Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/02d81d67569a8af0d5a1ea1a74d9a062f8e7dff5.roa
File:                     02d81d67569a8af0d5a1ea1a74d9a062f8e7dff5.roa (raw, json)
Hash identifier:          XEQwYjZw0lwbSB60IkDin3MQty3XJjfl3KJw6X74VfA=
Subject key identifier:   5D:B0:FF:BC:F9:E3:8B:AA:7C:95:B2:A6:E3:51:60:42:AB:4E:DE:AC
Certificate issuer:       /CN=0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d
Certificate serial:       0354
Authority key identifier: 75:A2:64:14:72:89:F2:BC:AF:41:D4:81:7F:2C:75:3A:98:4F:66:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/02d81d67569a8af0d5a1ea1a74d9a062f8e7dff5.roa
Signing time:             Mon 06 Dec 2021 20:58:28 +0000
ROA not before:           Mon 06 Dec 2021 03:00:00 +0000
ROA not after:            Wed 06 Dec 2023 03:00:00 +0000
asID:                     262186
IP address blocks:        2803:d110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d
        Validity
            Not Before: Dec  6 03:00:00 2021 GMT
            Not After : Dec  6 03:00:00 2023 GMT
        Subject: CN=02d81d67569a8af0d5a1ea1a74d9a062f8e7dff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:c9:da:a7:88:48:a2:8a:27:73:f1:ae:bc:
                    73:cc:6a:7d:41:f9:ba:a5:7b:71:8c:aa:09:3d:a7:
                    6c:4a:1d:d9:ad:2b:24:c8:2d:8c:43:e7:34:fb:c2:
                    20:d7:5e:4e:84:85:03:11:1c:98:78:c8:69:eb:cc:
                    78:6e:d4:3d:69:93:3c:89:8d:58:9e:7a:4b:a1:4f:
                    e9:6a:b0:7e:74:a0:ae:86:7b:a6:3c:1d:ca:1e:20:
                    49:43:73:2e:2e:d1:4c:d5:3d:1e:21:0f:be:59:b0:
                    d6:5b:23:00:5c:a7:e6:e0:f7:2c:ee:ea:92:61:05:
                    35:4b:79:89:51:9b:aa:51:74:a6:90:d6:cd:a2:f3:
                    7e:4c:a3:f0:9b:05:24:83:ac:15:d8:08:98:e9:b5:
                    f6:dc:6e:db:08:f4:32:19:35:d7:a1:76:5a:39:24:
                    66:23:85:74:72:0a:f4:cd:e9:e5:50:68:54:c4:69:
                    5f:48:e0:e0:a0:83:e4:43:f9:a1:6d:4f:a3:59:0f:
                    e8:9a:04:17:65:de:a8:d2:50:88:32:a8:96:b9:71:
                    08:55:76:af:ff:1b:62:d4:95:ed:af:81:66:6e:90:
                    8a:da:84:e7:2d:3c:83:10:09:c3:5a:14:5d:f3:c7:
                    48:d0:24:08:27:d4:96:6e:55:1e:b5:2d:d9:75:b5:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B0:FF:BC:F9:E3:8B:AA:7C:95:B2:A6:E3:51:60:42:AB:4E:DE:AC
            X509v3 Authority Key Identifier:
                keyid:75:A2:64:14:72:89:F2:BC:AF:41:D4:81:7F:2C:75:3A:98:4F:66:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/02d81d67569a8af0d5a1ea1a74d9a062f8e7dff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ff3e5c9-0aa7-4651-823a-20868d934668/0b07d38e995ba3dbdfffdb1c5d575d18fb416d5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d110::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:85:4b:eb:3e:6e:2a:11:38:bd:8e:90:a0:9d:6f:13:56:
         2e:8e:aa:42:fc:d4:63:00:78:16:63:09:94:3c:ae:12:0d:74:
         d0:95:ae:eb:23:77:45:9b:6a:5d:49:92:33:cd:bc:92:b3:6c:
         d4:e7:6c:5b:c0:e9:ba:06:fd:1d:af:4f:5a:25:99:6d:ec:51:
         f7:e7:22:43:9a:fc:31:ef:1c:1e:98:7b:eb:8b:e3:22:9c:89:
         a1:3f:e2:3e:17:82:dc:7f:77:6b:8c:be:13:45:b5:61:c0:01:
         07:4d:a0:c2:ba:bb:1a:5e:6d:57:5c:66:6c:67:34:85:c2:bc:
         55:a9:e7:0c:94:c2:62:88:b5:41:5b:1f:69:59:66:62:17:a1:
         2c:24:cc:09:4e:c9:66:bc:7a:db:74:a8:11:e8:01:9c:ce:d2:
         10:f5:be:4a:9e:f1:c4:ce:7d:87:7c:d2:bc:f0:f8:b1:41:7c:
         8c:0c:74:df:22:a5:88:c5:b1:01:84:6d:d4:5f:3d:4f:70:3b:
         9b:a7:2b:fe:99:1a:c9:86:31:99:c5:78:36:52:00:54:1d:70:
         30:4b:09:78:58:b8:36:49:61:ad:70:e6:ea:16:73:23:6c:ac:
         dd:12:0f:51:cf:35:02:b3:86:7a:a9:8f:98:bb:d8:13:1e:b3:
         c9:fa:ba:7d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGIw
N2QzOGU5OTViYTNkYmRmZmZkYjFjNWQ1NzVkMThmYjQxNmQ1ZDAeFw0yMTEyMDYw
MzAwMDBaFw0yMzEyMDYwMzAwMDBaMDMxMTAvBgNVBAMTKDAyZDgxZDY3NTY5YThh
ZjBkNWExZWExYTc0ZDlhMDYyZjhlN2RmZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZB8nap4hIooonc/GuvHPMan1B+bqle3GMqgk9p2xKHdmtKyTI
LYxD5zT7wiDXXk6EhQMRHJh4yGnrzHhu1D1pkzyJjVieekuhT+lqsH50oK6Ge6Y8
HcoeIElDcy4u0UzVPR4hD75ZsNZbIwBcp+bg9yzu6pJhBTVLeYlRm6pRdKaQ1s2i
835Mo/CbBSSDrBXYCJjptfbcbtsI9DIZNdehdlo5JGYjhXRyCvTN6eVQaFTEaV9I
4OCgg+RD+aFtT6NZD+iaBBdl3qjSUIgyqJa5cQhVdq//G2LUle2vgWZukIrahOct
PIMQCcNaFF3zx0jQJAgn1JZuVR61Ldl1tX+7AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUXbD/vPnji6p8lbKm41FgQqtO3qwwHwYDVR0jBBgwFoAUdaJkFHKJ8ryvQdSB
fyx1OphPZu0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wYjA3ZDM4
ZTk5NWJhM2RiZGZmZmRiMWM1ZDU3NWQxOGZiNDE2ZDVkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84ZmYzZTVjOS0wYWE3LTQ2NTEtODIzYS0yMDg2OGQ5
MzQ2NjgvMDJkODFkNjc1NjlhOGFmMGQ1YTFlYTFhNzRkOWEwNjJmOGU3ZGZmNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzhmZjNlNWM5LTBhYTctNDY1MS04MjNhLTIwODY4
ZDkzNDY2OC8wYjA3ZDM4ZTk5NWJhM2RiZGZmZmRiMWM1ZDU3NWQxOGZiNDE2ZDVk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAPREDANBgkqhkiG9w0BAQsFAAOCAQEAn4uFS+s+bioROL2O
kKCdbxNWLo6qQvzUYwB4FmMJlDyuEg100JWu6yN3RZtqXUmSM828krNs1OdsW8Dp
ugb9Ha9PWiWZbexR9+ciQ5r8Me8cHph764vjIpyJoT/iPheC3H93a4y+E0W1YcAB
B02gwrq7Gl5tV1xmbGc0hcK8VannDJTCYoi1QVsfaVlmYhehLCTMCU7JZrx623So
EegBnM7SEPW+Sp7xxM59h3zSvPD4sUF8jAx03yKliMWxAYRt1F89T3A7m6cr/pka
yYYxmcV4NlIAVB1wMEsJeFi4NklhrXDm6hZzI2ys3RIPUc81ArOGeqmPmLvYEx6z
yfq6fQ==
-----END CERTIFICATE-----