Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3aa16dacaa41406c593d0987e17b0b1f9c62c42e.roa
File:                     3aa16dacaa41406c593d0987e17b0b1f9c62c42e.roa (raw, json)
Hash identifier:          nC4Lu3EpV7ki2B46pRSj1/EvsDh+Bw3diS2RJeuQwhk=
Subject key identifier:   1E:DF:15:30:0F:54:69:06:37:DD:20:62:65:C9:18:A2:12:E6:22:FD
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19EE7F
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3aa16dacaa41406c593d0987e17b0b1f9c62c42e.roa
Signing time:             Thu 22 Sep 2022 20:11:02 +0000
ROA not before:           Thu 22 Sep 2022 20:09:56 +0000
ROA not after:            Sun 22 Sep 2024 20:09:56 +0000
asID:                     3790
IP address blocks:        190.241.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699455 (0x19ee7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:09:56 2022 GMT
            Not After : Sep 22 20:09:56 2024 GMT
        Subject: CN=3aa16dacaa41406c593d0987e17b0b1f9c62c42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:75:62:4f:e2:18:98:2a:97:c1:c4:c5:75:
                    ac:aa:5e:e7:74:54:3b:11:be:c7:ee:9f:34:ac:fa:
                    a8:4c:a6:3f:a5:e1:02:a1:f5:63:90:07:4c:0b:3c:
                    07:9b:18:68:d6:88:95:fb:83:d3:b0:77:93:fc:6e:
                    ac:a2:68:fc:c3:6f:b7:12:e4:16:9a:68:74:07:a2:
                    68:82:73:c3:f4:11:5f:c5:ad:82:a8:55:81:7f:fe:
                    96:49:78:bb:b4:08:29:bd:b8:dd:08:b6:2b:e4:2c:
                    08:96:ea:14:24:a4:38:e1:7e:12:3a:36:6a:51:82:
                    7d:c7:3e:df:1c:1c:f5:4c:e4:3e:0c:87:f5:eb:b2:
                    15:10:2a:7c:ff:f9:2d:a7:da:12:6c:38:f0:75:39:
                    da:75:4f:bb:5b:46:da:07:f0:06:18:44:64:4a:40:
                    e8:7f:3e:04:01:f8:06:10:93:7e:69:6d:58:95:57:
                    2a:6e:98:90:45:e5:17:6f:e7:ef:ff:52:64:96:8c:
                    01:13:db:34:6e:19:b7:49:4d:14:88:79:1f:76:22:
                    da:eb:83:93:06:33:fe:bf:27:08:a6:75:6f:2f:ff:
                    3f:cc:98:b5:4e:1d:7b:66:92:a2:02:b8:f2:84:7c:
                    df:55:28:ca:10:5f:5e:84:b0:da:66:56:0f:49:fe:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DF:15:30:0F:54:69:06:37:DD:20:62:65:C9:18:A2:12:E6:22:FD
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3aa16dacaa41406c593d0987e17b0b1f9c62c42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:68:e5:c9:df:0b:ef:e8:31:de:80:7a:e5:e1:dc:c5:0f:9d:
         20:8a:d6:9b:15:b1:c6:03:8b:45:20:39:1d:33:c8:82:fa:1e:
         0b:68:29:8d:9c:c7:b4:a4:90:7c:29:7d:fe:54:5e:5e:c4:b5:
         c2:00:c3:b6:9b:4c:5d:3d:fd:db:f7:fd:b7:b4:d5:65:4a:4e:
         a1:d6:5b:5d:61:43:31:0b:9b:50:d6:f0:82:db:98:e0:f5:4b:
         d1:38:d0:95:31:99:b4:b5:b7:36:19:14:fe:ae:0c:be:1f:0e:
         70:40:b1:1b:44:5c:5f:27:98:e8:7a:02:ec:32:d4:7c:32:94:
         0d:6c:41:02:85:71:24:47:b4:77:c9:00:0f:55:21:11:44:13:
         8d:2e:27:ab:cd:34:16:61:22:53:41:20:9e:13:18:69:cd:3d:
         34:b0:52:a7:cf:1b:16:8b:e3:7e:93:9e:2c:97:9a:cd:f4:78:
         1f:4d:85:80:c3:8c:65:d8:aa:84:8b:23:47:01:e7:5d:5f:cd:
         2a:f3:6a:72:c8:6a:64:87:b7:9c:a7:fb:79:80:e8:78:36:f3:
         e9:e7:3d:b9:ee:ea:38:3f:a9:bb:fc:ec:12:7f:1d:28:1a:f5:
         c4:5b:72:76:85:0a:98:64:57:18:3c:f5:8b:e8:b6:5c:6a:e0:
         b1:07:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----