Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/9f855d329ca96e0d8c3679a8fdbefc7093cfb33d.roa
File:                     9f855d329ca96e0d8c3679a8fdbefc7093cfb33d.roa (raw, json)
Hash identifier:          1fgKWrWlfBBjXVJPFAavCuab2u99CjvVtt0s3/8IRi8=
Subject key identifier:   B6:71:02:3F:61:5D:F4:F2:3E:92:53:A7:9A:C5:04:F5:61:B6:52:D9
Certificate issuer:       /CN=33b2211f7639ca97f55599bde05cf8b49ec41579
Certificate serial:       11CC66
Authority key identifier: 90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/9f855d329ca96e0d8c3679a8fdbefc7093cfb33d.roa
Signing time:             Fri 20 Oct 2023 07:30:01 +0000
ROA not before:           Fri 20 Oct 2023 07:30:01 +0000
ROA not after:            Sun 19 Oct 2025 07:30:01 +0000
asID:                     269739
IP address blocks:        2803:1960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166438 (0x11cc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b2211f7639ca97f55599bde05cf8b49ec41579
        Validity
            Not Before: Oct 20 07:30:01 2023 GMT
            Not After : Oct 19 07:30:01 2025 GMT
        Subject: CN=9f855d329ca96e0d8c3679a8fdbefc7093cfb33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:05:04:76:c9:30:d7:c6:4b:7d:22:2b:97:
                    d6:38:dc:cf:43:53:ec:a9:15:6c:8a:e3:88:79:1e:
                    13:2d:9b:fe:09:42:31:7d:81:9a:9b:1d:e5:94:bf:
                    ba:d7:8e:13:8f:02:5f:b1:88:20:23:7a:4e:da:2e:
                    e4:8e:44:2c:ee:1b:8a:23:2a:32:c6:e0:f8:4e:f3:
                    51:52:fa:0a:b4:d1:a8:33:a0:53:a7:eb:43:5d:fa:
                    a0:1f:67:a6:a7:b0:ac:11:23:41:f4:92:7a:7d:77:
                    10:d1:38:3a:c6:8c:c3:84:fa:42:ac:69:f5:1f:29:
                    18:30:91:f2:6e:75:72:5b:34:cf:00:b4:25:13:a2:
                    f9:78:9a:f5:8a:65:5b:e9:9c:3a:fd:50:f7:c8:58:
                    c4:62:92:81:45:87:fb:ec:1d:fa:3a:d6:c5:48:9c:
                    22:7c:ef:93:83:7d:ff:4c:98:ee:22:74:9d:59:4a:
                    1b:ee:33:25:3c:62:ea:de:8e:18:91:57:6d:c6:11:
                    59:74:8a:3c:0b:7e:85:59:76:8c:b2:4d:f1:1f:3a:
                    26:78:0a:e1:8e:31:fc:09:1a:66:85:ed:a8:ab:b0:
                    ff:3c:f9:ad:0c:36:69:52:12:91:b7:65:3a:a6:41:
                    7b:88:00:20:ab:b6:85:95:e8:0e:4c:68:a5:ca:2a:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:02:3F:61:5D:F4:F2:3E:92:53:A7:9A:C5:04:F5:61:B6:52:D9
            X509v3 Authority Key Identifier:
                keyid:90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/9f855d329ca96e0d8c3679a8fdbefc7093cfb33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/33b2211f7639ca97f55599bde05cf8b49ec41579.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1960::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:f1:1d:cc:91:f0:32:2c:8d:19:83:20:27:9b:0c:0d:e5:
         d7:38:10:9b:e0:22:04:1c:b0:65:76:76:50:ab:2f:c4:fe:c9:
         01:81:0c:ab:d0:f2:9a:45:67:3b:31:c5:8b:8b:51:8a:0d:c7:
         b7:0a:b3:02:8d:0c:e5:dc:9d:af:ae:48:4f:bd:af:4b:24:e6:
         9a:77:78:04:88:d8:f6:2a:ab:40:22:70:e0:cf:ec:e6:a0:13:
         ca:f4:93:0f:67:d2:c9:ff:78:d2:1e:ad:fb:fc:86:30:ea:dd:
         5e:8b:dd:78:a1:06:d2:2b:75:67:4f:40:d6:d6:af:0e:fa:19:
         69:2a:a6:87:b5:fa:d5:26:83:b5:72:f3:a0:30:ed:71:21:7a:
         47:cf:7c:ae:8b:4b:69:77:75:8d:0e:35:a1:52:ac:21:a8:78:
         ff:bc:46:6c:4c:a5:4a:9e:fe:9b:7e:41:92:f1:07:9f:86:a1:
         aa:cd:0e:ee:57:48:31:3e:19:6d:d9:4d:5e:cb:72:57:71:64:
         1a:d2:69:4a:7c:6b:4f:1d:d3:e8:85:6d:ab:f6:d0:c9:1d:0b:
         65:50:4c:60:8d:63:f4:f6:56:c3:98:ef:ae:16:2f:ca:52:20:
         db:f2:0c:9a:db:e6:27:24:37:df:99:9e:1b:68:d3:7c:f7:c3:
         47:a1:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----