Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a78e56851862579d53adbf4e794f5f1e7ead4bb8.roa
File:                     a78e56851862579d53adbf4e794f5f1e7ead4bb8.roa (raw, json)
Hash identifier:          FSjPvLuBRKEAjHIABio93hdEQKpH2PVImps/kf2QHWg=
Subject key identifier:   13:49:B7:E1:2D:4A:7C:30:79:AE:C7:61:37:B4:EB:16:26:A0:3E:59
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       197547
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a78e56851862579d53adbf4e794f5f1e7ead4bb8.roa
Signing time:             Thu 15 Sep 2022 20:47:40 +0000
ROA not before:           Thu 15 Sep 2022 20:47:10 +0000
ROA not after:            Sun 15 Sep 2024 20:47:10 +0000
asID:                     3790
IP address blocks:        190.10.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668423 (0x197547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:47:10 2022 GMT
            Not After : Sep 15 20:47:10 2024 GMT
        Subject: CN=a78e56851862579d53adbf4e794f5f1e7ead4bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:c0:aa:7e:1d:60:98:12:02:85:97:b0:f3:
                    f7:1f:fa:83:84:e0:58:63:16:a0:9f:e9:68:02:65:
                    2c:a7:ce:d6:31:9c:f0:21:a8:df:4d:6a:18:65:cc:
                    8a:1a:b7:ce:22:0f:d2:e9:6b:30:7e:df:f1:5d:e7:
                    d0:ce:63:90:15:a6:fb:2a:f2:d5:b0:15:b0:a1:a4:
                    7c:31:1d:ba:22:4b:a0:57:ea:99:fb:d1:84:eb:4e:
                    a2:f1:8d:5b:ac:51:6d:2f:33:8c:0c:a2:a4:54:43:
                    d2:8d:28:e1:4a:20:e2:c4:15:8c:3c:12:82:65:e9:
                    c9:e3:e2:9d:9c:ab:e1:4c:f4:d5:9b:41:1e:8d:da:
                    00:d7:f9:ab:e9:35:28:31:08:c0:70:70:e9:bc:74:
                    78:7d:38:51:17:5e:79:ab:ef:b4:8f:b3:76:f3:68:
                    4c:17:55:e6:ea:e9:80:a3:03:c6:0a:07:58:19:b6:
                    15:91:47:06:c8:c8:5a:1a:2d:00:97:a1:5c:17:f8:
                    ce:5d:c0:3e:af:2a:fe:0c:66:46:88:17:56:7b:cf:
                    42:26:c3:fc:7a:1b:bc:06:88:a1:73:a4:98:83:32:
                    8f:d7:f4:73:7d:5a:0d:dd:ad:53:80:7a:95:fe:e0:
                    3d:e1:74:ed:1c:99:fe:d8:bd:bc:9d:9b:74:b1:10:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:B7:E1:2D:4A:7C:30:79:AE:C7:61:37:B4:EB:16:26:A0:3E:59
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a78e56851862579d53adbf4e794f5f1e7ead4bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:42:c4:71:14:52:61:05:b5:df:ec:4e:4f:4d:3a:0d:00:79:
         2b:12:dd:c9:fe:13:88:93:aa:72:38:38:e8:73:7b:6c:a3:10:
         57:16:ad:9d:a3:16:80:10:7c:69:97:d4:ba:30:c8:7d:25:73:
         48:2b:7d:ea:90:9f:61:54:c4:00:58:7e:c4:85:cf:2e:2d:2a:
         7b:b0:48:05:c8:e2:59:82:fd:15:d5:41:a7:2e:67:c2:65:f9:
         54:e2:0f:71:7a:87:a7:f0:c8:d7:52:17:45:ca:dd:94:b0:93:
         5f:97:f6:38:9f:af:0f:8b:96:08:a4:37:a7:6a:37:64:57:74:
         ed:33:d9:df:8c:3d:e5:bf:0f:1d:54:80:48:ec:62:d1:da:0c:
         66:4a:b3:13:b8:49:f0:ea:0a:30:d8:d7:8b:36:1d:e1:39:e9:
         ba:67:eb:1b:68:03:e8:3a:7a:97:9a:f4:d8:17:d3:0e:fb:dd:
         3c:ea:1d:96:f7:52:71:34:c1:ad:68:2c:8e:09:6f:48:0e:e9:
         db:28:65:26:c8:72:f2:0a:d0:e4:d3:56:ed:77:0f:c6:66:88:
         67:fc:6a:ad:15:10:4c:12:7e:fd:03:29:c4:59:ce:69:0b:80:
         6d:00:c1:0b:41:39:9a:88:27:a6:f5:7e:81:cf:45:63:e8:48:
         66:0a:44:28
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGXVHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTE1
MjA0NzEwWhcNMjQwOTE1MjA0NzEwWjAzMTEwLwYDVQQDEyhhNzhlNTY4NTE4NjI1
NzlkNTNhZGJmNGU3OTRmNWYxZTdlYWQ0YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwQvAqn4dYJgSAoWXsPP3H/qDhOBYYxagn+loAmUsp87WMZzw
IajfTWoYZcyKGrfOIg/S6Wswft/xXefQzmOQFab7KvLVsBWwoaR8MR26IkugV+qZ
+9GE606i8Y1brFFtLzOMDKKkVEPSjSjhSiDixBWMPBKCZenJ4+KdnKvhTPTVm0Ee
jdoA1/mr6TUoMQjAcHDpvHR4fThRF155q++0j7N282hMF1Xm6umAowPGCgdYGbYV
kUcGyMhaGi0Al6FcF/jOXcA+ryr+DGZGiBdWe89CJsP8ehu8Boihc6SYgzKP1/Rz
fVoN3a1TgHqV/uA94XTtHJn+2L28nZt0sRBsrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBNJt+EtSnwwea7HYTe06xYmoD5ZMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2E3OGU1Njg1MTg2MjU3OWQ1M2FkYmY0ZTc5NGY1ZjFlN2VhZDRiYjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb4KejANBgkqhkiG9w0BAQsFAAOCAQEAR0LEcRRSYQW13+xO
T006DQB5KxLdyf4TiJOqcjg46HN7bKMQVxatnaMWgBB8aZfUujDIfSVzSCt96pCf
YVTEAFh+xIXPLi0qe7BIBcjiWYL9FdVBpy5nwmX5VOIPcXqHp/DI11IXRcrdlLCT
X5f2OJ+vD4uWCKQ3p2o3ZFd07TPZ34w95b8PHVSASOxi0doMZkqzE7hJ8OoKMNjX
izYd4TnpumfrG2gD6Dp6l5r02BfTDvvdPOodlvdScTTBrWgsjglvSA7p2yhlJshy
8grQ5NNW7XcPxmaIZ/xqrRUQTBJ+/QMpxFnOaQuAbQDBC0E5mognpvV+gc9FY+hI
ZgpEKA==
-----END CERTIFICATE-----