Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/7df873d37f75396984f74a45c680020d97bf4f37.roa
File:                     7df873d37f75396984f74a45c680020d97bf4f37.roa (raw, json)
Hash identifier:          Wj4SfdDrX5oZxSbMLa8Dy9aD+zrnRSNTLTgUCtDDosk=
Subject key identifier:   3B:F6:89:E3:DF:73:4A:E4:C3:7D:C2:47:33:29:46:56:1B:3A:75:25
Certificate issuer:       /CN=5c657c326adeece70c1e8bb9038ff79bc5e67ae6
Certificate serial:       07496A
Authority key identifier: BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/7df873d37f75396984f74a45c680020d97bf4f37.roa
Signing time:             Fri 10 Dec 2021 13:53:35 +0000
ROA not before:           Fri 10 Dec 2021 03:00:00 +0000
ROA not after:            Sun 10 Dec 2023 03:00:00 +0000
asID:                     271822
IP address blocks:        2803:810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477546 (0x7496a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c657c326adeece70c1e8bb9038ff79bc5e67ae6
        Validity
            Not Before: Dec 10 03:00:00 2021 GMT
            Not After : Dec 10 03:00:00 2023 GMT
        Subject: CN=7df873d37f75396984f74a45c680020d97bf4f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:c7:b0:70:a0:d4:19:c6:98:57:fa:0a:ff:
                    91:f0:8d:d0:c7:94:f6:5d:08:67:8d:eb:92:56:5d:
                    50:c3:9c:2b:73:21:c5:b2:8d:61:8c:b7:45:37:b2:
                    e3:9e:de:b4:f4:9b:d6:22:f8:bf:ff:50:74:3a:f1:
                    a2:08:ae:10:9c:0d:c6:73:f2:c0:9e:7f:2f:6e:b2:
                    57:47:a7:4c:0d:88:44:8c:65:a1:9b:56:85:b5:1c:
                    24:08:2c:7b:74:fb:b1:f8:e2:88:d2:72:81:27:0d:
                    56:b2:d8:da:25:4e:28:a9:bf:a0:e1:5c:74:a3:33:
                    ff:92:b7:ca:d7:19:d4:df:08:55:fd:f5:31:cf:af:
                    32:1d:2d:86:ff:76:6e:f7:39:8a:04:d5:61:75:39:
                    17:84:15:b8:1c:d6:e5:af:8a:19:38:4d:d1:4a:c1:
                    03:53:a3:ab:bd:d5:08:85:33:1e:42:68:23:4c:60:
                    2d:b0:47:22:94:e8:d6:82:36:4a:1f:6e:85:7e:3e:
                    69:4f:21:66:2f:2c:96:c2:a4:2b:64:7a:26:ef:d5:
                    61:a3:be:a5:ea:a7:ec:64:33:73:4b:d0:1f:d0:1a:
                    d1:a5:75:a1:c6:57:da:50:bb:24:33:60:89:0d:cd:
                    c3:b7:33:fe:15:04:60:7d:b5:2f:47:31:90:fe:91:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F6:89:E3:DF:73:4A:E4:C3:7D:C2:47:33:29:46:56:1B:3A:75:25
            X509v3 Authority Key Identifier:
                keyid:BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/7df873d37f75396984f74a45c680020d97bf4f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:810::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:5c:07:44:ae:29:b7:a9:c1:e1:c6:e8:54:30:d5:f9:fa:dc:
         65:50:a5:27:c3:5d:9f:c7:bc:df:fc:a1:12:87:f6:cb:a5:68:
         40:9e:8a:19:f1:3b:ef:69:5a:07:2e:00:09:39:b3:20:cb:2c:
         db:62:28:36:fb:51:30:71:77:0f:2a:a3:27:7c:00:cc:26:1c:
         33:a5:81:6a:96:ae:39:82:67:ad:80:44:ac:75:6d:d1:f9:87:
         a9:0d:0c:3a:cc:25:6b:c7:9f:13:49:86:8a:b2:ea:6c:cf:d4:
         18:d4:08:cb:41:11:b5:bd:dc:aa:94:33:9f:a1:3d:d1:39:65:
         7b:a3:03:21:94:22:62:40:d8:6b:9c:a4:ed:1d:3f:22:cb:bb:
         91:4c:da:cd:b2:93:f8:cd:05:c6:27:b2:ad:55:56:79:3a:04:
         16:77:c0:b7:35:6d:19:46:03:58:41:5a:e4:f3:79:7f:99:fd:
         94:21:e5:84:e7:51:c8:81:48:74:01:3f:9f:7e:8b:2e:a9:79:
         63:59:ff:6a:47:d2:c0:87:1e:13:a6:0e:b2:92:9a:6e:8b:7e:
         34:f9:e0:c7:87:c7:f0:0e:ea:0d:ec:1f:31:7c:25:54:5f:45:
         d1:1f:63:48:b9:e0:2f:95:e4:14:e8:c7:f1:c4:54:43:86:6a:
         ba:ed:c0:8f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDB0lqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
NjU3YzMyNmFkZWVjZTcwYzFlOGJiOTAzOGZmNzliYzVlNjdhZTYwHhcNMjExMjEw
MDMwMDAwWhcNMjMxMjEwMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZGY4NzNkMzdmNzUz
OTY5ODRmNzRhNDVjNjgwMDIwZDk3YmY0ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs9nHsHCg1BnGmFf6Cv+R8I3Qx5T2XQhnjeuSVl1Qw5wrcyHF
so1hjLdFN7Ljnt609JvWIvi//1B0OvGiCK4QnA3Gc/LAnn8vbrJXR6dMDYhEjGWh
m1aFtRwkCCx7dPux+OKI0nKBJw1WstjaJU4oqb+g4Vx0ozP/krfK1xnU3whV/fUx
z68yHS2G/3Zu9zmKBNVhdTkXhBW4HNblr4oZOE3RSsEDU6OrvdUIhTMeQmgjTGAt
sEcilOjWgjZKH26Ffj5pTyFmLyyWwqQrZHom79Vho76l6qfsZDNzS9Af0BrRpXWh
xlfaULskM2CJDc3DtzP+FQRgfbUvRzGQ/pFDcQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDv2iePfc0rkw33CRzMpRlYbOnUlMB8GA1UdIwQYMBaAFLqIHOkFbURjL86Y
ki359jDP2RdsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWM2NTdj
MzI2YWRlZWNlNzBjMWU4YmI5MDM4ZmY3OWJjNWU2N2FlNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWY5ODIyMjItMGVmNy00YzI5LTk1ODctZGEwNDM3
MDg5OGIxLzdkZjg3M2QzN2Y3NTM5Njk4NGY3NGE0NWM2ODAwMjBkOTdiZjRmMzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Zjk4MjIyMi0wZWY3LTRjMjktOTU4Ny1kYTA0
MzcwODk4YjEvNWM2NTdjMzI2YWRlZWNlNzBjMWU4YmI5MDM4ZmY3OWJjNWU2N2Fl
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDCBAwDQYJKoZIhvcNAQELBQADggEBAERcB0SuKbepweHG
6FQw1fn63GVQpSfDXZ/HvN/8oRKH9sulaECeihnxO+9pWgcuAAk5syDLLNtiKDb7
UTBxdw8qoyd8AMwmHDOlgWqWrjmCZ62ARKx1bdH5h6kNDDrMJWvHnxNJhoqy6mzP
1BjUCMtBEbW93KqUM5+hPdE5ZXujAyGUImJA2GucpO0dPyLLu5FM2s2yk/jNBcYn
sq1VVnk6BBZ3wLc1bRlGA1hBWuTzeX+Z/ZQh5YTnUciBSHQBP59+iy6peWNZ/2pH
0sCHHhOmDrKSmm6LfjT54MeHx/AO6g3sHzF8JVRfRdEfY0i54C+V5BTox/HEVEOG
arrtwI8=
-----END CERTIFICATE-----