Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa
File:                     b78b10f51f36a54a4239e82eeb827f506b64ee69.roa (raw, json)
Hash identifier:          jbNpPIHotUFyPB6BIwgYkpIouV3iCVXSP1pPGjwkY1o=
Subject key identifier:   62:F5:E2:04:89:89:1E:DE:86:06:B7:8B:A4:24:1B:DF:55:BB:CD:1C
Certificate issuer:       /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial:       018310
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa
Signing time:             Tue 09 May 2023 23:01:29 +0000
ROA not before:           Mon 08 May 2023 23:01:28 +0000
ROA not after:            Fri 09 May 2025 23:01:28 +0000
asID:                     3816
IP address blocks:        2801:1f9:3::/48 maxlen: 48
                          2801:1f9:9::/48 maxlen: 48
                          2801:1f9:7::/48 maxlen: 48
                          2801:1f9::/48 maxlen: 48
                          2801:1f9:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99088 (0x18310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
        Validity
            Not Before: May  8 23:01:28 2023 GMT
            Not After : May  9 23:01:28 2025 GMT
        Subject: CN=b78b10f51f36a54a4239e82eeb827f506b64ee69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:68:e6:3a:e0:04:7c:c6:c4:d4:57:97:f2:
                    53:23:11:cd:39:a8:cc:c5:ca:ff:7a:7e:55:96:cd:
                    c4:79:26:f2:f5:02:7f:5d:43:50:75:fc:7e:b4:51:
                    c8:6f:21:03:2e:71:6b:39:68:16:41:c4:a7:cb:eb:
                    a0:a1:0a:bf:e9:48:58:58:32:74:f5:ca:10:69:b6:
                    3b:dc:3e:91:30:f9:c7:93:dc:0b:22:6c:ff:ad:2f:
                    be:d6:6c:9f:79:71:61:bb:f8:c7:4a:3c:ae:a6:7a:
                    dc:42:9a:88:1f:d4:63:90:98:81:fa:46:41:ab:e6:
                    63:65:aa:7f:52:85:15:26:13:d0:e4:41:e7:cd:1b:
                    8c:0f:9e:5f:96:fe:92:e1:d8:26:98:26:80:26:a1:
                    64:77:1e:3e:e7:79:4a:9a:f6:c3:ae:f5:ec:e4:48:
                    ed:52:47:96:12:07:ab:57:7e:52:16:36:26:eb:99:
                    66:14:92:3a:15:26:dc:f4:62:0c:f1:0a:bf:1e:4d:
                    05:6b:b1:9d:d8:42:80:90:0b:f1:fa:c7:fc:71:96:
                    ff:c4:83:3d:7a:7d:e6:4f:b3:4b:71:85:a6:46:ac:
                    53:86:56:dc:2a:bb:1a:c1:63:1d:1e:fe:58:a3:29:
                    a6:09:3c:4e:28:8f:37:b8:eb:3e:65:1a:a4:55:9a:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:E2:04:89:89:1E:DE:86:06:B7:8B:A4:24:1B:DF:55:BB:CD:1C
            X509v3 Authority Key Identifier:
                keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/b78b10f51f36a54a4239e82eeb827f506b64ee69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/48
                  2801:1f9:3::/48
                  2801:1f9:5::/48
                  2801:1f9:7::/48
                  2801:1f9:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:86:51:43:0c:1c:45:9e:6f:b9:0b:ba:ac:b0:49:ea:7c:
         4c:48:9d:5b:f0:ee:98:c4:f7:62:4e:9f:51:a3:1a:8b:6d:c9:
         9a:c6:4c:8e:5f:98:d5:1c:8d:f8:63:06:ee:5c:65:17:b5:72:
         0e:77:a0:8a:71:3a:d1:c3:ba:e2:0e:8d:bf:fb:ee:69:96:1e:
         85:4b:0b:d6:84:ac:d5:ec:01:bb:00:3d:7d:e7:43:6e:e9:8c:
         4c:7a:e5:3a:a2:00:ca:e0:ea:6f:67:e0:03:38:90:c6:cf:b7:
         76:37:b0:d9:12:98:fe:2e:f9:2f:24:ae:40:c9:96:13:2e:c3:
         28:53:d4:45:fb:42:5f:8d:2e:1d:fe:31:6a:2c:31:be:55:45:
         c4:d7:aa:ca:e8:41:9b:81:ce:7c:d8:d4:30:3e:00:5e:ee:ae:
         3b:12:c2:b4:1e:d3:ea:8f:21:c9:29:2a:1d:f4:ab:5c:e1:32:
         c3:19:d7:68:6c:a7:d4:0a:fc:1b:d5:58:a8:0b:2f:2a:45:ef:
         d9:09:22:ae:4f:65:2d:d1:c2:2d:ad:c7:0a:6e:2f:9a:67:e3:
         7c:90:79:1d:07:28:4d:82:73:d3:74:a6:cc:d4:01:10:f2:7d:
         11:6e:99:10:ba:f7:32:b8:06:e6:fc:f6:cb:77:4c:07:1f:0b:
         bd:34:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----