Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3af74a08ab28d70be58e37dfafc2eb5c2f3807fa.roa
File:                     3af74a08ab28d70be58e37dfafc2eb5c2f3807fa.roa (raw, json)
Hash identifier:          rJ019mFJDS1C4RkBBmu6XEO5rVJvNa0CCHat4De5D+4=
Subject key identifier:   AC:4C:03:0F:9C:2A:17:FE:1A:26:9F:CA:1A:39:93:A6:1A:78:89:EC
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       198C42
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3af74a08ab28d70be58e37dfafc2eb5c2f3807fa.roa
Signing time:             Thu 09 Jun 2022 01:11:07 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674306 (0x198c42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=3af74a08ab28d70be58e37dfafc2eb5c2f3807fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:5f:53:b7:ab:7b:5f:2f:1b:35:e6:42:0e:
                    0c:1f:74:ed:3c:e1:e5:e9:46:6b:32:70:64:7d:ae:
                    07:14:79:c3:ab:f0:1f:30:d0:a1:2e:ba:98:fd:08:
                    06:ee:3c:91:55:88:47:2d:b3:ee:1d:6e:49:2f:36:
                    97:4b:d3:d5:23:28:79:a2:ee:2d:a2:72:4c:da:be:
                    96:a0:2c:81:c5:99:e6:bc:65:31:13:fc:76:b2:1f:
                    ed:e1:06:f7:27:c5:a6:69:66:df:51:af:3c:28:55:
                    67:e7:b7:c2:3d:cb:06:73:57:0c:57:93:ff:b7:98:
                    d7:11:1c:3f:09:c3:6e:ff:b0:59:24:85:db:41:61:
                    eb:88:46:77:de:df:e8:26:03:78:33:d6:da:f7:e1:
                    d8:53:ba:7b:ab:45:79:a0:fb:cd:d0:9a:b4:b5:4c:
                    8f:12:99:39:6c:95:52:ac:2b:30:9f:4b:d0:6e:f9:
                    5b:c9:a0:a5:70:73:a8:e5:43:41:18:6a:84:af:80:
                    b6:92:b3:01:12:4a:f2:c2:0d:7a:5f:5b:8a:ef:1d:
                    bb:bd:97:10:e3:4d:48:24:43:a0:f8:d0:ac:cd:d7:
                    57:88:bc:58:58:1e:5d:ab:ed:c6:97:29:7e:bd:44:
                    5e:72:9f:3d:80:9e:35:72:bc:55:ae:75:91:d0:6f:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4C:03:0F:9C:2A:17:FE:1A:26:9F:CA:1A:39:93:A6:1A:78:89:EC
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3af74a08ab28d70be58e37dfafc2eb5c2f3807fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:71:1e:fe:10:ef:45:47:b5:fa:cd:ff:ec:e9:6d:86:67:
         a0:80:41:74:bb:4e:7c:a2:ea:de:6b:63:39:fc:80:de:26:97:
         d6:5b:e2:3f:40:51:7a:d6:4c:b3:7d:28:5d:dd:64:e6:b1:7b:
         50:5b:0e:17:7b:e8:38:13:b6:cd:b4:32:e5:50:68:14:6d:04:
         3c:e1:7f:4f:04:9a:ac:b0:a2:62:94:7c:93:3c:ba:a3:77:5f:
         91:4e:37:6c:c5:1c:19:19:ff:1c:64:cd:84:78:ea:53:c7:fd:
         e1:7a:6f:1f:a8:14:e1:0a:6f:04:48:2d:01:16:11:fe:87:97:
         9f:35:63:7d:5f:15:4b:7c:e3:1e:cb:58:9f:32:70:c2:93:6a:
         5e:91:d5:59:90:b3:71:4d:39:c5:4a:d0:58:0d:ed:b4:d3:63:
         82:1b:1a:17:67:05:eb:4d:74:27:a9:a6:a7:43:40:57:21:01:
         d8:e2:6b:86:f5:ad:a4:f8:61:6d:97:ef:dc:16:af:98:ab:bc:
         1f:fb:52:e3:aa:80:f2:d0:75:50:a8:9f:e3:3d:b1:70:01:6e:
         08:52:87:80:85:94:ce:bd:9b:6d:5a:30:62:02:be:1c:97:88:
         35:43:36:ca:64:66:25:18:93:8c:f7:5f:d9:de:b5:77:77:03:
         20:ed:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----