Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/08da6f5f21e5d7af9d5c6fdab652cf8b5085132d.roa
File:                     08da6f5f21e5d7af9d5c6fdab652cf8b5085132d.roa (raw, json)
Hash identifier:          11M+qIqFin1d40bVyyfS/R8Pd7oF5vR9uu2HYvyxe6o=
Subject key identifier:   F9:58:D3:80:9B:F2:FA:4C:B0:E7:42:53:B5:64:14:A7:E2:F6:55:25
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AA614
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/08da6f5f21e5d7af9d5c6fdab652cf8b5085132d.roa
Signing time:             Thu 22 Sep 2022 20:57:11 +0000
ROA not before:           Thu 22 Sep 2022 20:56:28 +0000
ROA not after:            Sun 22 Sep 2024 20:56:28 +0000
asID:                     3790
IP address blocks:        196.40.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746452 (0x1aa614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:56:28 2022 GMT
            Not After : Sep 22 20:56:28 2024 GMT
        Subject: CN=08da6f5f21e5d7af9d5c6fdab652cf8b5085132d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:6b:a4:cf:94:98:e6:94:a3:a3:32:7a:4b:
                    39:23:53:d6:55:26:d4:c4:e9:d1:c3:65:1a:5b:57:
                    84:3a:d6:ed:c6:75:2d:5e:04:35:ae:ce:bc:79:e6:
                    f2:d8:d2:9f:ce:6c:49:a8:b3:5f:63:a9:65:c9:c7:
                    ea:c2:5f:59:4e:68:bf:63:17:9d:32:12:10:b1:8b:
                    7d:22:6b:71:a2:9a:61:61:4f:ec:34:0c:fa:fa:4c:
                    f9:23:cc:ff:67:98:cd:c3:2a:bf:b6:6e:78:43:f2:
                    d1:85:94:e2:a7:3c:6b:df:3d:84:b8:d6:21:1d:98:
                    6e:a5:c9:d2:1f:b8:bb:16:b8:58:de:62:99:e6:bf:
                    df:0c:e0:db:ff:e5:68:1e:eb:40:91:2a:ee:8a:a6:
                    e5:a0:a8:44:91:95:2a:c8:ea:01:1e:ee:48:95:49:
                    c5:d6:19:67:9b:0d:8a:32:fa:ef:d1:79:5c:ae:c1:
                    6c:9b:6f:cf:61:3a:95:eb:6f:11:58:34:db:38:8f:
                    ec:c3:f5:b5:11:c9:e7:21:4d:db:72:aa:55:83:5d:
                    11:ae:71:4f:0a:95:a9:6c:79:67:40:de:c2:32:ba:
                    41:b5:95:56:19:c0:09:cf:a3:4d:4a:de:fe:83:6d:
                    48:d6:a5:a1:58:7d:e0:d1:7a:e8:66:90:75:20:49:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:D3:80:9B:F2:FA:4C:B0:E7:42:53:B5:64:14:A7:E2:F6:55:25
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/08da6f5f21e5d7af9d5c6fdab652cf8b5085132d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:45:f1:e3:90:f2:0a:c3:fe:c0:1d:2c:71:67:13:72:e4:
         fe:c1:7f:02:79:f4:e3:a7:c5:ee:94:0a:26:99:1f:e4:b3:7a:
         4f:4b:40:d6:86:3f:78:c5:a1:e0:e2:61:78:de:99:1b:53:9d:
         70:c9:8c:c4:0c:03:95:69:40:18:b4:3e:da:16:5c:1e:be:cb:
         33:6c:e1:47:72:ac:9c:85:ef:3d:b8:e7:7c:95:f3:e7:02:9c:
         6f:67:a7:5e:2f:3f:2f:e3:78:81:21:3f:de:54:1c:df:4b:0e:
         5f:c3:32:74:5e:37:73:92:d6:f1:95:7d:ec:06:0a:96:aa:53:
         79:32:b2:b4:9a:dd:fa:04:a9:7a:36:db:4b:a1:cd:9b:e4:92:
         59:4c:e1:e9:ec:13:a0:bc:c8:ba:d3:7f:a8:99:cc:40:fa:85:
         af:1f:be:0e:7a:a4:88:f9:f4:42:b8:fa:77:dc:3d:01:2e:40:
         26:b9:4b:0b:0d:5e:ab:01:30:92:e6:11:6d:38:d6:1b:f3:c2:
         8e:b3:08:f6:ac:35:ab:37:fc:72:a1:5e:1b:dc:56:28:eb:74:
         28:19:41:a6:47:0e:c8:6b:55:72:84:dc:6b:48:e2:78:98:c1:
         68:fc:56:33:1c:97:d3:e4:12:2d:62:16:28:b6:60:b8:7c:1a:
         f2:bb:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----