Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80aac8f526fa25c6ff79666b72ec65146c8b1465.roa
File:                     80aac8f526fa25c6ff79666b72ec65146c8b1465.roa (raw, json)
Hash identifier:          b4m/Zjp63EzrXyjMiCMozEDrG8QorT11/fbkbBjKm10=
Subject key identifier:   09:B9:1C:1E:99:F9:B1:24:43:66:AA:3C:6A:0E:6E:01:74:9C:DD:EC
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CF0EF
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80aac8f526fa25c6ff79666b72ec65146c8b1465.roa
Signing time:             Wed 28 Sep 2022 17:11:47 +0000
ROA not before:           Wed 28 Sep 2022 17:09:50 +0000
ROA not after:            Sat 28 Sep 2024 17:09:50 +0000
asID:                     11830
IP address blocks:        196.40.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896687 (0x1cf0ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 17:09:50 2022 GMT
            Not After : Sep 28 17:09:50 2024 GMT
        Subject: CN=80aac8f526fa25c6ff79666b72ec65146c8b1465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:de:11:97:10:af:c4:2a:19:f5:8e:ff:6c:
                    f4:ca:58:d6:4d:84:52:30:22:68:0f:87:5b:4c:9f:
                    19:0a:b7:4d:64:bf:1a:fd:d2:02:dd:0d:58:59:77:
                    c3:74:1f:a2:d8:24:4e:dd:d1:c8:d0:4e:0b:45:5d:
                    2d:48:35:9e:1e:8d:32:d4:aa:5e:14:fd:e3:79:4d:
                    30:9b:ea:78:da:3e:75:91:8f:59:79:6f:e8:f2:43:
                    7b:43:50:8f:35:8e:65:62:64:7c:5c:44:59:f8:1a:
                    74:c1:95:26:22:7f:32:60:38:4f:14:a1:7a:0c:ca:
                    4b:79:40:c3:69:ed:7b:ad:51:6f:f9:ae:67:f5:ad:
                    74:51:5f:4f:4f:99:b9:f6:de:01:58:28:d0:45:bd:
                    c2:66:64:5a:1d:89:89:87:9b:43:6f:f9:9b:d4:23:
                    46:2b:ab:22:f3:8d:84:4e:8b:cb:45:ce:2b:ad:44:
                    ee:0d:97:6b:0b:6c:ca:07:99:2d:c0:04:d3:b7:6d:
                    cd:f9:6f:25:59:36:a2:26:21:df:b7:d5:d2:ed:2c:
                    9d:92:14:8f:67:9d:c2:dc:5b:88:2f:ae:64:7f:4e:
                    72:72:be:d2:c5:d1:28:54:99:04:7d:e9:9e:17:ae:
                    8e:2d:07:0e:aa:c1:84:96:d3:c2:65:19:6f:1b:dc:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:1C:1E:99:F9:B1:24:43:66:AA:3C:6A:0E:6E:01:74:9C:DD:EC
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80aac8f526fa25c6ff79666b72ec65146c8b1465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:fc:04:ef:b9:95:67:11:63:36:f7:e4:bc:64:f4:6c:57:
         c0:8b:6a:2a:7b:fa:f2:ea:8c:0a:75:91:51:ed:0e:93:dc:33:
         ac:99:89:ba:d2:bc:44:34:d6:1c:f3:e1:56:a9:4e:02:57:5d:
         31:bb:bf:15:9d:89:f7:ab:ff:80:bb:54:36:f8:39:d7:1a:d8:
         1a:f1:53:2d:78:a6:6f:21:98:6d:95:a4:e0:59:5c:f8:58:80:
         57:a5:41:9b:45:53:41:28:54:f4:c9:56:95:0d:84:ba:28:42:
         aa:6b:e2:99:4f:d6:3e:24:d6:03:de:32:30:76:fd:a0:1a:04:
         04:f4:b0:eb:96:d5:92:a0:53:8f:c1:19:f1:7f:3b:e7:95:5c:
         ae:33:77:48:c6:39:11:d0:ff:64:61:7d:d6:3d:b0:d4:d7:15:
         f6:30:48:5b:f1:4d:6b:d2:19:9b:05:8f:47:86:ad:48:5f:bf:
         39:31:ea:af:5d:7f:c1:5b:05:fe:64:6f:09:ce:16:21:be:8c:
         ce:75:48:b3:7c:7a:5a:65:04:a1:e5:42:37:8d:5a:d4:7a:8c:
         20:68:35:f7:32:fd:fb:ed:7b:20:26:02:90:d8:ec:8f:d7:16:
         90:3b:50:ed:f5:4a:37:65:aa:59:84:31:d6:cf:26:53:ac:8b:
         aa:11:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----