Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9cd5985aad0c385883ad8163504df0dd28cf9af6.roa
File:                     9cd5985aad0c385883ad8163504df0dd28cf9af6.roa (raw, json)
Hash identifier:          S3HE1scRgy3OzH2WSDurgEr6cYWHwuyPDYbSJFHlWl8=
Subject key identifier:   67:36:AB:21:87:E0:63:95:69:F4:13:63:29:C3:82:BB:1B:81:E8:7F
Certificate issuer:       /CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
Certificate serial:       127C93
Authority key identifier: 03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9cd5985aad0c385883ad8163504df0dd28cf9af6.roa
Signing time:             Fri 15 Oct 2021 05:04:49 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     28022
IP address blocks:        2800:510::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211539 (0x127c93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=9cd5985aad0c385883ad8163504df0dd28cf9af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:f7:67:93:e5:e2:8b:75:c5:bf:df:b5:a7:
                    9e:eb:69:ae:56:51:71:bb:3f:3a:14:d5:17:2c:0e:
                    cc:61:a8:f8:4a:3c:1c:26:16:84:83:6a:47:f9:d5:
                    23:e1:20:98:de:9c:f3:a3:2e:01:99:30:75:01:f3:
                    9a:d5:9c:14:b6:9b:78:59:d6:65:ab:e5:dd:91:42:
                    01:e8:4d:97:7f:0d:d2:a4:67:b3:5a:30:5d:7d:3e:
                    04:f0:aa:d1:ab:b1:33:56:b2:3b:92:01:9f:3b:f7:
                    f9:93:76:76:46:f1:51:11:c2:ae:c1:ef:e2:07:e8:
                    8f:37:ae:e3:f6:7c:08:9c:04:8f:d2:06:0a:58:af:
                    94:d2:1d:7e:2d:82:b9:86:59:9c:55:37:6a:cc:7b:
                    6d:be:61:26:11:3e:55:54:02:e6:73:e0:27:2c:bc:
                    9d:59:5f:8a:f7:38:c0:ab:51:38:fe:18:08:ca:1f:
                    bf:b9:61:a7:1b:9d:2c:bf:fd:08:87:e8:cf:23:bb:
                    8d:c5:09:8d:ee:c0:b8:cf:f2:cf:4b:3d:39:d2:3e:
                    5c:f5:1e:6f:ae:31:0b:d0:1d:2e:ef:fc:77:8a:3c:
                    b3:4d:b8:f3:ef:a7:3d:54:9d:70:52:a4:da:55:cf:
                    f8:54:0a:44:71:e6:d5:2f:d9:dd:b4:9c:44:b0:42:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:AB:21:87:E0:63:95:69:F4:13:63:29:C3:82:BB:1B:81:E8:7F
            X509v3 Authority Key Identifier:
                keyid:03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/9cd5985aad0c385883ad8163504df0dd28cf9af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:17:93:ac:1b:7e:2b:db:6d:00:42:52:80:70:a4:30:ca:02:
         9f:0c:86:2c:45:7b:68:f6:f8:16:11:9e:55:c3:db:c3:c6:f7:
         bb:46:65:8e:71:ce:ee:e7:ab:0d:ea:af:d3:b5:f2:91:7a:d1:
         4e:8b:fd:ba:8f:d7:90:9d:35:e2:28:4b:7d:f9:e2:48:bd:b2:
         ca:a8:7d:21:a2:74:66:e3:69:8e:d3:36:48:d1:a3:66:8a:69:
         f7:82:8c:01:49:a9:7f:16:51:8e:ae:0f:e0:0b:89:84:8d:5f:
         99:3c:79:cf:88:40:64:5b:56:bd:d0:40:82:23:54:13:55:88:
         89:b3:f8:8f:d7:c9:50:36:64:a5:54:9f:37:8c:df:73:36:6f:
         af:42:1a:2c:de:fb:e9:39:e8:e2:8e:cc:aa:1d:4a:bc:dc:4b:
         3d:02:1c:bd:fe:95:c2:51:3e:8e:5c:7d:51:1e:ee:da:b9:68:
         c4:04:6d:3e:a0:64:eb:48:7a:e0:9c:df:33:ef:22:c7:2e:a7:
         84:f7:aa:b6:fa:d8:94:26:10:42:e6:66:11:2a:f8:c5:69:56:
         6b:39:17:07:89:e4:57:a1:8f:4d:0d:f7:df:72:26:83:98:e8:
         c3:ec:ce:35:d9:4a:b5:7c:b3:44:1e:59:62:ac:92:f1:ef:2b:
         7d:71:f9:23
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDEnyTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
MmExZDUwNDJmOGNkMmE3NWNmYzM3OWZjOTdhNjFmOTExZGY0YjYwHhcNMjExMDE1
MDMwMDAwWhcNMjMxMDE1MDMwMDAwWjAzMTEwLwYDVQQDEyg5Y2Q1OTg1YWFkMGMz
ODU4ODNhZDgxNjM1MDRkZjBkZDI4Y2Y5YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArrD3Z5Pl4ot1xb/ftaee62muVlFxuz86FNUXLA7MYaj4Sjwc
JhaEg2pH+dUj4SCY3pzzoy4BmTB1AfOa1ZwUtpt4WdZlq+XdkUIB6E2Xfw3SpGez
WjBdfT4E8KrRq7EzVrI7kgGfO/f5k3Z2RvFREcKuwe/iB+iPN67j9nwInASP0gYK
WK+U0h1+LYK5hlmcVTdqzHttvmEmET5VVALmc+AnLLydWV+K9zjAq1E4/hgIyh+/
uWGnG50sv/0Ih+jPI7uNxQmN7sC4z/LPSz050j5c9R5vrjEL0B0u7/x3ijyzTbjz
76c9VJ1wUqTaVc/4VApEcebVL9ndtJxEsEIttQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGc2qyGH4GOVafQTYynDgrsbgeh/MB8GA1UdIwQYMBaAFAODb2LNhEiQdZzd
rvT/pzPPWrYpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmMyYTFk
NTA0MmY4Y2QyYTc1Y2ZjMzc5ZmM5N2E2MWY5MTFkZjRiNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTM3NzI0ZWQtOTZlMC00ZjFlLWIwZjAtYzlkZTBl
ZmEwZGNkLzljZDU5ODVhYWQwYzM4NTg4M2FkODE2MzUwNGRmMGRkMjhjZjlhZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85Mzc3MjRlZC05NmUwLTRmMWUtYjBmMC1jOWRl
MGVmYTBkY2QvYmMyYTFkNTA0MmY4Y2QyYTc1Y2ZjMzc5ZmM5N2E2MWY5MTFkZjRi
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgABRAAADANBgkqhkiG9w0BAQsFAAOCAQEABheTrBt+K9tt
AEJSgHCkMMoCnwyGLEV7aPb4FhGeVcPbw8b3u0ZljnHO7uerDeqv07XykXrRTov9
uo/XkJ014ihLffniSL2yyqh9IaJ0ZuNpjtM2SNGjZopp94KMAUmpfxZRjq4P4AuJ
hI1fmTx5z4hAZFtWvdBAgiNUE1WIibP4j9fJUDZkpVSfN4zfczZvr0IaLN776Tno
4o7Mqh1KvNxLPQIcvf6VwlE+jlx9UR7u2rloxARtPqBk60h64JzfM+8ixy6nhPeq
tvrYlCYQQuZmESr4xWlWazkXB4nkV6GPTQ3333Img5jow+zONdlKtXyzRB5ZYqyS
8e8rfXH5Iw==
-----END CERTIFICATE-----