Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/acd9cd123a78d5cb4f27f9b0f7b1d8d12cf1f65a.roa
File:                     acd9cd123a78d5cb4f27f9b0f7b1d8d12cf1f65a.roa (raw, json)
Hash identifier:          acvOdqHoCh0h8Y7AOtb6ycvWBuSLpTF1Spg+26cGguU=
Subject key identifier:   97:C4:CB:34:2E:3A:C1:AC:1B:5D:41:E3:F9:9D:0D:3A:E3:03:47:C4
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       1ABC04
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/acd9cd123a78d5cb4f27f9b0f7b1d8d12cf1f65a.roa
Signing time:             Wed 28 Sep 2022 16:57:35 +0000
ROA not before:           Wed 28 Sep 2022 16:56:31 +0000
ROA not after:            Sat 28 Sep 2024 16:56:31 +0000
asID:                     64120
IP address blocks:        2803:f080:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752068 (0x1abc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Sep 28 16:56:31 2022 GMT
            Not After : Sep 28 16:56:31 2024 GMT
        Subject: CN=acd9cd123a78d5cb4f27f9b0f7b1d8d12cf1f65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:b5:54:61:29:8c:48:d5:a9:b4:9d:1f:60:
                    1c:3f:93:74:87:b5:9b:44:b2:a3:6e:31:62:b5:6b:
                    39:13:d6:b2:63:6f:90:0e:1f:9f:e1:80:72:fb:88:
                    86:7a:1a:0f:d8:7e:af:b0:75:2a:8e:54:ba:db:1b:
                    bc:cf:db:b1:7a:4a:ba:f1:32:e9:a0:ee:b7:f4:b0:
                    49:66:e2:f9:92:95:0f:af:a8:8e:bc:16:b4:0d:47:
                    4b:fc:59:af:14:c1:92:eb:de:65:f9:23:73:93:14:
                    1c:20:99:3f:b5:d3:a8:73:9b:dd:58:08:81:ab:05:
                    45:69:6a:ed:88:b8:f6:49:13:ce:cc:06:94:5c:c3:
                    76:7d:47:d6:8c:c9:91:6c:c4:42:ae:d0:14:76:aa:
                    a2:e8:2b:63:1b:0b:de:ac:43:e1:28:c3:a8:2d:1c:
                    46:fa:24:42:2c:1f:4d:75:c2:4b:11:ec:7a:a2:90:
                    ef:1d:4b:e2:66:5f:15:22:1a:0e:99:63:bc:c4:60:
                    96:68:47:d2:2a:dc:0e:04:1f:7d:26:ed:85:d7:7d:
                    64:9c:05:b4:d1:36:58:3c:ed:43:8d:4e:77:cd:fb:
                    0f:fa:d5:b7:cb:fc:91:13:9a:d3:de:03:ce:27:86:
                    91:06:1e:c0:98:51:8d:70:a7:81:ef:de:21:17:c5:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:CB:34:2E:3A:C1:AC:1B:5D:41:E3:F9:9D:0D:3A:E3:03:47:C4
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/acd9cd123a78d5cb4f27f9b0f7b1d8d12cf1f65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:15:bd:99:ca:7f:be:63:12:37:09:41:dc:72:e2:cc:5c:
         1c:ea:e7:02:72:3d:9a:29:bc:89:08:0a:80:7c:a8:a6:17:51:
         52:a2:bf:d3:f1:d1:ee:66:de:12:91:29:3e:fb:17:8a:03:cb:
         29:0d:68:a2:2d:e8:26:ea:b7:53:8b:28:ac:c2:40:1c:a5:f3:
         76:d8:fe:3a:e6:11:30:57:13:dc:64:55:74:b7:14:30:3b:81:
         f6:ff:a8:f2:8a:50:be:14:ca:54:c5:1c:bd:8d:82:25:1e:8e:
         70:66:59:7a:f5:f6:92:ba:e9:9a:6f:57:57:3d:d1:96:f4:9f:
         1c:06:eb:8b:8d:90:38:03:b6:14:75:8d:28:54:ce:9a:87:46:
         9c:b6:71:13:52:1a:11:5e:51:d4:f2:1a:58:ea:fe:b0:47:53:
         9f:b1:10:7b:61:16:57:01:16:a3:fe:58:59:86:0d:c2:00:fa:
         05:38:78:db:9b:c1:26:8f:6a:d3:e1:c2:5e:c3:94:dd:95:e4:
         72:8b:ef:e3:cb:9a:56:84:3f:13:dc:d2:47:c2:0c:e5:bd:66:
         5b:bf:c6:fd:71:ee:7c:64:51:e8:6b:a3:cb:20:82:ef:ee:48:
         3b:85:b8:8b:0c:01:85:e1:3f:e2:46:47:4f:cb:56:3f:21:72:
         cd:e8:06:6b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDGrwEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
ZWZiNDk0NDk0ZDI1YmMxOWZiMTY1MzVlYTc0MmFkYzdhNzkyYjgwHhcNMjIwOTI4
MTY1NjMxWhcNMjQwOTI4MTY1NjMxWjAzMTEwLwYDVQQDEyhhY2Q5Y2QxMjNhNzhk
NWNiNGYyN2Y5YjBmN2IxZDhkMTJjZjFmNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlcq1VGEpjEjVqbSdH2AcP5N0h7WbRLKjbjFitWs5E9ayY2+Q
Dh+f4YBy+4iGehoP2H6vsHUqjlS62xu8z9uxekq68TLpoO639LBJZuL5kpUPr6iO
vBa0DUdL/FmvFMGS695l+SNzkxQcIJk/tdOoc5vdWAiBqwVFaWrtiLj2SRPOzAaU
XMN2fUfWjMmRbMRCrtAUdqqi6CtjGwverEPhKMOoLRxG+iRCLB9NdcJLEex6opDv
HUviZl8VIhoOmWO8xGCWaEfSKtwOBB99Ju2F131knAW00TZYPO1DjU53zfsP+tW3
y/yRE5rT3gPOJ4aRBh7AmFGNcKeB794hF8WaXQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFJfEyzQuOsGsG11B4/mdDTrjA0fEMB8GA1UdIwQYMBaAFFR09pEaOi4wvYXK
O6DZ3v5LnbptMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2RlZmI0
OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmNlOTAxNjctYWIwOS00ZGQyLWIzZTUtZDY4YmU1
MDdhN2E0L2FjZDljZDEyM2E3OGQ1Y2I0ZjI3ZjliMGY3YjFkOGQxMmNmMWY2NWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Y2U5MDE2Ny1hYjA5LTRkZDItYjNlNS1kNjhi
ZTUwN2E3YTQvY2RlZmI0OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBSgD8IDgMA0GCSqGSIb3DQEBCwUAA4IBAQBZrhW9mcp/vmMS
NwlB3HLizFwc6ucCcj2aKbyJCAqAfKimF1FSor/T8dHuZt4SkSk++xeKA8spDWii
Legm6rdTiyiswkAcpfN22P465hEwVxPcZFV0txQwO4H2/6jyilC+FMpUxRy9jYIl
Ho5wZll69faSuumab1dXPdGW9J8cBuuLjZA4A7YUdY0oVM6ah0actnETUhoRXlHU
8hpY6v6wR1OfsRB7YRZXARaj/lhZhg3CAPoFOHjbm8Emj2rT4cJew5TdleRyi+/j
y5pWhD8T3NJHwgzlvWZbv8b9ce58ZFHoa6PLIILv7kg7hbiLDAGF4T/iRkdPy1Y/
IXLN6AZr
-----END CERTIFICATE-----