Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/66e8e423c3aed2f12de594b43e670df5748f09ca.roa
File:                     66e8e423c3aed2f12de594b43e670df5748f09ca.roa (raw, json)
Hash identifier:          xVRgkxO7fubC/rqHt22XJxqaeIyGiq7BvgB9mmXXCJ0=
Subject key identifier:   D0:8F:4B:22:FD:2D:3F:7C:65:C7:34:D3:27:D6:17:D4:B5:C9:07:96
Certificate issuer:       /CN=8b3409d23417b7ed5b171c186d6bc0e2b8b69dae
Certificate serial:       19C72D
Authority key identifier: D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/66e8e423c3aed2f12de594b43e670df5748f09ca.roa
Signing time:             Wed 31 Aug 2022 20:31:01 +0000
ROA not before:           Wed 31 Aug 2022 20:27:53 +0000
ROA not after:            Sat 31 Aug 2024 20:27:53 +0000
asID:                     266892
IP address blocks:        2803:e6a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689389 (0x19c72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3409d23417b7ed5b171c186d6bc0e2b8b69dae
        Validity
            Not Before: Aug 31 20:27:53 2022 GMT
            Not After : Aug 31 20:27:53 2024 GMT
        Subject: CN=66e8e423c3aed2f12de594b43e670df5748f09ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:7c:20:c6:61:43:02:2a:cc:51:b4:c2:76:
                    39:27:78:c2:8c:bd:1e:e7:06:2f:b6:dc:ba:11:c1:
                    e1:22:f6:ad:75:d0:59:d4:57:16:68:90:8c:21:22:
                    41:cb:a9:9b:0f:4c:dc:c1:5b:4a:e5:e0:48:c7:9e:
                    24:06:11:e1:eb:87:21:13:e5:21:84:d1:ff:76:4e:
                    1e:4a:1d:61:4d:16:94:da:90:14:77:c1:5d:47:61:
                    2b:a0:6a:38:f3:7a:e7:91:1e:4f:d9:59:f6:f4:86:
                    bc:bb:13:eb:d9:05:92:0e:f3:73:e2:65:57:e0:53:
                    d2:5a:6a:f1:03:76:fc:99:6b:64:42:47:34:81:8f:
                    3e:ac:af:c4:8b:70:c9:b9:fe:51:91:50:2c:4e:61:
                    16:5e:c9:0f:d8:a6:04:02:6e:80:80:bc:5b:00:a5:
                    40:33:0c:ae:1e:57:c1:14:68:fd:4d:81:06:ab:82:
                    bb:7a:af:15:43:ae:ea:2d:49:24:58:52:66:79:cf:
                    d9:13:40:2b:05:df:1a:22:8e:46:b8:39:ba:b2:0a:
                    64:96:3f:e2:25:38:b1:4e:43:4a:1a:cb:e6:46:7c:
                    1a:b7:af:ca:3c:25:48:6c:5c:d1:57:33:bd:9c:40:
                    83:df:10:b7:b4:e0:40:c1:3e:38:fa:41:87:95:74:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:4B:22:FD:2D:3F:7C:65:C7:34:D3:27:D6:17:D4:B5:C9:07:96
            X509v3 Authority Key Identifier:
                keyid:D2:4A:DE:42:D5:78:F2:8F:9B:25:EA:F2:5A:80:27:9F:BF:D8:0C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/66e8e423c3aed2f12de594b43e670df5748f09ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8986d229-fbfc-47e9-833c-d0ec2647d14b/8b3409d23417b7ed5b171c186d6bc0e2b8b69dae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:46:bc:e6:ce:e8:51:46:67:d0:57:55:5e:90:ba:f3:af:
         9e:e1:c6:ac:05:66:e8:bb:90:94:c2:7d:96:e3:f1:48:fd:1d:
         53:69:c4:f5:1f:0e:a5:70:43:ce:a7:d3:38:7c:85:43:7b:36:
         2a:de:01:27:d6:c2:6c:53:1a:9d:5e:ac:53:74:86:4f:48:4d:
         c0:b2:67:c7:1c:0d:bf:97:a4:64:6a:d7:d1:35:e7:8d:1a:a4:
         46:d3:6d:51:ec:5f:74:52:08:89:a9:87:f2:2a:08:f9:b9:de:
         9f:d0:eb:24:26:0f:0b:33:e1:7c:a8:37:4a:89:cb:21:02:51:
         67:19:aa:a1:01:c1:85:9e:48:d9:89:b4:76:cf:98:f4:1c:14:
         9b:80:d0:91:8e:23:92:f9:79:57:34:71:e6:e3:16:53:24:c6:
         bc:d9:40:f9:b8:98:6d:f3:25:40:40:93:cb:f6:01:93:f8:3f:
         97:65:5d:c6:29:73:c0:38:00:16:1e:88:bd:63:2c:5f:af:a8:
         70:97:a3:dc:e8:58:b6:9c:e4:ed:2d:89:90:ef:69:7e:d8:d7:
         92:88:4a:ca:02:e8:cb:0c:54:ad:8b:2b:f1:e0:01:69:3f:d5:
         89:6d:4c:69:9b:6e:ea:7e:c1:67:3d:47:40:e0:4d:67:32:e0:
         3e:c1:8d:a4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGcctMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
MzQwOWQyMzQxN2I3ZWQ1YjE3MWMxODZkNmJjMGUyYjhiNjlkYWUwHhcNMjIwODMx
MjAyNzUzWhcNMjQwODMxMjAyNzUzWjAzMTEwLwYDVQQDEyg2NmU4ZTQyM2MzYWVk
MmYxMmRlNTk0YjQzZTY3MGRmNTc0OGYwOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt2x8IMZhQwIqzFG0wnY5J3jCjL0e5wYvtty6EcHhIvatddBZ
1FcWaJCMISJBy6mbD0zcwVtK5eBIx54kBhHh64chE+UhhNH/dk4eSh1hTRaU2pAU
d8FdR2EroGo483rnkR5P2Vn29Ia8uxPr2QWSDvNz4mVX4FPSWmrxA3b8mWtkQkc0
gY8+rK/Ei3DJuf5RkVAsTmEWXskP2KYEAm6AgLxbAKVAMwyuHlfBFGj9TYEGq4K7
eq8VQ67qLUkkWFJmec/ZE0ArBd8aIo5GuDm6sgpklj/iJTixTkNKGsvmRnwat6/K
PCVIbFzRVzO9nECD3xC3tOBAwT44+kGHlXTZTwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNCPSyL9LT98Zcc00yfWF9S1yQeWMB8GA1UdIwQYMBaAFNJK3kLVePKPmyXq
8lqAJ5+/2AxYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGIzNDA5
ZDIzNDE3YjdlZDViMTcxYzE4NmQ2YmMwZTJiOGI2OWRhZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODk4NmQyMjktZmJmYy00N2U5LTgzM2MtZDBlYzI2
NDdkMTRiLzY2ZThlNDIzYzNhZWQyZjEyZGU1OTRiNDNlNjcwZGY1NzQ4ZjA5Y2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84OTg2ZDIyOS1mYmZjLTQ3ZTktODMzYy1kMGVj
MjY0N2QxNGIvOGIzNDA5ZDIzNDE3YjdlZDViMTcxYzE4NmQ2YmMwZTJiOGI2OWRh
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD5qAwDQYJKoZIhvcNAQELBQADggEBAHvnRrzmzuhRRmfQ
V1VekLrzr57hxqwFZui7kJTCfZbj8Uj9HVNpxPUfDqVwQ86n0zh8hUN7NireASfW
wmxTGp1erFN0hk9ITcCyZ8ccDb+XpGRq19E1540apEbTbVHsX3RSCImph/IqCPm5
3p/Q6yQmDwsz4XyoN0qJyyECUWcZqqEBwYWeSNmJtHbPmPQcFJuA0JGOI5L5eVc0
cebjFlMkxrzZQPm4mG3zJUBAk8v2AZP4P5dlXcYpc8A4ABYeiL1jLF+vqHCXo9zo
WLac5O0tiZDvaX7Y15KISsoC6MsMVK2LK/HgAWk/1YltTGmbbup+wWc9R0DgTWcy
4D7BjaQ=
-----END CERTIFICATE-----