Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/032f9fb1ddf0da4df9b7754750e6e0c0e6d555b8.roa
File:                     032f9fb1ddf0da4df9b7754750e6e0c0e6d555b8.roa (raw, json)
Hash identifier:          oYD+4QBpfmnzKQ3+8DT6bep9DCAwwk/8+vOvP/YWgIw=
Subject key identifier:   80:29:55:ED:83:6E:B1:F4:F2:3D:79:4C:52:93:56:D9:F7:1F:E6:08
Certificate issuer:       /CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
Certificate serial:       1D4C1A
Authority key identifier: 0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/032f9fb1ddf0da4df9b7754750e6e0c0e6d555b8.roa
Signing time:             Fri 03 Nov 2023 09:46:44 +0000
ROA not before:           Fri 03 Nov 2023 09:46:44 +0000
ROA not after:            Mon 03 Nov 2025 09:46:44 +0000
asID:                     272803
IP address blocks:        2803:e720::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920026 (0x1d4c1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09388c479448ba5275aecc1ebce8e9e6fdf027ef
        Validity
            Not Before: Nov  3 09:46:44 2023 GMT
            Not After : Nov  3 09:46:44 2025 GMT
        Subject: CN=032f9fb1ddf0da4df9b7754750e6e0c0e6d555b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8c:ac:81:68:62:f1:f8:d3:df:6d:42:d5:77:
                    59:a7:46:52:69:b4:fb:48:7a:7d:87:1e:17:40:c6:
                    25:4c:37:c8:32:b4:55:bf:fa:c9:2b:ef:ae:e6:9b:
                    44:99:6f:09:ee:03:df:d1:c2:a8:46:65:3d:31:42:
                    a2:7b:d9:c0:59:61:4e:1b:5a:3e:66:69:56:52:e5:
                    f5:e4:76:be:54:0e:36:0d:c1:2a:51:27:f0:11:e7:
                    08:e4:23:ab:ea:13:86:02:a6:a3:4b:b2:74:5f:cf:
                    45:70:5b:9b:5f:ed:0b:40:4c:47:61:fb:20:d4:60:
                    72:94:d0:5d:f2:00:75:5d:86:aa:66:6e:09:7b:21:
                    08:17:7d:54:f1:34:d0:24:29:80:7d:61:de:de:d6:
                    ea:6d:19:32:b6:ed:65:fd:5c:11:55:1e:07:6c:8a:
                    0a:08:e0:50:72:15:6e:1d:ea:d8:2a:fb:f5:da:4e:
                    c4:b0:9c:83:87:ff:3c:f6:17:e3:d2:26:a5:d4:47:
                    b0:70:19:49:08:aa:a6:78:a9:05:62:a9:39:a6:f2:
                    6d:26:49:37:99:d4:e8:f7:72:c8:21:56:12:38:47:
                    7c:2e:80:72:0a:b2:50:d0:c8:12:ec:74:4e:bd:fe:
                    99:73:bf:16:eb:ac:00:35:49:5b:1b:e8:57:bd:e8:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:29:55:ED:83:6E:B1:F4:F2:3D:79:4C:52:93:56:D9:F7:1F:E6:08
            X509v3 Authority Key Identifier:
                keyid:0D:AC:0D:E6:3E:9B:D7:77:0F:3F:6D:94:83:8F:0B:9D:E4:51:60:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09388c479448ba5275aecc1ebce8e9e6fdf027ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/032f9fb1ddf0da4df9b7754750e6e0c0e6d555b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09fb7567-0cbf-4778-ab6a-9c153df7e410/09388c479448ba5275aecc1ebce8e9e6fdf027ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e720::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:af:e3:f3:16:04:f1:7a:e7:be:50:76:13:5b:18:76:c7:6a:
         95:12:6d:06:6c:23:95:a1:a8:fd:13:b8:3e:48:f5:f2:20:99:
         d6:d2:bd:0c:9e:7a:e7:4d:a7:e8:c4:30:a3:91:4f:a2:06:fc:
         c2:bf:47:58:d9:ab:26:91:17:5c:e1:4f:1b:25:ad:89:be:06:
         45:a4:9c:3f:92:41:2c:b6:84:bc:71:1b:83:cc:79:a0:e6:1f:
         fe:18:c9:a8:9c:f7:8a:cd:59:3e:c7:ff:86:fe:3d:ae:d4:1c:
         11:ad:49:34:2e:c8:2c:d6:a5:01:ec:eb:ec:27:37:3b:80:24:
         d7:23:b1:24:4a:74:f7:fd:d4:00:e6:02:a6:85:47:c2:2b:67:
         80:8e:08:09:f3:2d:8e:90:00:d8:04:02:a2:91:c2:99:ed:a1:
         4e:c8:e0:9b:ff:26:42:99:9d:69:0f:71:99:aa:14:9a:03:72:
         78:62:ca:8f:b7:5f:78:52:cf:a5:96:02:14:ef:7d:d4:5e:03:
         ca:c7:b5:30:c2:b0:ed:0c:8c:e0:be:cf:2d:7a:24:28:19:17:
         bf:dd:b3:79:70:ce:e2:5b:6c:c3:eb:28:9c:d6:be:ed:4c:98:
         2c:01:35:c6:08:36:2d:e5:d9:3e:92:cf:34:1d:d7:13:f1:b0:
         4d:cc:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----