Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a9bc45ca4ecfdedf8d980914a469f72aab18571d.roa
File:                     a9bc45ca4ecfdedf8d980914a469f72aab18571d.roa (raw, json)
Hash identifier:          gTKu5S4jeQkcwiDznxhKUxdGhwIEPdqZnsf0xguWovU=
Subject key identifier:   36:B4:18:B2:6B:E7:84:9D:C8:9C:13:37:A1:B0:EC:14:DE:00:5A:5B
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B28E1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a9bc45ca4ecfdedf8d980914a469f72aab18571d.roa
Signing time:             Tue 27 Sep 2022 17:14:45 +0000
ROA not before:           Tue 27 Sep 2022 17:13:28 +0000
ROA not after:            Fri 27 Sep 2024 17:13:28 +0000
asID:                     11830
IP address blocks:        190.10.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779937 (0x1b28e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:13:28 2022 GMT
            Not After : Sep 27 17:13:28 2024 GMT
        Subject: CN=a9bc45ca4ecfdedf8d980914a469f72aab18571d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:ba:04:94:ca:bc:2d:8b:c9:89:11:0f:0f:
                    fd:ff:cc:a9:26:3a:3b:57:f3:14:59:d0:4e:aa:b8:
                    a3:fb:59:3a:ca:ae:f2:32:1e:a5:5b:66:d5:ce:5c:
                    d4:87:c9:44:29:e5:12:1e:e2:be:0a:b5:d7:e2:dc:
                    f4:d0:ac:80:e1:31:05:d0:c7:11:09:fc:ea:f3:4a:
                    f7:42:5c:01:17:9f:a8:50:85:03:5c:a2:0d:1f:9c:
                    8e:18:7a:25:53:8d:4b:ff:75:7d:aa:03:43:c0:55:
                    9f:66:16:ed:82:44:fa:fe:5f:b6:97:e4:ab:c6:82:
                    0d:0c:87:e8:65:6a:ea:d0:59:9c:84:8f:b7:bd:24:
                    5c:24:ea:fc:e1:f7:55:ca:64:48:88:7a:ce:95:d9:
                    ce:ec:50:dd:38:d0:da:b2:07:59:32:7b:fd:b1:b8:
                    44:29:77:b2:66:2c:a7:a7:fa:8f:b8:dd:f6:4c:4f:
                    ed:52:f1:9f:63:9d:5c:23:24:e6:06:39:39:a5:85:
                    79:0c:12:34:7a:b8:1f:6a:e4:60:a1:ab:a1:d9:29:
                    02:64:a2:c2:81:c9:ed:5e:3a:e5:cc:a5:a4:d3:0e:
                    99:ae:d8:f2:3f:f4:36:4b:64:f5:43:16:5b:c1:50:
                    b5:a4:19:76:da:31:2c:55:8a:48:18:1e:67:34:34:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:18:B2:6B:E7:84:9D:C8:9C:13:37:A1:B0:EC:14:DE:00:5A:5B
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a9bc45ca4ecfdedf8d980914a469f72aab18571d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:c6:f2:c9:78:82:2b:b5:cb:d2:e6:2f:ae:17:51:8e:ed:
         4a:dc:f6:38:7e:96:31:87:07:d0:76:d5:80:21:d5:2b:ac:40:
         37:1f:a3:c6:31:8b:f7:81:7f:e4:3b:4f:11:a7:88:94:c0:4b:
         68:c4:43:27:25:d5:bd:d3:84:8f:5b:24:15:72:34:12:b1:d6:
         59:73:3b:2e:96:89:f9:8e:bc:5e:d3:0f:5c:6f:59:47:f1:3a:
         e4:da:63:80:60:20:8f:01:0b:a0:28:fb:55:fc:9c:ba:b2:61:
         96:40:86:8f:f2:08:fb:2e:67:4e:0a:13:b5:70:da:e3:1b:ae:
         b0:85:40:07:b5:0c:0e:eb:b6:54:a0:16:d1:6a:74:d1:73:c3:
         59:2e:05:80:4d:a1:e5:01:78:c4:2a:15:ea:80:9e:f1:cc:16:
         15:07:b0:de:0f:e5:7a:4d:8e:43:76:b1:72:b9:a5:ea:f1:82:
         56:be:db:f7:85:cb:e9:2a:ae:3c:bc:8c:99:52:e9:bd:58:8a:
         2e:b6:f2:d4:9f:dd:d7:88:3e:a5:99:32:31:50:33:f1:90:32:
         8a:c3:b8:9f:0f:35:49:39:b8:d8:a9:1a:0d:4c:90:d2:74:0b:
         7f:cd:a8:6e:dd:e8:ba:6c:75:7c:dd:eb:3b:bd:18:ce:86:79:
         ac:9e:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----