Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/daac2caf375f29b653e54ad62446f425e9fe5293.roa
File:                     daac2caf375f29b653e54ad62446f425e9fe5293.roa (raw, json)
Hash identifier:          Um2HYT7mISw5SfWYtl8oq3z37W1Y32iPiHS5Ca3P/ZU=
Subject key identifier:   26:5D:52:3B:21:34:FF:5B:88:85:E2:20:E3:E1:AD:8D:1C:3C:0B:EB
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       13A025
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/daac2caf375f29b653e54ad62446f425e9fe5293.roa
Signing time:             Wed 10 Nov 2021 14:44:01 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Fri 10 Nov 2023 03:00:00 +0000
asID:                     263774
IP address blocks:        2803:440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286181 (0x13a025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2023 GMT
        Subject: CN=daac2caf375f29b653e54ad62446f425e9fe5293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:e9:1a:17:63:39:b8:34:28:db:a1:24:b0:
                    10:2a:1a:f0:94:34:11:86:e0:28:44:9b:74:55:80:
                    3d:fc:e5:cb:f9:6a:79:59:b7:de:7d:83:72:0e:02:
                    6b:d9:a5:ca:7d:74:14:65:24:c9:ab:e9:82:72:2b:
                    29:4a:b3:dc:3d:d9:31:52:25:e9:2a:4a:3c:c5:82:
                    b3:b0:02:87:ed:66:b8:b0:6a:4a:01:a6:a3:1e:a3:
                    c2:37:8e:e7:f8:05:3a:ec:b8:5c:3f:2c:05:32:4e:
                    fc:5e:2c:9f:4a:a5:8a:0a:c8:e1:1d:2d:3e:d5:47:
                    d4:40:95:94:42:58:ce:62:92:18:3b:cf:d7:72:dd:
                    38:5b:f6:e0:90:0d:8f:14:ea:7a:03:40:de:99:ab:
                    a9:34:6d:22:40:a6:f1:0f:5a:1c:e5:8d:df:6a:63:
                    2c:b8:35:ff:8b:4e:81:7d:d9:c5:c2:92:26:70:9a:
                    8c:0f:0f:a5:f7:c9:30:17:7c:86:3b:8c:54:7c:e4:
                    d3:87:16:f2:56:0a:b8:80:43:d1:2b:00:61:16:5a:
                    42:be:a3:1c:fc:e8:aa:90:1e:60:31:24:ad:2b:37:
                    03:7e:b1:36:3d:11:7e:92:30:2d:1e:2f:48:b2:8b:
                    94:97:1b:0c:7d:e9:2f:27:f3:83:e2:4d:66:6a:1a:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5D:52:3B:21:34:FF:5B:88:85:E2:20:E3:E1:AD:8D:1C:3C:0B:EB
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/daac2caf375f29b653e54ad62446f425e9fe5293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:60:38:bb:2f:ba:99:01:a2:68:1b:98:4a:e1:b8:cc:b8:d3:
         3d:fe:76:10:af:71:60:83:c2:45:91:00:0e:af:26:8e:db:af:
         03:b8:02:38:b7:28:71:a1:8b:6b:70:ff:47:61:aa:53:83:36:
         3c:80:4d:11:2f:18:74:de:79:58:e8:ee:1d:ff:d5:b2:7d:a5:
         67:09:79:2a:75:71:06:a1:e2:80:28:71:fb:01:44:0c:56:6d:
         7a:f7:ba:46:63:bf:db:30:24:5d:2a:68:05:d9:c4:f5:8f:e0:
         5e:a7:d9:89:97:5d:48:30:5b:31:06:6a:95:9d:51:5e:3c:71:
         3f:62:ba:78:07:83:dc:3b:6a:84:89:a9:65:31:af:db:a5:5b:
         25:b5:19:06:c0:cd:79:eb:a2:fa:ed:3d:dc:75:23:7a:d9:c1:
         d8:53:f3:cd:2e:a8:2e:2b:24:83:97:37:35:db:bc:11:5e:cd:
         9d:7b:15:3d:fc:8c:1c:03:49:22:fa:79:27:54:a3:c7:2f:4a:
         dd:36:93:d1:ff:c1:8e:99:52:82:dd:01:68:9b:da:b4:bb:31:
         b7:15:ca:6a:89:a9:df:98:95:44:09:1f:32:5b:43:00:a2:ed:
         6b:20:3f:41:57:c3:ad:cb:6c:2c:0a:71:64:0a:58:be:b2:a5:
         a9:86:26:c5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDE6AlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MDZhZjgxYzI3MGE2MGJkN2E2YjQ0MGJjOTdkNDIwMzIyZWJjYjUwHhcNMjExMTEw
MDMwMDAwWhcNMjMxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEyhkYWFjMmNhZjM3NWYy
OWI2NTNlNTRhZDYyNDQ2ZjQyNWU5ZmU1MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhObpGhdjObg0KNuhJLAQKhrwlDQRhuAoRJt0VYA9/OXL+Wp5
WbfefYNyDgJr2aXKfXQUZSTJq+mCcispSrPcPdkxUiXpKko8xYKzsAKH7Wa4sGpK
AaajHqPCN47n+AU67LhcPywFMk78XiyfSqWKCsjhHS0+1UfUQJWUQljOYpIYO8/X
ct04W/bgkA2PFOp6A0DemaupNG0iQKbxD1oc5Y3famMsuDX/i06BfdnFwpImcJqM
Dw+l98kwF3yGO4xUfOTThxbyVgq4gEPRKwBhFlpCvqMc/OiqkB5gMSStKzcDfrE2
PRF+kjAtHi9IsouUlxsMfekvJ/OD4k1maho3+QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCZdUjshNP9biIXiIOPhrY0cPAvrMB8GA1UdIwQYMBaAFE7h+ZpS1J1Q2X+F
YnwRm3OXhrC1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDMwNmFm
ODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUwNjYxMjQtZGNhNC00MjA1LWI1OTQtOTBkMzky
YzNlMzJjL2RhYWMyY2FmMzc1ZjI5YjY1M2U1NGFkNjI0NDZmNDI1ZTlmZTUyOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTA2NjEyNC1kY2E0LTQyMDUtYjU5NC05MGQz
OTJjM2UzMmMvMDMwNmFmODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDBEAwDQYJKoZIhvcNAQELBQADggEBAIdgOLsvupkBomgb
mErhuMy40z3+dhCvcWCDwkWRAA6vJo7brwO4Aji3KHGhi2tw/0dhqlODNjyATREv
GHTeeVjo7h3/1bJ9pWcJeSp1cQah4oAocfsBRAxWbXr3ukZjv9swJF0qaAXZxPWP
4F6n2YmXXUgwWzEGapWdUV48cT9iungHg9w7aoSJqWUxr9ulWyW1GQbAzXnrovrt
Pdx1I3rZwdhT880uqC4rJIOXNzXbvBFezZ17FT38jBwDSSL6eSdUo8cvSt02k9H/
wY6ZUoLdAWib2rS7MbcVymqJqd+YlUQJHzJbQwCi7WsgP0FXw63LbCwKcWQKWL6y
pamGJsU=
-----END CERTIFICATE-----