Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/df937c1211692e4a1f5c3008ddc25d726eacc08c.roa
File:                     df937c1211692e4a1f5c3008ddc25d726eacc08c.roa (raw, json)
Hash identifier:          SrunlpPpS7wVHZk9GyJpOHbxQ1ub/e4ZjCV2qSgz2os=
Subject key identifier:   87:D3:96:EA:BE:37:20:7E:C4:03:28:75:3A:FF:60:33:28:A8:2C:8C
Certificate issuer:       /CN=21946617726999f473e397ce5a1cff1c13cd4402
Certificate serial:       045B5E
Authority key identifier: FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/df937c1211692e4a1f5c3008ddc25d726eacc08c.roa
Signing time:             Tue 02 Aug 2022 17:14:14 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     271929
IP address blocks:        2803:9a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285534 (0x45b5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21946617726999f473e397ce5a1cff1c13cd4402
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=df937c1211692e4a1f5c3008ddc25d726eacc08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:44:37:ac:e6:d4:58:56:d5:99:a0:20:ea:
                    6f:53:e5:10:c6:06:25:f9:a5:5d:d4:09:84:82:52:
                    32:cd:cb:9c:09:ea:f5:87:16:3c:3b:82:4a:7e:13:
                    76:58:06:c1:04:d8:e2:38:40:20:6a:f4:ae:21:08:
                    9a:54:b8:05:02:7e:f4:67:cf:af:b7:fc:52:34:47:
                    3b:8e:30:7e:5f:f9:de:79:95:b4:8e:66:83:45:6a:
                    1f:43:9a:19:25:c3:56:d1:1a:e8:2e:96:a3:de:5c:
                    33:51:53:04:78:d6:dc:37:2d:63:3e:87:9f:b3:3b:
                    b3:ad:1d:94:c1:5e:c6:b5:24:c2:4d:b0:9a:12:be:
                    b9:e8:89:c3:7a:f3:54:12:c4:58:00:e4:7b:cc:de:
                    08:2f:f0:2e:a2:64:c9:31:aa:83:37:70:ff:1e:7a:
                    d2:b5:98:4d:9a:c0:b1:05:46:95:3c:9d:59:d6:3c:
                    9e:5f:00:0b:8b:23:29:78:49:3c:24:d9:19:06:e3:
                    21:fa:8b:24:a9:9b:25:e5:41:5a:8d:1f:ba:1c:df:
                    ce:66:56:93:a9:a8:9d:c3:dc:c7:bf:83:18:61:8a:
                    40:f5:e1:a3:21:e3:98:a3:b0:8d:4d:0e:6d:24:50:
                    75:0b:d1:7c:b2:3d:61:4b:cc:4c:57:e5:44:57:5f:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:96:EA:BE:37:20:7E:C4:03:28:75:3A:FF:60:33:28:A8:2C:8C
            X509v3 Authority Key Identifier:
                keyid:FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/df937c1211692e4a1f5c3008ddc25d726eacc08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/21946617726999f473e397ce5a1cff1c13cd4402.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:d0:0b:c9:6d:26:3f:e4:fe:0f:18:1b:d2:e3:a2:75:9c:
         5b:16:f2:a1:62:20:05:da:21:06:d1:8c:a6:2d:9b:e6:d7:34:
         23:60:b1:ef:74:dd:d7:a4:84:49:5a:dd:9c:a0:4d:39:bd:0a:
         24:82:13:bc:3e:7e:5c:00:63:60:67:df:03:91:c0:41:c4:2b:
         83:55:fb:35:8a:dd:b4:65:88:cb:34:69:14:00:df:0e:60:d6:
         e5:a5:42:c3:b9:19:3f:d2:17:b3:30:62:2e:ac:1f:22:d1:5e:
         2f:24:95:52:47:45:14:03:ee:69:2c:b9:f0:90:0c:2e:31:ec:
         9c:f6:32:28:5d:e2:9e:30:41:c6:d3:04:a9:45:fd:8c:94:23:
         ed:d9:59:7b:24:d4:08:e9:61:63:81:86:93:40:83:36:5b:eb:
         53:2d:e5:f6:dc:4e:85:ee:ef:76:70:60:ab:f2:d9:e8:40:ba:
         f9:dd:88:e0:ff:b0:77:8b:5b:19:5d:e4:b0:09:2a:ed:c3:71:
         2d:f6:ad:21:cd:1c:0c:b8:37:70:84:fa:dd:66:20:cc:13:91:
         23:4b:47:1a:80:40:5d:6d:91:4a:a9:df:fd:0a:0d:0e:97:e5:
         1f:b4:20:0d:f4:fa:08:a6:e8:c0:3e:c9:4f:c2:47:b9:52:01:
         d3:f4:ff:06
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBFteMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
OTQ2NjE3NzI2OTk5ZjQ3M2UzOTdjZTVhMWNmZjFjMTNjZDQ0MDIwHhcNMjIwODAy
MDMwMDAwWhcNMjQwODAyMDMwMDAwWjAzMTEwLwYDVQQDEyhkZjkzN2MxMjExNjky
ZTRhMWY1YzMwMDhkZGMyNWQ3MjZlYWNjMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkhlEN6zm1FhW1ZmgIOpvU+UQxgYl+aVd1AmEglIyzcucCer1
hxY8O4JKfhN2WAbBBNjiOEAgavSuIQiaVLgFAn70Z8+vt/xSNEc7jjB+X/neeZW0
jmaDRWofQ5oZJcNW0RroLpaj3lwzUVMEeNbcNy1jPoefszuzrR2UwV7GtSTCTbCa
Er656InDevNUEsRYAOR7zN4IL/AuomTJMaqDN3D/HnrStZhNmsCxBUaVPJ1Z1jye
XwALiyMpeEk8JNkZBuMh+oskqZsl5UFajR+6HN/OZlaTqaidw9zHv4MYYYpA9eGj
IeOYo7CNTQ5tJFB1C9F8sj1hS8xMV+VEV18czwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIfTluq+NyB+xAModTr/YDMoqCyMMB8GA1UdIwQYMBaAFP5w5WGJKfWCqXPu
6VUkfH+meTfJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjE5NDY2
MTc3MjY5OTlmNDczZTM5N2NlNWExY2ZmMWMxM2NkNDQwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2MyOWI5NDQtYmQ1NS00MTEwLWFmMGQtZGVjYzQ2
MTMwOWRkL2RmOTM3YzEyMTE2OTJlNGExZjVjMzAwOGRkYzI1ZDcyNmVhY2MwOGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzI5Yjk0NC1iZDU1LTQxMTAtYWYwZC1kZWNj
NDYxMzA5ZGQvMjE5NDY2MTc3MjY5OTlmNDczZTM5N2NlNWExY2ZmMWMxM2NkNDQw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDmhAwDQYJKoZIhvcNAQELBQADggEBAHT70AvJbSY/5P4P
GBvS46J1nFsW8qFiIAXaIQbRjKYtm+bXNCNgse903dekhEla3ZygTTm9CiSCE7w+
flwAY2Bn3wORwEHEK4NV+zWK3bRliMs0aRQA3w5g1uWlQsO5GT/SF7MwYi6sHyLR
Xi8klVJHRRQD7mksufCQDC4x7Jz2Mihd4p4wQcbTBKlF/YyUI+3ZWXsk1AjpYWOB
hpNAgzZb61Mt5fbcToXu73ZwYKvy2ehAuvndiOD/sHeLWxld5LAJKu3DcS32rSHN
HAy4N3CE+t1mIMwTkSNLRxqAQF1tkUqp3/0KDQ6X5R+0IA30+gim6MA+yU/CR7lS
AdP0/wY=
-----END CERTIFICATE-----