Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b35981947e08dbb15ee80c7e7a7538dab758294.roa
File:                     3b35981947e08dbb15ee80c7e7a7538dab758294.roa (raw, json)
Hash identifier:          VsGKhyGt/wYZMMHDHZYe7tM6XqlD6JqbbWJrVFpQz80=
Subject key identifier:   C7:F8:06:CA:DE:09:08:A9:5E:3F:AB:77:50:AA:35:C2:CA:46:02:79
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A887A
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b35981947e08dbb15ee80c7e7a7538dab758294.roa
Signing time:             Thu 22 Sep 2022 20:49:33 +0000
ROA not before:           Thu 22 Sep 2022 20:48:54 +0000
ROA not after:            Sun 22 Sep 2024 20:48:54 +0000
asID:                     3790
IP address blocks:        196.40.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738874 (0x1a887a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:48:54 2022 GMT
            Not After : Sep 22 20:48:54 2024 GMT
        Subject: CN=3b35981947e08dbb15ee80c7e7a7538dab758294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:bd:72:f6:c0:5a:cb:41:28:be:66:67:43:
                    6f:2d:82:51:9f:4c:3f:77:0c:64:d6:96:6e:b4:53:
                    49:0b:04:76:50:9a:95:7c:0a:52:e5:a9:d3:da:ad:
                    f6:04:d8:f4:ba:c3:b9:24:fd:93:50:fd:a3:ff:3c:
                    45:6b:69:a2:61:7e:c2:e9:5f:a1:b3:27:dd:59:b4:
                    7e:45:48:8a:d7:d4:79:8f:b3:2f:05:78:6a:cd:f7:
                    a4:91:8a:8a:9a:54:7f:67:d0:ef:6c:13:c5:e2:3c:
                    e6:5c:32:d3:0d:d7:2a:d1:27:9a:2e:9f:bd:5a:2e:
                    d5:ce:47:99:04:13:0f:63:58:e2:26:d0:2b:33:44:
                    6e:2a:1b:77:8b:bf:15:7b:6d:74:d3:e1:68:f3:11:
                    12:a1:62:98:5b:e5:dd:ad:c0:ae:fa:65:39:d8:22:
                    17:35:3d:a0:18:cd:e7:84:40:e3:0c:d3:80:29:e7:
                    ac:3c:a6:66:c7:9d:5e:ba:81:3d:20:0b:14:c5:6c:
                    56:c6:74:db:80:21:14:48:75:52:60:8a:37:a7:ae:
                    12:99:f3:ae:8c:8e:fd:d5:e2:ca:ec:c4:e6:87:25:
                    f3:d5:ad:a7:c3:6f:12:cd:42:b5:9a:ae:dc:53:ea:
                    a6:57:4f:6f:15:c2:ad:cf:ed:d7:b6:cb:d9:17:76:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:06:CA:DE:09:08:A9:5E:3F:AB:77:50:AA:35:C2:CA:46:02:79
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3b35981947e08dbb15ee80c7e7a7538dab758294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:92:86:38:0c:26:07:e4:b1:c2:0c:dd:d3:6f:e2:2d:70:
         33:36:9d:98:9e:6b:d3:64:e6:4f:81:3c:91:9f:e0:42:fe:79:
         67:86:a9:0c:86:94:32:36:11:0e:68:86:84:8c:5a:05:0d:95:
         36:0e:e4:de:db:62:e8:b8:14:10:67:15:26:d0:48:fa:a1:4f:
         0d:97:2c:66:a1:79:de:a4:11:ea:8c:55:43:40:79:16:b2:72:
         c7:06:55:cb:f1:78:4b:84:7a:b8:86:10:20:c7:dc:66:e9:1c:
         ba:f1:66:ad:b0:81:1b:d8:18:f8:ee:06:57:3c:ed:0a:2e:4d:
         97:1a:89:2d:f8:dc:22:d6:60:70:9a:a0:08:a1:71:9c:51:66:
         0d:8e:f2:6b:24:ea:d3:7b:32:18:ef:43:f4:30:e0:b8:59:63:
         3d:43:2e:73:86:f2:fd:ee:56:90:2f:23:b8:9b:fe:5e:49:c8:
         d5:f8:bf:6c:7e:ea:ce:6f:85:5f:55:19:51:9e:4d:b2:4d:18:
         81:e6:f8:27:e3:83:6e:c7:fe:91:28:ea:c8:92:c2:60:d4:77:
         f9:83:c1:5f:4f:5e:9d:ba:19:fa:2d:0c:77:ec:11:0b:91:79:
         db:1b:43:d5:1b:09:12:09:05:31:e2:5f:fb:ad:22:70:0d:c4:
         e3:8f:9f:a6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGoh6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTIy
MjA0ODU0WhcNMjQwOTIyMjA0ODU0WjAzMTEwLwYDVQQDEygzYjM1OTgxOTQ3ZTA4
ZGJiMTVlZTgwYzdlN2E3NTM4ZGFiNzU4Mjk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtTm9cvbAWstBKL5mZ0NvLYJRn0w/dwxk1pZutFNJCwR2UJqV
fApS5anT2q32BNj0usO5JP2TUP2j/zxFa2miYX7C6V+hsyfdWbR+RUiK19R5j7Mv
BXhqzfekkYqKmlR/Z9DvbBPF4jzmXDLTDdcq0SeaLp+9Wi7VzkeZBBMPY1jiJtAr
M0RuKht3i78Ve2100+Fo8xESoWKYW+XdrcCu+mU52CIXNT2gGM3nhEDjDNOAKees
PKZmx51euoE9IAsUxWxWxnTbgCEUSHVSYIo3p64SmfOujI791eLK7MTmhyXz1a2n
w28SzUK1mq7cU+qmV09vFcKtz+3XtsvZF3ag9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMf4BsreCQipXj+rd1CqNcLKRgJ5MB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzNiMzU5ODE5NDdlMDhkYmIxNWVlODBjN2U3YTc1MzhkYWI3NTgyOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8QoKDANBgkqhkiG9w0BAQsFAAOCAQEAjbCShjgMJgfkscIM
3dNv4i1wMzadmJ5r02TmT4E8kZ/gQv55Z4apDIaUMjYRDmiGhIxaBQ2VNg7k3tti
6LgUEGcVJtBI+qFPDZcsZqF53qQR6oxVQ0B5FrJyxwZVy/F4S4R6uIYQIMfcZukc
uvFmrbCBG9gY+O4GVzztCi5NlxqJLfjcItZgcJqgCKFxnFFmDY7yayTq03syGO9D
9DDguFljPUMuc4by/e5WkC8juJv+XknI1fi/bH7qzm+FX1UZUZ5Nsk0Ygeb4J+OD
bsf+kSjqyJLCYNR3+YPBX09enboZ+i0Md+wRC5F52xtD1RsJEgkFMeJf+60icA3E
44+fpg==
-----END CERTIFICATE-----