82:fb:25:a8:
                    e4:46:d8:f9:b7:12:a6:47:48:aa:8a:5b:31:99:3c:
                    5c:5a:66:d3:34:02:e5:03:e7:54:a1:5e:23:55:ac:
                    7f:f1:95:f7:35:0d:bb:df:9b:e4:7a:44:82:ec:10:
                    ca:64:db:2b:e3:df:eb:36:8b:ce:58:df:d2:6a:07:
                    8b:a9:95:a4:d3:d8:33:13:ff:57:88:92:e4:fd:fa:
                    5a:ca:4c:34:e3:ed:a1:58:71:93:3e:9e:c3:63:74:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:36:20:79:14:B1:CC:D1:E8:DC:AC:50:A2:5A:68:82:A0:22:7E
            X509v3 Authority Key Identifier:
                keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/0dcc3897322201555143fbac4a25c67cff311d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48
                  2801:1f9:3::/48
                  2801:1f9:5::/48
                  2801:1f9:7::/48
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:36:60:1a:1a:a5:07:56:01:3d:2b:f6:9c:39:c0:5f:86:
         02:05:cb:98:eb:d1:3c:fe:6f:00:db:dc:23:2e:ff:0d:e6:7e:
         d3:54:96:77:08:81:6f:b6:62:80:39:b1:a0:e5:ec:06:f3:95:
         4c:5d:db:4f:42:5b:a8:27:37:05:f6:af:05:ea:2e:36:5c:90:
         19:74:70:78:e9:85:b5:96:83:7b:8d:26:ef:86:ec:f6:57:41:
         f6:40:5e:10:fe:56:97:34:03:4c:46:a3:b4:24:c2:2f:4f:a7:
         4b:09:40:5c:74:68:c0:65:43:eb:03:f1:22:70:f2:05:1d:ee:
         4e:d0:ba:d9:8f:2a:0c:0c:6b:7f:78:fe:23:a0:6e:c0:d1:4f:
         cf:29:59:39:eb:5d:99:78:a6:32:d2:61:3a:e0:19:37:85:21:
         0b:22:02:0b:b2:ff:8c:77:05:0a:22:31:05:8b:5c:0f:1a:94:
         65:66:be:13:1b:5b:9b:a7:5b:b2:eb:b5:de:9c:8c:cf:6c:e5:
         6b:01:8e:45:83:b2:c2:8b:75:68:e9:55:f3:8b:34:30:91:2a:
         8b:1f:aa:8d:fd:4b:6b:f8:0c:67:cd:b0:a9:58:a3:83:b6:c2:
         12:c7:5a:27:cd:01:93:71:a1:bf:93:3b:81:b4:c9:aa:ca:8d:
         0d:77:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----