Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f8744a80a6e5885892744c523715e63ea671d882.roa
File:                     f8744a80a6e5885892744c523715e63ea671d882.roa (raw, json)
Hash identifier:          a4MS1yZGFMWcNdhChyP5t2FxtsU0z4s9msdRYOBNJp4=
Subject key identifier:   53:E8:EB:65:4C:B6:84:EC:BE:74:57:2E:AB:B7:FA:7D:3D:03:99:77
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       19A483
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f8744a80a6e5885892744c523715e63ea671d882.roa
Signing time:             Thu 09 Jun 2022 01:41:34 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680515 (0x19a483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=f8744a80a6e5885892744c523715e63ea671d882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:50:65:2f:01:41:de:05:7a:09:05:b3:36:
                    06:f5:27:67:d0:ac:df:88:4d:35:83:b2:f8:d0:51:
                    34:60:c7:ca:10:08:e6:94:69:6b:e4:77:dd:48:aa:
                    dc:69:db:dc:0f:bc:14:40:f9:d1:88:98:28:5b:27:
                    9e:80:e2:2b:d8:0b:ff:e9:9c:3d:c3:be:f1:ac:b3:
                    c4:90:bd:58:d6:ac:dd:4e:d2:f8:97:10:23:af:6e:
                    bc:1e:2b:e5:47:58:e4:2e:12:a5:45:91:48:72:6f:
                    c8:dc:ff:a8:a4:58:15:03:fe:73:87:fd:b1:88:ed:
                    76:6f:53:08:72:84:22:dc:98:47:95:6d:53:4e:58:
                    c0:57:3c:0e:da:3b:27:aa:3c:af:9b:23:97:2b:4b:
                    a6:1e:4e:58:85:a8:17:48:58:89:fd:37:5e:41:99:
                    82:af:25:1e:ae:5d:1c:71:7c:33:fd:6b:ef:3e:db:
                    90:ae:8f:1e:8f:aa:05:da:c3:6d:ca:e7:90:2a:98:
                    e4:f2:9e:5a:78:8e:cf:ce:1a:b9:4a:b9:4f:27:6e:
                    a2:4b:ad:7d:89:c2:45:5e:c8:26:30:91:dd:95:08:
                    91:4a:51:d1:29:c3:9a:d3:f1:8d:de:39:d4:34:f6:
                    03:14:cd:e5:d2:6d:ba:c6:17:78:69:43:03:eb:34:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:EB:65:4C:B6:84:EC:BE:74:57:2E:AB:B7:FA:7D:3D:03:99:77
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f8744a80a6e5885892744c523715e63ea671d882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:09:45:65:7c:77:30:fb:6e:7a:db:5f:83:b5:c8:a9:7b:
         12:52:0f:c1:8a:24:25:49:6a:87:9e:c2:2d:e2:41:fd:76:d2:
         c8:9d:cf:cb:1a:8c:a0:f5:c6:ba:f2:08:45:cf:b5:28:72:ab:
         77:62:95:80:3a:c1:83:e0:c1:c5:c0:0c:f8:39:c7:1a:d2:ea:
         89:f1:41:b7:58:b6:c6:e8:e0:21:8c:11:a5:1b:9d:1e:95:c3:
         1f:c9:3d:1a:65:6f:a3:f0:33:48:a4:1a:96:fb:b7:5e:36:8c:
         3c:f2:aa:03:7d:22:4e:9f:4e:7d:e4:39:f9:14:f9:c1:24:41:
         87:c6:8a:98:03:e2:6f:b0:95:a0:2d:0b:56:2c:fa:88:3a:47:
         3a:c4:7b:d7:c9:fd:d0:3f:7b:55:ce:62:a5:77:35:75:ab:2f:
         c7:5f:9f:09:e5:02:41:2c:d4:0a:0b:06:9c:8b:24:5f:a3:9f:
         9e:5f:49:e6:a6:b0:6d:50:dd:95:6c:db:6a:5d:52:60:04:ff:
         68:ab:27:cc:a5:9d:2e:bb:8d:ff:b2:89:ff:98:ee:ad:61:61:
         a4:33:54:7e:ed:3a:25:03:97:a6:46:ee:15:78:05:14:1c:ff:
         cd:b4:e0:1a:48:d0:29:e2:76:bd:15:2e:6f:f9:da:94:13:ca:
         01:c8:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----