Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0f24ac0bafcbfc11d0aa9fa8f742168ddf6a38d3.roa
File:                     0f24ac0bafcbfc11d0aa9fa8f742168ddf6a38d3.roa (raw, json)
Hash identifier:          ZDv1MsBoEzScgSA66B+vShKQd3xQESDPkrXii+/5HG8=
Subject key identifier:   8C:2F:E0:CB:53:26:72:24:4E:18:19:79:8D:83:1E:19:B8:A6:A6:E6
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CBCB6
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0f24ac0bafcbfc11d0aa9fa8f742168ddf6a38d3.roa
Signing time:             Wed 28 Sep 2022 16:49:38 +0000
ROA not before:           Wed 28 Sep 2022 16:48:42 +0000
ROA not after:            Sat 28 Sep 2024 16:48:42 +0000
asID:                     11830
IP address blocks:        190.241.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883318 (0x1cbcb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:48:42 2022 GMT
            Not After : Sep 28 16:48:42 2024 GMT
        Subject: CN=0f24ac0bafcbfc11d0aa9fa8f742168ddf6a38d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:f4:b2:49:1c:32:6e:b7:d9:35:70:08:2a:
                    90:36:0a:cd:57:7f:3c:10:a5:2f:6c:2e:28:8a:db:
                    a3:4c:85:1d:df:32:9b:39:c2:7e:26:64:67:4b:47:
                    2e:88:bf:f2:9c:b4:c1:ec:47:1c:f2:f3:46:9c:2a:
                    c4:af:f6:db:ed:f8:3e:09:55:01:28:7b:c5:9a:9b:
                    ea:c3:13:59:88:15:ef:fa:fb:8d:47:c5:a1:a9:c7:
                    69:aa:88:64:ce:f5:25:02:fc:13:7c:77:51:a9:b8:
                    08:6b:b6:75:9f:9a:1a:43:e5:7b:46:f6:0f:c9:70:
                    af:4f:64:e7:27:35:41:92:b4:8e:c1:53:48:42:87:
                    03:e8:9c:84:57:54:6d:d0:4c:fc:35:c4:27:f9:3b:
                    bb:29:a5:3b:f5:0b:30:e3:42:de:e5:a5:6e:12:35:
                    ad:ef:e7:c0:0a:4a:eb:63:49:c5:0f:1d:e2:cf:69:
                    17:4b:7d:9d:5c:7f:68:9d:5b:7d:cc:c0:d8:f7:60:
                    52:a9:33:39:f3:ef:22:13:f2:4c:83:69:30:4c:08:
                    f8:3c:63:0d:87:2b:1b:21:c7:a9:a7:8e:68:61:e4:
                    d7:78:66:10:f5:47:ac:fb:65:4d:2a:62:da:3a:0a:
                    30:02:bb:4b:d4:a8:af:1b:e8:be:74:13:c1:31:75:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2F:E0:CB:53:26:72:24:4E:18:19:79:8D:83:1E:19:B8:A6:A6:E6
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/0f24ac0bafcbfc11d0aa9fa8f742168ddf6a38d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:7f:8c:e9:93:a1:2b:c9:e7:5d:f1:75:1d:e3:59:4a:c1:
         25:ea:4c:07:43:c8:26:c1:e2:c6:0a:39:56:ee:38:36:74:15:
         e6:3d:d6:5e:e2:e9:15:38:66:1b:7b:a7:74:b3:29:96:c1:21:
         60:68:e7:16:9b:e4:19:da:a1:2c:d5:59:5b:3e:a9:97:7b:4d:
         f5:94:5c:a4:5b:ad:cd:9b:1d:73:d0:33:c8:f2:f6:89:20:46:
         cc:94:4c:cf:3d:95:cf:e0:84:1e:b7:83:7b:a7:25:09:ee:f9:
         cc:33:5c:c1:35:34:65:c5:7f:b1:d2:a1:00:5f:96:8e:06:8e:
         fb:dc:36:cd:0f:30:f9:69:55:3a:54:1b:87:80:6b:03:2d:0a:
         de:70:70:b8:e2:6c:1b:71:15:88:90:bd:fb:7c:88:5a:de:0b:
         ed:e6:56:e5:6a:28:e1:d0:8b:b0:8a:9d:bc:6a:9f:89:0e:5a:
         5b:6c:37:b3:04:2c:89:7e:86:9a:04:b1:54:4a:81:df:46:25:
         89:09:cb:53:31:19:82:ab:83:ac:04:2c:19:be:a2:2c:1e:5a:
         d5:d6:a8:fa:bf:1f:f8:bf:05:8d:2f:c9:8a:af:a0:46:13:09:
         c8:9f:c6:1b:fc:d5:95:5b:48:53:06:b6:1a:b0:28:c7:6b:51:
         de:b3:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----