Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9cb6dc6fb4e70ecdb7fc7e899b93f887c5c16f11.roa
File:                     9cb6dc6fb4e70ecdb7fc7e899b93f887c5c16f11.roa (raw, json)
Hash identifier:          /xb+lasHFEKz9lPNeEOb7J/633lbAm5B8vkNt1bkm74=
Subject key identifier:   0B:50:3E:45:A9:54:B2:92:F4:03:C0:6A:19:C4:04:84:CA:0A:66:21
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1811E0
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9cb6dc6fb4e70ecdb7fc7e899b93f887c5c16f11.roa
Signing time:             Fri 12 Aug 2022 17:46:53 +0000
ROA not before:           Fri 12 Aug 2022 17:22:48 +0000
ROA not after:            Mon 12 Aug 2024 17:22:48 +0000
asID:                     3790
IP address blocks:        190.10.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577440 (0x1811e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Aug 12 17:22:48 2022 GMT
            Not After : Aug 12 17:22:48 2024 GMT
        Subject: CN=9cb6dc6fb4e70ecdb7fc7e899b93f887c5c16f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:3f:07:20:d5:f5:a9:68:ee:60:a9:ab:78:
                    14:a6:6f:09:e2:99:11:bc:9e:a3:b0:56:ae:97:49:
                    fa:d1:e7:62:c0:ef:bf:99:c0:f9:23:f3:75:d8:21:
                    ec:e5:d4:bb:fe:26:c6:fe:58:1e:9a:65:9a:9a:49:
                    26:8e:95:02:17:be:7e:1e:c7:1c:13:42:bd:f7:8e:
                    b7:54:a8:35:4a:8d:7a:2d:9d:30:ba:6f:3b:e5:ec:
                    8e:ad:27:46:d2:a3:d2:b0:fa:0f:ac:fd:74:f4:4e:
                    31:e4:a5:79:73:b2:da:d2:43:06:87:7d:ac:9b:25:
                    89:25:6b:b0:ee:2e:db:a9:22:e5:0d:67:cd:f9:c4:
                    54:01:da:eb:b9:3d:e7:53:96:77:a1:05:77:ab:85:
                    e4:2e:91:28:2d:eb:90:d2:39:27:d3:01:67:a0:09:
                    17:0a:32:ac:36:ce:5b:81:1c:62:be:e5:11:ef:b1:
                    37:29:c8:8f:32:ff:41:ef:8f:27:54:17:73:06:83:
                    59:b0:f6:fd:7f:4f:4f:d4:de:49:98:15:c9:34:fa:
                    76:c6:a3:25:c4:11:30:55:83:a0:00:8e:6f:b5:5c:
                    79:6d:28:76:1a:0a:08:ea:c6:3d:12:9e:53:e2:26:
                    f0:ac:dd:1e:5b:30:d4:7c:c6:dd:87:46:95:1d:f7:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:3E:45:A9:54:B2:92:F4:03:C0:6A:19:C4:04:84:CA:0A:66:21
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/9cb6dc6fb4e70ecdb7fc7e899b93f887c5c16f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:04:ff:95:98:83:12:96:0a:78:fe:fd:ce:2d:6a:1a:d5:
         25:b1:e7:7d:4a:c2:bc:d7:43:93:6e:0d:26:42:54:96:fe:49:
         b6:35:a7:21:6d:a9:41:45:99:17:9d:04:06:c5:f5:bb:ec:a8:
         e1:f4:4a:74:64:b2:00:96:ce:f6:da:8a:a7:56:a8:fd:b9:bc:
         cf:5e:0c:cd:a7:77:93:d4:b5:a5:9b:b6:55:c3:f7:6f:79:3d:
         5b:13:64:d2:2e:64:d6:54:12:90:41:51:01:81:cd:fe:ce:39:
         75:fb:7c:29:11:9c:48:8a:2e:08:3d:2f:0a:5d:1f:c9:54:ee:
         98:66:d4:f3:f0:c4:7b:15:89:f1:ce:4d:d5:1b:02:86:5b:de:
         33:5e:29:02:4d:19:c4:6a:2d:35:d0:1b:b2:d9:ca:43:da:39:
         dc:ac:ba:8d:d1:52:13:5a:b7:2b:4c:71:19:4f:c9:48:13:b3:
         3f:00:54:e6:47:90:a4:19:2e:2d:13:1a:59:b5:63:44:8e:ba:
         2c:93:28:3d:66:cc:71:fb:ec:37:eb:7c:49:8b:b2:9f:b2:d4:
         fd:75:3a:2a:4b:ef:dd:b6:17:00:21:f9:80:d0:3c:03:3c:1f:
         a8:c6:00:fa:0b:f3:96:fa:45:7f:4c:2b:9e:84:b1:0a:50:9f:
         08:91:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----