Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d09208328cd9af9e4abe3f3550492dc7339d1d7a.roa
File:                     d09208328cd9af9e4abe3f3550492dc7339d1d7a.roa (raw, json)
Hash identifier:          pizUDLpUG46GGUeosAw2MwkgOzo66RkFEk/Rf2h0eDs=
Subject key identifier:   20:E5:3A:6A:09:52:97:19:93:A0:B8:59:D6:84:A2:F6:12:19:2A:F4
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B0D14
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d09208328cd9af9e4abe3f3550492dc7339d1d7a.roa
Signing time:             Thu 25 Jan 2024 01:03:47 +0000
ROA not before:           Thu 25 Jan 2024 01:03:47 +0000
ROA not after:            Sun 25 Jan 2026 01:03:47 +0000
asID:                     262589
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724244 (0xb0d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 25 01:03:47 2024 GMT
            Not After : Jan 25 01:03:47 2026 GMT
        Subject: CN=d09208328cd9af9e4abe3f3550492dc7339d1d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:7c:20:e2:fd:f3:84:33:46:a4:46:55:a9:
                    9e:71:1c:64:f5:26:c7:00:0a:1b:6c:b8:b5:a7:e2:
                    78:e9:0f:8f:63:46:22:2c:05:27:ca:4e:8e:b8:22:
                    5e:65:b7:a0:0e:57:65:f6:8b:0b:85:c6:0f:2b:1b:
                    4e:c0:bd:b6:df:65:41:46:41:02:dc:0e:0b:d2:1d:
                    70:29:15:6d:0c:a8:80:9b:13:29:50:95:05:2d:57:
                    9e:0e:05:7c:53:9f:0f:db:08:35:a0:47:d7:35:6e:
                    d0:56:5b:a0:ea:3f:7c:9b:68:f5:09:ca:a3:04:73:
                    bc:35:a6:16:23:a6:a1:35:31:ef:69:a5:38:32:0a:
                    f1:4a:35:eb:07:bd:60:d8:78:ba:df:56:a1:32:0c:
                    6e:e0:9b:2e:39:1f:17:94:87:6c:a8:02:77:d5:a1:
                    10:66:79:9c:ac:1e:b9:d8:96:51:fe:8d:53:9e:bc:
                    f2:64:69:7e:ac:cd:94:1a:43:10:04:be:1a:dd:08:
                    3f:76:f0:cb:6f:cd:99:59:01:37:3e:07:56:40:31:
                    9f:7a:84:5d:cc:cf:c8:55:96:0e:02:cb:27:35:77:
                    48:b8:54:07:ef:b6:e6:99:5a:ef:98:07:08:3f:cc:
                    c0:04:7d:36:ee:6e:03:34:2a:86:bb:de:43:26:0a:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E5:3A:6A:09:52:97:19:93:A0:B8:59:D6:84:A2:F6:12:19:2A:F4
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/d09208328cd9af9e4abe3f3550492dc7339d1d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:a3:c1:06:1e:d2:26:34:fc:1d:a5:82:3c:d2:a1:0d:45:
         a7:35:eb:39:df:71:b6:11:9c:ad:d9:1a:d9:20:d5:0f:55:64:
         14:95:46:cc:03:ec:51:84:a6:9b:c4:ad:b2:df:f2:78:53:b7:
         01:6d:8b:de:8b:31:1d:85:ed:b1:6e:94:12:47:84:3d:a6:38:
         5b:af:c0:8e:7e:e3:92:42:02:be:af:9d:a7:de:4a:d1:15:7c:
         ca:5f:da:a4:87:9c:81:a4:9a:c0:cd:9a:48:e9:de:2c:34:3a:
         92:ea:73:44:1f:ae:45:95:80:4e:74:a2:b3:8d:68:29:d6:bd:
         34:37:89:80:69:e5:ed:aa:f8:09:27:f8:ca:5b:9d:d6:a7:03:
         4d:c9:cc:b9:95:5d:81:f0:c9:f2:d4:7c:8c:e3:6f:d2:a4:2e:
         e7:0a:66:13:6c:ed:20:66:32:06:4e:b4:42:0e:b8:c2:91:d3:
         3a:41:15:87:86:03:cd:a2:49:41:33:40:bb:d4:09:65:1e:0e:
         26:31:19:a8:6b:00:73:47:2a:eb:84:bb:53:3c:c3:0f:0a:38:
         ec:e8:37:c8:01:9d:de:0d:c7:aa:be:0b:f0:fa:8e:5e:58:2f:
         60:ac:e7:eb:5c:f7:dc:d4:4e:28:db:e7:40:09:dd:95:c8:98:
         91:bc:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----