Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80d9f7bc0059ded76c39a2dd39ac126e3d14a6f4.roa
File:                     80d9f7bc0059ded76c39a2dd39ac126e3d14a6f4.roa (raw, json)
Hash identifier:          agNH3KsV5k5B/mlHICW62P9/QLr+Yveldz1xQPJHTeo=
Subject key identifier:   10:1D:7B:5D:FF:09:67:88:CF:9C:75:D0:17:6A:04:AB:CA:C6:D1:78
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B7002
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80d9f7bc0059ded76c39a2dd39ac126e3d14a6f4.roa
Signing time:             Tue 27 Sep 2022 22:23:32 +0000
ROA not before:           Tue 27 Sep 2022 22:22:44 +0000
ROA not after:            Fri 27 Sep 2024 22:22:44 +0000
asID:                     11830
IP address blocks:        190.10.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798146 (0x1b7002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 22:22:44 2022 GMT
            Not After : Sep 27 22:22:44 2024 GMT
        Subject: CN=80d9f7bc0059ded76c39a2dd39ac126e3d14a6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:ae:f6:98:36:da:9d:e7:e3:b7:ca:df:7b:
                    24:28:1f:8d:a1:b4:15:ab:c0:35:4f:a6:a4:5b:20:
                    de:b2:2a:c2:76:55:b1:79:79:ac:91:f2:a3:52:04:
                    8d:67:53:67:0e:7a:5f:2e:a1:d4:cb:a3:ff:10:26:
                    b2:2a:19:8e:6e:51:30:fb:a2:54:3f:de:13:07:a1:
                    ab:10:b6:54:61:b0:55:71:23:7b:ef:09:b7:6c:d2:
                    61:2b:62:4e:93:1a:36:91:bd:e8:59:b9:15:3c:fc:
                    b2:b5:61:33:21:af:a9:32:17:27:e3:d1:c1:9b:17:
                    b7:4a:e0:e3:f0:4f:4e:48:6e:50:0f:8b:ac:87:56:
                    9c:f8:92:1d:41:a3:d0:73:94:ef:77:f9:46:f4:f1:
                    31:54:de:36:14:1c:fa:b1:23:c8:4d:2d:4b:f4:3b:
                    23:72:80:1d:9a:5e:0a:e2:83:58:20:c1:c8:5a:a2:
                    8f:5d:e2:7e:ae:a3:37:86:71:3d:91:10:8b:d0:d2:
                    1f:69:52:d6:34:49:06:7e:10:fe:d5:6b:8a:ca:c2:
                    86:5a:ca:42:b2:38:1a:0d:f4:2b:fb:8a:5b:40:33:
                    1b:c3:6a:e5:0b:3a:77:e1:2b:af:85:1c:a8:ed:c9:
                    32:bf:fa:21:ea:99:d9:4c:25:fc:41:82:df:01:9c:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1D:7B:5D:FF:09:67:88:CF:9C:75:D0:17:6A:04:AB:CA:C6:D1:78
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/80d9f7bc0059ded76c39a2dd39ac126e3d14a6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:8e:5c:13:ee:fd:22:2c:03:69:b1:30:96:d4:b5:4c:3f:
         c2:4a:a1:03:75:1b:e0:45:cf:38:8d:ea:9c:a5:3c:9f:65:c3:
         5a:06:19:f0:ee:c4:93:a9:3a:8e:de:bc:3e:72:f2:9a:e7:e9:
         4c:bb:bc:90:58:ef:db:72:87:9e:1b:6c:a1:e7:f1:f1:31:b4:
         df:d5:41:10:fa:ce:0c:29:d9:c2:da:da:b9:a1:7e:bb:72:43:
         7f:fe:b0:94:ad:8b:a1:5c:75:0e:f7:8a:73:cb:19:21:6f:18:
         91:d0:90:01:84:1e:09:08:41:d0:95:dd:b0:fe:9d:23:3a:03:
         d2:1d:96:8e:66:c6:ae:f7:16:f2:fd:19:ca:bf:f6:46:c0:71:
         6d:e4:fb:f7:4e:5a:69:a7:96:5a:fc:f7:c4:2b:76:03:e2:8c:
         eb:41:05:e9:cc:6c:dc:fe:dc:28:e6:9a:01:a7:71:24:f8:cc:
         b0:64:e8:1f:c7:6d:6d:2d:30:a7:07:ae:7f:50:82:51:f3:39:
         66:65:fd:a0:bc:b6:b7:83:4e:e8:80:50:e9:1d:63:b2:0b:24:
         93:0c:52:29:09:65:3c:28:73:2d:0b:6f:de:b1:2f:29:b4:9b:
         35:ab:b7:07:e6:bf:29:0f:69:14:4f:1b:ad:0d:0f:20:91:2b:
         90:d5:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----