Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/04404b6d0a9e3748fd93e69502811be511ffa14d.roa
File:                     04404b6d0a9e3748fd93e69502811be511ffa14d.roa (raw, json)
Hash identifier:          QTIF6r6janUgiItHH66UqNCNUOFBGB0z7XMEXN3CZZc=
Subject key identifier:   40:6A:AB:E0:86:39:6F:D0:A3:C2:6F:A9:1C:C8:B8:9E:CC:D3:81:B5
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1C902B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/04404b6d0a9e3748fd93e69502811be511ffa14d.roa
Signing time:             Wed 28 Sep 2022 16:26:40 +0000
ROA not before:           Wed 28 Sep 2022 16:25:49 +0000
ROA not after:            Sat 28 Sep 2024 16:25:49 +0000
asID:                     11830
IP address blocks:        190.241.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871915 (0x1c902b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:25:49 2022 GMT
            Not After : Sep 28 16:25:49 2024 GMT
        Subject: CN=04404b6d0a9e3748fd93e69502811be511ffa14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c2:e4:be:5e:43:e0:2b:f8:94:92:19:a1:9d:
                    d4:b1:89:4c:b9:eb:e3:be:fa:9d:61:05:c2:c2:20:
                    93:d0:62:46:f3:b1:b0:aa:90:1a:a6:3d:2e:c7:bb:
                    5c:1d:9e:b6:40:11:41:63:2e:1f:4f:8f:66:b2:bc:
                    8c:81:d9:fe:60:64:08:f7:9f:35:a4:4f:06:ef:02:
                    34:83:62:5f:5b:5c:cf:35:3b:b2:d5:79:11:24:9e:
                    df:48:0a:0e:f6:48:e5:af:ef:c5:12:26:b9:f0:ea:
                    a6:77:78:af:cd:50:c7:5f:38:7d:67:db:d0:ee:d4:
                    7c:80:6d:17:33:73:5a:eb:b2:36:47:1d:24:7b:68:
                    c8:b9:7f:13:1d:ef:74:a9:93:c6:07:27:14:65:82:
                    0b:a2:5e:b8:1b:e9:85:3c:38:14:ba:45:a8:22:11:
                    c5:73:96:01:b9:c7:af:88:7b:93:ab:7f:7b:25:95:
                    86:13:d3:fb:94:45:a3:13:f8:93:ea:f3:e7:ac:d5:
                    11:92:f6:ef:6e:2b:f0:8f:f7:94:ed:d2:80:a9:fb:
                    75:95:2c:37:65:a4:2c:26:4b:ea:08:fb:8a:da:da:
                    8e:13:70:98:17:f5:2d:24:5c:95:e1:23:03:ca:d0:
                    bb:63:5c:85:d1:c3:49:ab:4d:15:26:51:89:b8:d6:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6A:AB:E0:86:39:6F:D0:A3:C2:6F:A9:1C:C8:B8:9E:CC:D3:81:B5
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/04404b6d0a9e3748fd93e69502811be511ffa14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:61:eb:5f:e5:e0:5f:6c:7b:0b:05:a8:6d:6f:e7:16:de:
         1d:60:8d:6d:21:94:34:1a:48:28:06:c8:eb:ee:c7:74:d2:4d:
         23:2f:e0:86:34:49:21:f7:06:fe:fb:c6:70:62:2c:9b:e8:22:
         82:8d:24:47:49:03:46:86:29:25:15:91:5d:77:96:6d:0c:13:
         20:18:c8:34:39:2b:9a:cb:19:b9:fd:02:cb:fc:f6:ab:4d:84:
         51:40:bd:8b:5d:94:7c:92:af:80:35:a4:ed:72:fe:a2:cc:bb:
         6c:fc:77:3e:fd:57:a7:6e:36:d3:f3:3b:96:58:9f:eb:56:79:
         6f:05:f7:24:32:38:61:af:dc:b5:bf:3c:68:e3:7c:e0:24:dc:
         f7:28:ba:a9:69:8b:6f:0b:c7:73:cf:6b:d8:b4:37:f8:3d:50:
         f7:d1:38:16:6d:cf:d0:3f:a8:59:99:a3:65:8e:60:34:4e:1a:
         66:11:30:3e:54:72:27:4d:b5:48:43:d7:8f:6e:cf:f5:76:f5:
         3e:6e:22:19:19:35:85:4d:b0:b1:34:8c:18:7b:c4:42:be:be:
         62:8d:ac:ae:a4:61:e1:c9:8a:5c:d6:e5:2e:8e:64:0e:c6:35:
         9d:8d:76:d8:14:55:e1:1c:e1:00:01:c3:f1:05:c4:77:d4:07:
         f8:bc:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----