Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3bdd7956781fc8010ea2764ef3f65e6638b0014f.roa
File:                     3bdd7956781fc8010ea2764ef3f65e6638b0014f.roa (raw, json)
Hash identifier:          I9272mQ46e2rgPF/CBeza+jHTo6Dx2/jV3vO4hltUpI=
Subject key identifier:   F6:E4:AD:7D:07:08:DD:33:0D:6B:2D:26:95:12:B4:DC:BC:00:2E:86
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       100873
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3bdd7956781fc8010ea2764ef3f65e6638b0014f.roa
Signing time:             Tue 15 Jun 2021 14:16:03 +0000
ROA not before:           Tue 15 Jun 2021 03:00:00 +0000
ROA not after:            Thu 15 Jun 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        2800:480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050739 (0x100873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jun 15 03:00:00 2021 GMT
            Not After : Jun 15 03:00:00 2023 GMT
        Subject: CN=3bdd7956781fc8010ea2764ef3f65e6638b0014f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:7f:b8:09:0a:60:da:e1:ee:96:72:2e:51:
                    94:3e:81:50:8e:58:48:78:68:7d:d1:ac:8c:8a:64:
                    6d:87:38:d4:0c:25:ef:fd:fc:3a:c1:2a:73:e9:d5:
                    dc:21:f1:d5:bb:ab:5f:95:90:2c:30:0d:cf:fb:74:
                    50:66:31:4e:42:a8:7e:22:54:71:15:70:64:34:02:
                    cb:11:32:1c:7d:06:86:55:d6:15:f1:3b:e1:c3:07:
                    33:0f:ff:4a:43:92:4e:7f:24:93:7a:ca:42:b1:28:
                    77:fd:ee:ed:8f:7e:fc:ed:0f:fe:cf:72:a7:1a:a8:
                    8d:e3:1a:cc:cc:9e:00:35:48:84:2a:7d:44:3c:d6:
                    ff:3d:62:f5:4f:e2:e7:78:c4:2f:ff:6d:a2:27:bc:
                    d0:3c:ad:31:47:40:b7:07:88:d4:2e:3d:a6:a5:6e:
                    b9:c2:6c:89:d9:52:b9:f8:7e:66:3a:d8:c4:7d:fb:
                    bf:34:e3:0a:88:d7:40:8b:fa:a1:9b:c2:d2:4f:f0:
                    8c:a6:9b:1b:06:18:c7:c1:d8:3b:9f:f4:60:f8:65:
                    4c:f2:ec:5a:66:e5:2e:a3:3f:fb:90:ae:82:a9:18:
                    81:58:86:93:5f:08:9a:86:a9:ab:08:dc:2b:52:15:
                    e8:78:82:a0:8d:f9:53:5b:e1:90:88:8b:dd:65:ad:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:AD:7D:07:08:DD:33:0D:6B:2D:26:95:12:B4:DC:BC:00:2E:86
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3bdd7956781fc8010ea2764ef3f65e6638b0014f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:d6:de:41:6b:74:7e:1a:ba:4a:e1:bd:7c:58:26:74:a1:
         09:e7:56:65:88:e3:2a:43:71:90:e8:6d:ba:30:29:ca:d4:5e:
         4b:93:23:d7:35:31:10:60:b1:2a:7a:37:21:51:22:5a:02:34:
         74:4d:d4:ee:3e:9b:0c:f8:87:3b:5f:ec:11:a1:be:00:5f:05:
         c7:aa:83:bf:d5:c6:6e:52:d6:09:40:14:3f:dc:af:ae:35:23:
         e9:54:32:c4:f1:ca:d8:50:35:6e:3a:8c:27:0d:1c:f3:0c:cd:
         bf:65:7f:89:3f:4d:70:07:de:f1:27:cf:70:a9:98:31:5b:42:
         c6:23:f0:cd:2c:3f:fe:72:72:74:2a:23:ce:47:c7:c4:c5:02:
         25:ab:57:2e:2c:88:73:65:b3:0d:72:34:19:a1:fc:97:a2:14:
         69:8d:68:e8:d1:ae:59:49:65:b4:75:04:bf:b8:e5:96:ed:96:
         5d:e5:73:58:35:94:6e:c6:1c:9b:f1:f4:ad:33:08:af:2b:1a:
         ec:bf:f9:ef:1a:7f:84:63:49:45:ba:07:40:1f:9d:de:3d:7f:
         19:81:9d:3a:f7:5e:85:f7:3a:30:c0:80:5a:55:16:ff:8e:49:
         2f:9b:8b:36:a8:c5:b7:7d:90:a4:67:b9:5b:c2:80:c9:c7:ef:
         43:30:6b:13
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEAhzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjEwNjE1
MDMwMDAwWhcNMjMwNjE1MDMwMDAwWjAzMTEwLwYDVQQDEygzYmRkNzk1Njc4MWZj
ODAxMGVhMjc2NGVmM2Y2NWU2NjM4YjAwMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhDV/uAkKYNrh7pZyLlGUPoFQjlhIeGh90ayMimRthzjUDCXv
/fw6wSpz6dXcIfHVu6tflZAsMA3P+3RQZjFOQqh+IlRxFXBkNALLETIcfQaGVdYV
8TvhwwczD/9KQ5JOfySTespCsSh3/e7tj3787Q/+z3KnGqiN4xrMzJ4ANUiEKn1E
PNb/PWL1T+LneMQv/22iJ7zQPK0xR0C3B4jULj2mpW65wmyJ2VK5+H5mOtjEffu/
NOMKiNdAi/qhm8LST/CMppsbBhjHwdg7n/Rg+GVM8uxaZuUuoz/7kK6CqRiBWIaT
XwiahqmrCNwrUhXoeIKgjflTW+GQiIvdZa0lGQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPbkrX0HCN0zDWstJpUStNy8AC6GMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzNiZGQ3OTU2NzgxZmM4MDEwZWEyNzY0ZWYzZjY1ZTY2MzhiMDAxNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABIAwDQYJKoZIhvcNAQELBQADggEBAAw81t5Ba3R+GrpK
4b18WCZ0oQnnVmWI4ypDcZDobbowKcrUXkuTI9c1MRBgsSp6NyFRIloCNHRN1O4+
mwz4hztf7BGhvgBfBceqg7/Vxm5S1glAFD/cr641I+lUMsTxythQNW46jCcNHPMM
zb9lf4k/TXAH3vEnz3CpmDFbQsYj8M0sP/5ycnQqI85Hx8TFAiWrVy4siHNlsw1y
NBmh/JeiFGmNaOjRrllJZbR1BL+45Zbtll3lc1g1lG7GHJvx9K0zCK8rGuy/+e8a
f4RjSUW6B0Afnd49fxmBnTr3XoX3OjDAgFpVFv+OSS+bizaoxbd9kKRnuVvCgMnH
70MwaxM=
-----END CERTIFICATE-----