Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/6a44b1c03af74a6c8f8cb6621dd3ffd66f09fe4c.roa
File:                     6a44b1c03af74a6c8f8cb6621dd3ffd66f09fe4c.roa (raw, json)
Hash identifier:          s7AKOdcb14hHlxyHoGtvWF4Q89fdOW8c6x870ONw5N0=
Subject key identifier:   32:CC:49:34:E1:70:C4:76:06:F3:AD:AC:86:BE:7E:88:C3:0A:AC:92
Certificate issuer:       /CN=38fda0bcf0f391014d6a46cb5293e3f0251a85e8
Certificate serial:       0E29E4
Authority key identifier: C4:08:2E:23:72:1B:8E:06:AB:36:65:67:39:B3:59:F0:CC:32:AB:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/6a44b1c03af74a6c8f8cb6621dd3ffd66f09fe4c.roa
Signing time:             Fri 24 Mar 2023 15:27:39 +0000
ROA not before:           Thu 23 Mar 2023 15:25:12 +0000
ROA not after:            Mon 24 Mar 2025 15:25:12 +0000
asID:                     265587
IP address blocks:        187.62.104.0/22 maxlen: 24
                          2806:3ae::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928228 (0xe29e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fda0bcf0f391014d6a46cb5293e3f0251a85e8
        Validity
            Not Before: Mar 23 15:25:12 2023 GMT
            Not After : Mar 24 15:25:12 2025 GMT
        Subject: CN=6a44b1c03af74a6c8f8cb6621dd3ffd66f09fe4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7d:98:88:2f:a3:2f:56:ec:44:79:eb:2e:c3:
                    dc:22:81:40:a4:5e:e9:00:1d:42:11:f6:ce:d8:87:
                    d9:36:71:1a:71:3e:6b:86:10:58:5a:a1:b4:0b:6b:
                    8a:88:be:c6:a0:70:56:c0:9e:19:25:60:43:34:58:
                    c2:28:5d:31:bf:e9:4f:7e:5e:0d:76:9b:aa:62:f0:
                    36:8a:6b:37:87:3c:69:ef:41:98:35:69:54:f1:c1:
                    2c:72:eb:49:e4:64:eb:1b:3b:df:7c:42:79:a2:58:
                    ac:21:6f:2b:a5:5e:ef:bd:e6:d7:86:f1:f1:47:0c:
                    36:db:27:eb:ea:24:48:c0:ed:fc:5f:20:cd:20:ac:
                    01:49:b1:83:17:7f:38:0b:b3:b1:e7:3a:42:a9:fe:
                    21:9f:66:e6:2f:8b:e9:12:38:85:60:8e:47:ae:3e:
                    f6:13:8f:8a:98:e7:03:6e:24:a1:59:2c:4a:2b:26:
                    5c:08:bf:93:b3:ea:1b:89:b9:9a:ef:a8:d5:22:0f:
                    1d:64:6d:f2:e7:ad:0e:1d:93:9f:8f:c6:d3:b2:f4:
                    77:f2:89:9d:8d:46:38:b8:12:b1:0b:98:b5:79:88:
                    fc:5c:5c:bb:f0:ce:f5:80:f1:97:a4:4c:c4:45:d4:
                    02:80:d3:68:72:5b:1a:0b:50:5f:6f:38:b6:28:9d:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CC:49:34:E1:70:C4:76:06:F3:AD:AC:86:BE:7E:88:C3:0A:AC:92
            X509v3 Authority Key Identifier:
                keyid:C4:08:2E:23:72:1B:8E:06:AB:36:65:67:39:B3:59:F0:CC:32:AB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/6a44b1c03af74a6c8f8cb6621dd3ffd66f09fe4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c206e0c-d40d-4219-909b-b55b2ce156bb/38fda0bcf0f391014d6a46cb5293e3f0251a85e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.104.0/22
                IPv6:
                  2806:3ae::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:e2:6d:0b:e2:73:4a:a4:1a:55:41:ff:e5:a1:f2:14:9e:18:
         d7:8b:db:29:30:7a:f8:70:d9:09:6a:72:46:5b:2d:ce:e6:cc:
         5e:34:be:7f:f7:96:74:ce:9d:b1:17:f9:c0:8e:4b:2a:1a:5d:
         7a:55:66:3a:cf:c8:30:68:58:bb:dc:dd:7e:67:7b:df:73:79:
         44:77:ef:fc:99:fb:f3:0f:47:1b:46:4b:3b:bb:94:65:56:ce:
         19:26:4f:69:00:3a:7f:40:52:64:f8:66:c3:05:ec:5a:93:f9:
         f8:5e:c9:3f:ee:a1:92:65:51:24:04:da:5c:2c:f1:22:eb:ed:
         17:a2:c1:ee:fa:20:10:95:70:f6:68:5d:f2:de:a5:fd:56:42:
         e6:23:b3:09:fa:cd:c6:42:67:54:60:8c:26:b3:9c:1a:48:f1:
         9e:64:ed:25:01:e5:2c:ad:7e:a9:bf:05:56:70:cc:32:4b:a4:
         4c:f6:2a:86:91:70:ad:80:d9:dd:87:0d:a8:d6:98:a5:c9:b9:
         5d:31:28:1c:a0:55:05:c6:69:77:d5:c0:cc:29:32:96:8f:b1:
         63:e4:c3:4c:21:80:5d:d5:ec:a6:77:91:04:da:7d:e0:f3:c8:
         0f:0a:92:ad:d2:74:f0:a6:38:6c:f4:aa:ec:f9:85:84:9e:87:
         d9:c0:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----