Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/639b420cf2d4abe136e20df338012b739bc0f1ec.roa
File:                     639b420cf2d4abe136e20df338012b739bc0f1ec.roa (raw, json)
Hash identifier:          9d9NXddbpceycqoftcQbMj+bAHo1sHvVxbadYRZyujk=
Subject key identifier:   9C:6D:58:78:2F:A8:B1:6C:53:03:5A:7F:28:CA:65:A3:56:C6:D1:38
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A380B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/639b420cf2d4abe136e20df338012b739bc0f1ec.roa
Signing time:             Thu 22 Sep 2022 20:27:07 +0000
ROA not before:           Thu 22 Sep 2022 20:26:33 +0000
ROA not after:            Sun 22 Sep 2024 20:26:33 +0000
asID:                     3790
IP address blocks:        190.241.119.0/24 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718283 (0x1a380b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:26:33 2022 GMT
            Not After : Sep 22 20:26:33 2024 GMT
        Subject: CN=639b420cf2d4abe136e20df338012b739bc0f1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:2b:94:24:0e:8a:de:e5:bb:43:e6:21:3c:
                    93:1f:19:0e:60:03:06:22:a9:fd:a2:60:4a:90:78:
                    e5:f9:c2:63:7e:45:9b:84:7f:df:a2:62:52:28:9e:
                    bd:ad:10:8a:a7:5e:d9:59:b2:f4:ee:89:4f:10:b5:
                    c1:f5:7e:b4:28:82:c9:9b:fc:e8:5d:ac:9a:09:e6:
                    b8:81:b8:2f:53:97:19:c9:0f:54:e0:e0:2f:9e:c8:
                    7a:ea:33:11:08:c0:7d:94:76:8d:3c:5f:9a:fc:51:
                    8b:2d:4b:23:7f:f9:67:f2:a7:98:71:a6:70:91:b4:
                    d5:bf:d4:78:03:3a:9c:52:2b:ac:cb:f2:b3:f6:2d:
                    f4:0d:4f:0e:0f:d3:e7:14:9b:f2:d5:85:c3:98:79:
                    bd:61:47:20:ef:1f:07:34:ea:b5:bc:2e:3d:53:01:
                    12:9c:98:ff:b2:a8:7c:16:a9:a3:2a:51:a6:7c:ba:
                    4a:b1:0f:75:c3:80:fd:dc:ef:07:71:ea:f3:54:0d:
                    a2:09:6d:15:32:ff:cb:22:40:c0:70:0b:bf:7f:05:
                    db:ed:c1:50:5c:0d:cd:c0:84:1f:f3:f3:9c:2e:cd:
                    08:c9:45:30:9c:74:4e:ed:7a:c4:29:8a:12:b4:8f:
                    79:80:94:aa:69:06:b2:d8:d2:8a:d0:d5:f1:e9:61:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6D:58:78:2F:A8:B1:6C:53:03:5A:7F:28:CA:65:A3:56:C6:D1:38
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/639b420cf2d4abe136e20df338012b739bc0f1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:a2:f5:a5:3a:6d:91:28:57:9d:29:a4:10:fe:a9:f7:50:
         9b:66:14:49:bf:d3:e9:41:43:4f:ca:75:4c:77:cf:bf:78:2e:
         dc:f6:82:34:ec:b5:77:18:66:0f:3e:4f:df:d1:66:3f:83:f1:
         be:44:92:f5:59:80:94:d7:bb:fd:4d:d8:00:5b:22:b8:65:8c:
         5c:06:26:09:e5:bd:ed:1d:35:54:bb:d8:4e:b3:0f:4c:ab:0a:
         2a:52:d4:46:5f:a4:1f:70:9c:a5:9f:38:fa:86:90:cd:a8:ee:
         e5:07:01:0c:4d:88:5e:8c:a3:c9:40:5b:e6:57:dd:9f:1d:9d:
         2b:37:1a:95:77:32:89:e4:c2:4f:df:91:7f:1d:dc:dc:53:07:
         e5:89:e4:a5:3f:3d:59:c6:c2:2c:64:ef:46:7a:0f:33:32:8e:
         26:2e:ae:43:9b:08:bf:e9:d8:1e:f8:c4:0d:27:c0:b2:9b:ff:
         84:b5:c7:42:04:c5:58:0f:1a:fc:ca:ca:f7:47:27:17:97:98:
         7d:fc:26:0c:e0:cd:e1:89:b0:92:e3:46:12:80:f1:c3:37:27:
         ff:0e:cf:6a:b8:e7:3f:8d:13:a8:e8:0a:d0:57:05:98:45:e4:
         b3:4e:b4:12:be:f0:ee:26:9f:34:93:30:2e:da:d6:84:5e:4c:
         e7:e4:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----