Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/9a4e09be6a915a187e004db22954f981f49e7266.roa
File:                     9a4e09be6a915a187e004db22954f981f49e7266.roa (raw, json)
Hash identifier:          PWeOZINaaTVnJt1RECT0hVoMHQO3BqNsfs8XF4CvoeE=
Subject key identifier:   9C:AC:89:83:02:7F:E2:67:1C:2D:C0:66:9B:9D:36:DB:7D:72:87:EA
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       204D1E
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/9a4e09be6a915a187e004db22954f981f49e7266.roa
Signing time:             Sat 29 Apr 2023 13:59:43 +0000
ROA not before:           Fri 28 Apr 2023 13:59:43 +0000
ROA not after:            Tue 29 Apr 2025 13:59:43 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116894 (0x204d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr 28 13:59:43 2023 GMT
            Not After : Apr 29 13:59:43 2025 GMT
        Subject: CN=9a4e09be6a915a187e004db22954f981f49e7266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:75:49:71:68:8d:8f:7d:a2:f1:42:b7:f8:
                    68:2e:e7:54:01:63:1c:1f:66:71:e3:ee:b4:48:5f:
                    df:0d:14:7e:c1:6a:19:f0:f4:8a:14:28:79:16:9d:
                    1c:64:23:bd:22:f4:2c:ab:d9:1f:16:f0:f4:3f:7a:
                    23:5c:9e:9f:46:98:8e:26:0a:bc:1e:03:ac:13:d4:
                    e6:62:4f:0a:b1:39:89:17:84:1d:08:8f:97:ed:ef:
                    4e:d0:10:2f:d1:da:f7:b9:bb:27:44:6e:96:85:d3:
                    3d:2f:04:40:3d:e6:5f:5b:e1:11:dd:a7:68:16:e4:
                    d3:e8:f4:8c:63:1f:43:2b:11:17:bf:03:c8:02:5f:
                    bc:a2:85:4d:46:8c:9a:54:42:74:ae:bf:04:8e:b5:
                    d9:0e:7c:ad:e8:4d:f5:09:fa:b4:03:ef:48:29:f5:
                    09:9d:b6:e8:dd:02:19:29:20:2f:12:b9:42:39:30:
                    aa:51:e2:91:1b:7f:d1:ab:6b:d4:29:28:91:a1:f6:
                    ef:7a:7d:2d:19:59:2d:98:c2:fa:96:e0:3d:84:b8:
                    9d:b2:ee:b0:88:8c:75:84:dd:25:3c:68:ed:e7:aa:
                    7c:cd:19:e1:6d:49:81:4f:b3:f6:45:3e:9a:71:af:
                    09:1c:3b:4b:8c:ec:3f:85:82:52:55:f0:ad:b1:6c:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:89:83:02:7F:E2:67:1C:2D:C0:66:9B:9D:36:DB:7D:72:87:EA
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/9a4e09be6a915a187e004db22954f981f49e7266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:e7:21:eb:3f:27:b9:2b:57:d1:07:91:87:6b:0a:3c:ff:
         44:cf:59:8d:11:a0:64:b7:ad:35:6d:bd:39:c2:7e:30:f8:a6:
         87:ab:d8:70:e5:56:ea:00:e3:69:7f:16:8f:93:5e:27:16:94:
         4e:15:43:d3:ac:55:9e:f4:ff:67:96:b2:ff:61:fa:fc:f2:ab:
         e9:c7:f2:9a:ef:61:56:99:8d:a2:de:c0:c8:ac:9d:6e:d5:5e:
         d8:f4:1f:51:82:c6:9d:e9:f0:2b:bc:f7:a7:6c:85:48:c0:bb:
         4c:a1:e5:34:c3:22:97:ea:88:09:3e:fb:52:09:c7:3a:e6:20:
         ec:14:00:75:09:9c:9c:fb:50:d4:31:97:fe:d4:3a:57:98:8f:
         eb:4d:99:7a:b0:90:cc:51:46:1d:22:53:24:4d:1c:7a:a8:d0:
         74:83:c0:e0:ee:4f:b8:40:92:9b:46:57:0c:79:68:f3:0a:f0:
         fc:6e:12:3f:73:92:b9:a4:60:1c:6e:10:6a:85:36:b2:8b:f2:
         93:ed:11:54:08:c5:29:db:30:a3:4f:98:b5:98:41:05:73:51:
         d6:3d:80:eb:b6:08:b6:f1:36:85:5c:3f:f1:92:ee:f1:c9:f5:
         7f:13:ee:19:86:aa:ce:82:ff:1f:12:4c:06:0a:70:3a:4c:0a:
         08:20:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----