Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/8ce25609821d9c3a07bfdcce108ca68ad62d3db2.roa
File:                     8ce25609821d9c3a07bfdcce108ca68ad62d3db2.roa (raw, json)
Hash identifier:          0Ab1YrXgi8e8zX6Kcj4x9yekyRXxFkmvCjmKiuCOzjo=
Subject key identifier:   26:71:29:5C:DC:7F:6B:D8:D3:21:68:FE:C5:DD:A7:42:01:75:1F:4E
Certificate issuer:       /CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
Certificate serial:       13EB08
Authority key identifier: 29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/8ce25609821d9c3a07bfdcce108ca68ad62d3db2.roa
Signing time:             Fri 11 Feb 2022 16:10:00 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Sun 11 Feb 2024 03:00:00 +0000
asID:                     266894
IP address blocks:        2803:56a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305352 (0x13eb08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889d3b2e14dc61b15dd5e3645ba57c11455f9876
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 11 03:00:00 2024 GMT
        Subject: CN=8ce25609821d9c3a07bfdcce108ca68ad62d3db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:72:d6:19:34:84:29:59:e9:db:1b:e4:a3:
                    1b:55:92:d6:a4:e3:ec:bd:28:ac:dd:c6:c4:6a:a6:
                    da:87:1a:25:a0:7d:bd:e2:7f:61:79:3d:ec:99:cc:
                    a7:d1:a5:ba:70:e0:e7:d9:f1:76:7c:e4:99:8e:08:
                    8c:53:30:dd:a2:74:ff:a2:43:6c:58:c6:d4:fa:a3:
                    06:60:0d:2a:15:40:92:65:4a:58:35:e4:fe:98:59:
                    c9:1a:71:42:2c:14:17:31:2f:ae:4e:b9:b8:46:0f:
                    11:4c:6e:17:55:1f:50:f6:5e:2a:04:b5:1d:b5:a6:
                    7d:dd:fb:ce:33:86:65:9b:5c:b6:2b:ce:86:fc:ba:
                    19:51:dc:1c:98:87:b4:26:a0:ca:e6:2d:f1:5a:10:
                    4b:f4:2c:be:75:ae:cc:ed:bc:25:5d:7e:1d:32:ef:
                    9a:ee:43:3c:d5:87:35:d7:35:e4:f8:d4:f9:3d:f7:
                    ff:91:d2:af:3a:03:8c:28:3b:35:1c:9f:ac:60:b5:
                    82:92:e7:b2:ae:69:c6:39:9e:cc:36:ad:ae:7c:6c:
                    c3:41:cc:85:c1:81:b4:29:f3:35:01:7a:4d:54:ce:
                    dd:0e:ff:c4:af:77:5d:ff:4f:bc:12:05:11:ba:93:
                    64:06:98:37:f5:34:2c:50:c6:d3:cb:ed:4e:cd:88:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:71:29:5C:DC:7F:6B:D8:D3:21:68:FE:C5:DD:A7:42:01:75:1F:4E
            X509v3 Authority Key Identifier:
                keyid:29:43:B9:BF:5C:42:03:04:DA:BE:69:E5:0A:E6:C9:01:E2:5F:E9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/889d3b2e14dc61b15dd5e3645ba57c11455f9876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/8ce25609821d9c3a07bfdcce108ca68ad62d3db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21bfb02d-ed2f-4982-832f-1af8d87ea7b0/889d3b2e14dc61b15dd5e3645ba57c11455f9876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:51:a8:a4:aa:1d:c0:a9:eb:47:1e:88:ae:54:cd:23:7d:f1:
         8f:24:1b:f0:e7:37:f1:26:df:3e:81:32:ff:cd:cf:67:be:d2:
         74:f7:c1:56:8e:f6:8c:d5:da:11:2f:12:b5:ad:3c:72:04:84:
         80:d7:f0:42:34:96:90:2a:5e:0b:e1:b7:6f:c6:db:51:1c:e1:
         08:90:a7:0e:e5:1d:3e:4b:bd:e2:67:8e:ac:c2:97:ef:8d:fb:
         a3:05:7e:d0:2e:68:ee:40:13:3c:1f:11:ff:ea:9c:30:7e:c9:
         25:2a:93:a4:8c:cc:8f:45:2a:e1:5c:5e:46:cf:fb:02:b4:dd:
         9e:6f:b8:67:f2:b7:aa:e2:08:04:6f:b8:d3:3c:37:4c:7f:f4:
         93:15:29:e4:43:f6:fa:17:15:29:47:d7:0b:84:18:11:13:fd:
         ad:19:ba:f0:31:de:b0:4c:1f:8c:ce:79:c7:ee:79:e9:91:47:
         34:9a:a6:51:f9:f2:62:a2:82:80:07:a8:87:74:06:49:ff:c3:
         3c:b6:e2:90:fc:77:38:b5:fc:45:a7:24:5e:e1:a9:bb:3a:5e:
         1a:c8:db:20:12:ed:17:fe:e4:71:07:66:01:22:da:66:2d:79:
         43:9b:8e:80:01:0a:f0:a0:a7:37:43:15:7d:8d:49:f5:94:0b:
         b6:0e:ad:4c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDE+sIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
OWQzYjJlMTRkYzYxYjE1ZGQ1ZTM2NDViYTU3YzExNDU1Zjk4NzYwHhcNMjIwMjEx
MDMwMDAwWhcNMjQwMjExMDMwMDAwWjAzMTEwLwYDVQQDEyg4Y2UyNTYwOTgyMWQ5
YzNhMDdiZmRjY2UxMDhjYTY4YWQ2MmQzZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm4By1hk0hClZ6dsb5KMbVZLWpOPsvSis3cbEaqbahxoloH29
4n9heT3smcyn0aW6cODn2fF2fOSZjgiMUzDdonT/okNsWMbU+qMGYA0qFUCSZUpY
NeT+mFnJGnFCLBQXMS+uTrm4Rg8RTG4XVR9Q9l4qBLUdtaZ93fvOM4Zlm1y2K86G
/LoZUdwcmIe0JqDK5i3xWhBL9Cy+da7M7bwlXX4dMu+a7kM81Yc11zXk+NT5Pff/
kdKvOgOMKDs1HJ+sYLWCkueyrmnGOZ7MNq2ufGzDQcyFwYG0KfM1AXpNVM7dDv/E
r3dd/0+8EgURupNkBpg39TQsUMbTy+1OzYgqBwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCZxKVzcf2vY0yFo/sXdp0IBdR9OMB8GA1UdIwQYMBaAFClDub9cQgME2r5p
5QrmyQHiX+msMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODg5ZDNi
MmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjFiZmIwMmQtZWQyZi00OTgyLTgzMmYtMWFmOGQ4
N2VhN2IwLzhjZTI1NjA5ODIxZDljM2EwN2JmZGNjZTEwOGNhNjhhZDYyZDNkYjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMWJmYjAyZC1lZDJmLTQ5ODItODMyZi0xYWY4
ZDg3ZWE3YjAvODg5ZDNiMmUxNGRjNjFiMTVkZDVlMzY0NWJhNTdjMTE0NTVmOTg3
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDVqAwDQYJKoZIhvcNAQELBQADggEBAARRqKSqHcCp60ce
iK5UzSN98Y8kG/DnN/Em3z6BMv/Nz2e+0nT3wVaO9ozV2hEvErWtPHIEhIDX8EI0
lpAqXgvht2/G21Ec4QiQpw7lHT5LveJnjqzCl++N+6MFftAuaO5AEzwfEf/qnDB+
ySUqk6SMzI9FKuFcXkbP+wK03Z5vuGfyt6riCARvuNM8N0x/9JMVKeRD9voXFSlH
1wuEGBET/a0ZuvAx3rBMH4zOecfueemRRzSaplH58mKigoAHqId0Bkn/wzy24pD8
dzi1/EWnJF7hqbs6XhrI2yAS7Rf+5HEHZgEi2mYteUObjoABCvCgpzdDFX2NSfWU
C7YOrUw=
-----END CERTIFICATE-----