Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/858c1ff51e8881e0cd934590e1858abe0638337b.roa
File:                     858c1ff51e8881e0cd934590e1858abe0638337b.roa (raw, json)
Hash identifier:          HmLBY5+pO+D0gPOzcpUI7qw+bvLK1Ky08wLxt0oF/Lg=
Subject key identifier:   39:B4:7D:17:34:BF:B6:EB:BB:F1:64:85:67:62:0F:6F:0B:99:CE:55
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19FD8B
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/858c1ff51e8881e0cd934590e1858abe0638337b.roa
Signing time:             Thu 22 Sep 2022 20:13:36 +0000
ROA not before:           Thu 22 Sep 2022 20:13:10 +0000
ROA not after:            Sun 22 Sep 2024 20:13:10 +0000
asID:                     3790
IP address blocks:        190.241.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703307 (0x19fd8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:13:10 2022 GMT
            Not After : Sep 22 20:13:10 2024 GMT
        Subject: CN=858c1ff51e8881e0cd934590e1858abe0638337b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:0c:e1:f4:a7:9e:b3:8f:5b:40:02:6a:6c:
                    31:b3:45:2a:62:b0:5a:ed:14:bc:23:3a:43:5b:5a:
                    ee:24:61:5a:6f:ae:cc:5b:ea:79:0b:b4:2a:73:66:
                    b1:fa:23:b5:c2:95:27:a8:6d:d7:4f:ff:a0:d9:80:
                    5a:84:b3:79:5e:ec:cb:59:5a:d5:3a:52:ca:f2:b9:
                    21:3b:28:30:5f:df:ab:74:09:7b:98:93:f2:27:9d:
                    bb:4e:0a:4c:a5:0f:27:11:04:aa:63:18:08:57:20:
                    c4:35:52:f5:73:f7:64:fd:ec:5d:93:5f:23:57:3e:
                    5c:c6:dc:27:7e:a9:50:50:9f:bf:ae:fe:42:c7:d6:
                    ed:47:b3:c4:3c:3c:44:6c:84:ea:a7:04:63:bb:15:
                    8a:d9:dc:4d:c7:49:bd:64:4d:73:72:0e:bd:8e:83:
                    90:a3:a6:e0:6a:87:d8:f2:de:47:79:d1:4b:55:d5:
                    e7:be:2c:6b:55:83:4a:39:39:d7:47:fa:5a:ca:3b:
                    65:b9:5b:6f:a2:6f:2e:2d:de:5b:6d:df:82:d7:33:
                    af:2f:25:be:37:45:c6:82:ef:19:e5:c9:6e:d0:c3:
                    4c:60:c8:5e:20:12:24:ac:e8:8c:ee:ee:05:16:31:
                    30:e8:6c:c7:9f:0b:27:e3:0d:a0:13:b3:10:d6:d0:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:7D:17:34:BF:B6:EB:BB:F1:64:85:67:62:0F:6F:0B:99:CE:55
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/858c1ff51e8881e0cd934590e1858abe0638337b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:37:9f:e8:e4:95:55:1e:88:6d:39:e0:bf:dc:68:11:e6:9b:
         58:72:1d:42:be:ce:84:2d:56:ea:ae:62:f9:6d:f6:f8:58:c0:
         79:5b:52:5e:91:0c:87:2b:d4:27:23:99:9c:9b:35:cb:ff:a8:
         df:da:88:ea:6f:e8:96:eb:2f:92:70:e8:e5:a7:d1:db:6b:f7:
         d8:2a:e1:39:f2:7c:b1:ac:a1:4d:30:73:77:cc:a7:30:3a:68:
         a2:05:b6:df:b3:50:b1:67:52:28:18:e6:3b:87:3d:cb:30:27:
         68:ae:cb:b8:09:c1:16:c5:75:2f:b6:84:a8:4c:7b:bb:62:e5:
         8c:b7:d0:7b:7d:ab:04:04:f3:68:22:4f:0d:db:bd:32:1d:8a:
         3f:7d:e6:d5:ac:8d:7b:ab:a1:c7:12:df:ca:e8:24:26:a4:0d:
         2f:69:b0:47:ea:c0:34:93:5d:f4:66:bd:29:12:b5:7f:e6:05:
         a0:f6:cc:cb:b8:49:2b:ce:4c:60:7e:38:1d:52:3c:8d:41:ab:
         9c:b0:25:e2:e5:15:0c:19:2b:32:14:99:32:cd:e3:bd:be:fa:
         8b:fa:9e:d8:b1:7e:c8:01:34:94:ca:cf:67:96:b0:6f:ff:91:
         99:f5:ce:e3:57:38:26:fd:5a:18:52:8d:0e:fd:66:78:8f:58:
         3b:de:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----