Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/09d0ca03c54ba45ab18166cef0e0f335c012e569.roa
File:                     09d0ca03c54ba45ab18166cef0e0f335c012e569.roa (raw, json)
Hash identifier:          8cVnj8g+lPUipFTCnVaPpuyVVnoaB1+EyjIQd4xIiJ8=
Subject key identifier:   4F:AF:CF:83:22:94:72:5C:12:8B:52:47:1D:E9:09:CE:D7:7A:08:8A
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09E936
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/09d0ca03c54ba45ab18166cef0e0f335c012e569.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649526 (0x9e936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=09d0ca03c54ba45ab18166cef0e0f335c012e569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6c:58:1a:c5:1e:cc:9d:24:65:b5:ee:aa:4a:
                    be:e1:d9:66:c8:ec:3e:70:cb:78:eb:44:ee:43:f9:
                    ed:e7:25:2e:eb:54:99:5e:3c:30:c8:98:72:29:f8:
                    d0:62:4f:9c:48:ba:cc:b8:ec:0a:80:82:e9:15:a2:
                    1c:a8:0e:ee:31:a6:ce:76:07:bb:99:c9:e9:52:08:
                    e3:10:56:40:8d:ce:11:6b:4b:dd:0f:20:28:ff:c9:
                    f3:f4:42:1c:0e:99:46:45:18:40:48:91:c0:4a:bd:
                    c8:8e:9d:f2:17:6b:38:46:dc:de:a6:38:45:88:83:
                    9c:b2:db:cd:b5:2c:37:e2:0c:12:87:73:b5:73:19:
                    e2:78:94:29:1b:02:11:67:a8:1b:ae:28:09:ae:65:
                    f2:84:cb:f9:ea:bf:3d:20:b4:d7:a2:88:4c:7c:42:
                    c8:ac:1c:45:db:eb:c8:f0:96:b6:e7:a8:8d:2f:d9:
                    59:3a:fb:df:57:5b:ad:54:94:65:11:51:42:f8:8a:
                    f7:79:74:e2:61:0a:48:d1:8e:e8:2d:91:83:6c:6e:
                    50:4e:cd:e6:41:c8:dc:eb:fe:d4:4a:44:f6:48:17:
                    89:ff:23:6d:41:6b:16:7a:89:4d:a6:67:91:89:35:
                    31:f6:a4:61:c6:48:d8:2e:63:71:62:b8:63:8b:dd:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AF:CF:83:22:94:72:5C:12:8B:52:47:1D:E9:09:CE:D7:7A:08:8A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/09d0ca03c54ba45ab18166cef0e0f335c012e569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:da:cf:30:1d:75:9a:87:c3:ec:08:9b:62:10:bc:b9:bc:f1:
         51:0c:67:58:a5:e4:40:77:53:5a:2f:10:98:cf:b8:f6:d0:50:
         e9:49:74:3a:c4:0a:0e:41:bc:03:11:03:a6:25:e4:b3:1d:54:
         6f:7d:89:ca:c8:38:74:98:5e:3f:28:0b:14:25:5d:73:6f:c0:
         fb:a7:e4:8e:7d:45:a3:0f:de:4a:6b:c5:95:91:8b:22:cb:de:
         39:25:aa:66:75:ee:1c:36:96:f4:79:71:99:19:fb:9e:6f:c9:
         ae:60:55:71:67:1e:36:86:3e:f8:b0:99:38:27:09:fc:6f:d8:
         57:17:c9:bf:34:c6:ca:36:6d:7a:7e:06:39:46:be:1f:58:b0:
         39:12:b5:f1:46:94:32:f2:cc:27:25:a0:6e:90:e0:b7:00:ee:
         94:f1:1a:3d:6f:3e:0a:b4:a8:fb:45:be:de:ed:2f:94:54:b4:
         f1:fd:c6:8a:ea:85:02:47:fe:bf:1f:62:f7:eb:6a:9e:cf:1c:
         41:f5:c7:c8:37:fa:f0:d1:7d:6a:c2:8c:a0:ce:e0:09:72:73:
         e1:47:46:84:d4:5e:2c:b4:67:74:1a:35:2c:38:67:31:17:94:
         98:12:fd:04:bc:b9:80:e2:86:37:b4:a5:98:1d:ba:1d:60:11:
         e8:59:35:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----