Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/07b0bb524af344576e19287614a5912107498189.roa
File:                     07b0bb524af344576e19287614a5912107498189.roa (raw, json)
Hash identifier:          eZ179tcD+BaPyi4C+9Ug50fcIkhIijaBDwFlVBEWVTs=
Subject key identifier:   BE:78:C5:0B:A0:FB:12:A3:5F:D0:94:CB:6F:7F:D8:F3:D0:B4:8C:5D
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A5D4A
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/07b0bb524af344576e19287614a5912107498189.roa
Signing time:             Thu 22 Sep 2022 20:35:26 +0000
ROA not before:           Thu 22 Sep 2022 20:34:54 +0000
ROA not after:            Sun 22 Sep 2024 20:34:54 +0000
asID:                     3790
IP address blocks:        190.241.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727818 (0x1a5d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:34:54 2022 GMT
            Not After : Sep 22 20:34:54 2024 GMT
        Subject: CN=07b0bb524af344576e19287614a5912107498189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:82:c3:72:ea:ef:92:c0:48:f0:72:19:27:
                    c3:e3:78:cd:f1:22:4e:8a:10:c6:53:67:e5:6f:15:
                    c5:a2:85:ed:be:45:e7:ce:5e:e9:fb:d4:08:8c:2a:
                    86:93:aa:86:73:fd:a8:da:50:4c:ff:91:af:e3:a2:
                    b9:68:e4:18:79:ac:3b:92:0f:0c:a7:8a:5a:89:fd:
                    40:b5:6c:72:a9:6d:8f:99:7b:7a:6a:e0:1f:af:23:
                    38:2e:43:3d:1e:90:4c:3e:60:74:7a:d3:0e:7a:08:
                    54:6c:e2:5f:40:cf:d9:91:74:5f:7e:04:4a:59:ce:
                    b4:d5:6a:82:ce:e0:94:2b:4e:ec:65:a7:b8:ac:a6:
                    9a:c8:69:c9:96:b0:65:4e:5a:73:2f:8f:28:29:71:
                    cb:6c:09:13:76:8b:5a:60:2a:6e:1f:28:2b:83:90:
                    f4:85:e9:af:93:b1:db:a9:9a:d0:c9:40:5b:ed:a6:
                    34:af:df:15:df:99:5e:fd:4e:62:42:94:cf:04:c4:
                    e2:37:ec:34:6e:d0:ee:60:97:2b:34:18:c0:8c:5e:
                    7c:bc:da:e2:e8:83:b2:40:e9:91:74:59:5c:50:17:
                    50:51:63:0a:f8:ec:8e:53:33:73:3a:d0:29:b8:7b:
                    7f:8a:0a:bd:04:86:43:47:84:fa:07:db:b8:fd:7b:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:C5:0B:A0:FB:12:A3:5F:D0:94:CB:6F:7F:D8:F3:D0:B4:8C:5D
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/07b0bb524af344576e19287614a5912107498189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:ce:62:b0:c1:e0:b5:f2:c6:76:35:79:8d:99:6e:13:5d:
         b0:f6:47:32:61:65:fe:4e:df:85:60:9d:4b:2d:5c:8e:fe:04:
         bc:1c:9d:a7:e4:dc:64:b0:f2:65:c3:22:46:fa:43:33:59:87:
         1f:ed:10:41:fc:7c:43:fd:81:84:56:2c:b0:3c:c1:db:2a:a2:
         34:ce:6b:3d:42:af:1a:95:53:a5:55:3a:de:70:cf:e7:fa:64:
         41:af:ac:17:ad:87:db:c6:da:18:4f:c0:3f:06:de:28:5c:05:
         ab:59:bb:f4:cf:df:f4:79:3f:f0:8f:30:e3:38:cb:9e:48:15:
         bd:05:36:30:c2:d2:f8:fc:8c:de:0a:60:69:ff:25:46:3c:e7:
         53:89:ea:e1:20:59:a2:2f:0b:8b:08:8a:32:7f:dd:88:c8:bd:
         0e:f8:33:c3:34:08:9f:4c:20:36:d0:93:17:d7:55:bf:e8:b1:
         91:4e:b5:dd:89:ce:e2:44:a8:3f:7f:f6:31:cf:bb:9b:ee:e4:
         3d:dd:de:9c:cf:76:c5:6e:37:04:28:13:b1:02:ac:59:09:44:
         02:b7:4e:5e:04:f7:29:2d:15:1f:ae:9e:02:22:79:80:7d:d3:
         dc:30:84:10:39:f0:b7:ed:6c:96:d6:ac:36:7d:ca:c2:5d:6a:
         df:c5:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----