Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/d94e48da8482853d976db8e49108b2ea90d7ba26.roa
File:                     d94e48da8482853d976db8e49108b2ea90d7ba26.roa (raw, json)
Hash identifier:          p0l9awijXHT+RMbd0uVCwOQjyuED4rxEmJQZ2OXkYtI=
Subject key identifier:   00:96:C6:05:8C:91:DA:1D:AA:47:CE:EA:1E:18:6B:C4:7F:40:65:CD
Certificate issuer:       /CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
Certificate serial:       021934
Authority key identifier: 68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/d94e48da8482853d976db8e49108b2ea90d7ba26.roa
Signing time:             Tue 28 Dec 2021 20:47:41 +0000
ROA not before:           Tue 28 Dec 2021 03:00:00 +0000
ROA not after:            Thu 28 Dec 2023 03:00:00 +0000
asID:                     265850
IP address blocks:        2803:2a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137524 (0x21934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
        Validity
            Not Before: Dec 28 03:00:00 2021 GMT
            Not After : Dec 28 03:00:00 2023 GMT
        Subject: CN=d94e48da8482853d976db8e49108b2ea90d7ba26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:63:73:28:a1:c6:32:c7:cf:9a:12:b6:68:
                    46:0a:75:3c:93:2c:93:69:fd:c2:df:97:cb:83:97:
                    4c:51:ea:f0:8b:6f:32:5b:98:db:5e:7b:e0:c5:c9:
                    e5:c9:33:20:a1:67:e5:1c:e4:0a:d5:a8:14:b0:a2:
                    2c:1b:e7:6e:b1:ef:a0:98:3e:ab:25:00:34:a1:68:
                    5c:fb:34:52:4e:c9:05:ff:d1:fb:6d:d9:c5:13:d9:
                    8b:ef:52:b5:c9:7c:66:8d:79:fa:1c:7d:8f:8f:77:
                    dd:63:bb:40:6d:6f:52:dd:87:98:e5:30:15:be:d3:
                    5f:d9:9b:4d:d7:53:d1:84:af:93:8b:b3:af:04:46:
                    a4:82:bb:ed:d8:47:d4:da:c4:47:3b:f0:88:40:4f:
                    45:89:1a:75:f8:e7:53:3a:32:d4:3a:ad:a9:52:fc:
                    32:21:28:65:59:5b:73:f0:a3:ee:11:36:aa:b7:86:
                    e7:db:dd:c9:bc:ae:8d:26:69:66:c8:0d:fc:ff:c4:
                    24:be:ff:3d:46:d1:22:ab:07:0f:50:c3:05:be:e1:
                    b8:2b:2a:56:a7:ab:64:05:8c:0c:90:fd:5a:5c:90:
                    cc:87:7b:b4:c1:16:e3:3a:04:8b:5d:42:4f:5a:f0:
                    c1:bd:19:8f:0d:4f:43:2d:b5:b3:3c:0d:39:5b:bb:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:C6:05:8C:91:DA:1D:AA:47:CE:EA:1E:18:6B:C4:7F:40:65:CD
            X509v3 Authority Key Identifier:
                keyid:68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/d94e48da8482853d976db8e49108b2ea90d7ba26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:4a:c6:17:ce:01:af:8f:47:44:be:6d:93:12:d8:7b:3e:5f:
         8b:05:e1:fb:f0:f6:bf:83:f8:72:d5:ae:0a:6d:7d:99:fd:21:
         e0:bb:5a:cc:15:a1:63:14:16:10:05:66:b2:9f:e9:2e:33:82:
         03:4c:df:dc:5e:92:81:32:ff:16:52:e7:c6:09:e0:3a:1f:72:
         df:86:57:04:52:6a:19:74:5f:c7:e1:73:fa:de:4e:1b:d7:27:
         f7:ee:b9:9f:26:2d:52:3e:da:c6:6b:b6:e7:8c:78:0a:c4:0e:
         07:10:fb:a8:6b:ca:74:d7:2e:36:d0:08:b7:ac:2f:6d:06:6a:
         af:6c:ff:b6:a3:56:49:9a:dd:3a:42:e2:74:fb:85:c6:ac:0e:
         43:75:26:e5:9d:f9:88:fa:ce:ca:d2:1a:d5:12:c7:dd:19:82:
         08:4c:b2:88:23:6e:74:f1:c8:56:26:90:ec:57:25:59:3c:ef:
         24:36:ea:06:d0:72:2c:ac:30:6f:99:22:a2:5b:a9:f4:84:cb:
         62:58:cd:e4:d8:da:6c:04:59:2b:5f:b7:eb:d4:24:23:da:06:
         72:b2:0d:05:a3:2f:80:95:a1:e7:bc:e1:5d:45:89:c4:7d:28:
         06:73:6d:a6:86:a1:89:62:be:c1:a2:ed:15:1e:f0:4d:87:26:
         00:13:57:01
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAhk0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMy
YzM1NmJmNDNjOTIyMGJiNjI1ZDUwNTk2YTdlYzNjNzU0MmZiMjMwHhcNMjExMjI4
MDMwMDAwWhcNMjMxMjI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkOTRlNDhkYTg0ODI4
NTNkOTc2ZGI4ZTQ5MTA4YjJlYTkwZDdiYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmBNjcyihxjLHz5oStmhGCnU8kyyTaf3C35fLg5dMUerwi28y
W5jbXnvgxcnlyTMgoWflHOQK1agUsKIsG+duse+gmD6rJQA0oWhc+zRSTskF/9H7
bdnFE9mL71K1yXxmjXn6HH2Pj3fdY7tAbW9S3YeY5TAVvtNf2ZtN11PRhK+Ti7Ov
BEakgrvt2EfU2sRHO/CIQE9FiRp1+OdTOjLUOq2pUvwyIShlWVtz8KPuETaqt4bn
293JvK6NJmlmyA38/8Qkvv89RtEiqwcPUMMFvuG4KypWp6tkBYwMkP1aXJDMh3u0
wRbjOgSLXUJPWvDBvRmPDU9DLbWzPA05W7sdywIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFACWxgWMkdodqkfO6h4Ya8R/QGXNMB8GA1UdIwQYMBaAFGjV9Fr7/QVyWDD6
5TBmmJEigRUBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzJjMzU2
YmY0M2M5MjIwYmI2MjVkNTA1OTZhN2VjM2M3NTQyZmIyMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTJkNzQ3MDUtNGYyYi00Y2U0LWJlODktMmJmZGYz
NjA0ZTI5L2Q5NGU0OGRhODQ4Mjg1M2Q5NzZkYjhlNDkxMDhiMmVhOTBkN2JhMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMmQ3NDcwNS00ZjJiLTRjZTQtYmU4OS0yYmZk
ZjM2MDRlMjkvMzJjMzU2YmY0M2M5MjIwYmI2MjVkNTA1OTZhN2VjM2M3NTQyZmIy
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDKiAwDQYJKoZIhvcNAQELBQADggEBAHJKxhfOAa+PR0S+
bZMS2Hs+X4sF4fvw9r+D+HLVrgptfZn9IeC7WswVoWMUFhAFZrKf6S4zggNM39xe
koEy/xZS58YJ4Dofct+GVwRSahl0X8fhc/reThvXJ/fuuZ8mLVI+2sZrtueMeArE
DgcQ+6hrynTXLjbQCLesL20Gaq9s/7ajVkma3TpC4nT7hcasDkN1JuWd+Yj6zsrS
GtUSx90ZgghMsogjbnTxyFYmkOxXJVk87yQ26gbQciysMG+ZIqJbqfSEy2JYzeTY
2mwEWStft+vUJCPaBnKyDQWjL4CVoee84V1FicR9KAZzbaaGoYlivsGi7RUe8E2H
JgATVwE=
-----END CERTIFICATE-----