Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/abaf1c4ad4166b6bd34df2debc7286489f3e4914.roa
File:                     abaf1c4ad4166b6bd34df2debc7286489f3e4914.roa (raw, json)
Hash identifier:          DLpCweXLhOqJ6h3gXb90c9WgvXKxMlriTu7NBXbE1Uk=
Subject key identifier:   99:9E:DE:A5:C9:FF:54:90:C0:3A:98:5B:86:AA:58:B5:05:DB:CD:97
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A1364
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/abaf1c4ad4166b6bd34df2debc7286489f3e4914.roa
Signing time:             Thu 22 Sep 2022 20:21:26 +0000
ROA not before:           Thu 22 Sep 2022 20:16:21 +0000
ROA not after:            Sun 22 Sep 2024 20:16:21 +0000
asID:                     3790
IP address blocks:        190.241.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708900 (0x1a1364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:16:21 2022 GMT
            Not After : Sep 22 20:16:21 2024 GMT
        Subject: CN=abaf1c4ad4166b6bd34df2debc7286489f3e4914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:75:e5:30:f5:86:07:e5:39:14:c5:bb:8a:
                    34:95:cf:1e:ae:f6:0d:30:0a:81:4a:bd:e8:9e:ad:
                    4f:99:39:c1:b3:f6:a4:fb:04:b9:0f:a1:76:1f:e9:
                    d6:00:55:78:93:e2:90:f5:33:ff:ae:90:c6:bb:aa:
                    0e:0f:a7:88:90:78:0d:f1:07:8b:c0:be:7e:8b:67:
                    8c:2a:a6:0e:74:27:c7:9b:06:c4:e4:76:f6:e7:75:
                    b4:36:38:d2:ff:55:8e:e3:60:d7:6f:cd:37:79:4c:
                    08:54:83:f4:be:b8:7a:93:9c:f1:09:f8:66:7d:97:
                    ba:3f:56:d1:7f:ff:46:66:38:9c:ac:bf:17:95:7e:
                    2f:14:82:50:47:a9:c5:db:60:5b:f6:51:cd:65:94:
                    9e:ac:bb:a7:22:09:1c:76:46:8b:90:d5:4c:f6:8d:
                    92:a2:88:1e:ef:e1:b8:a1:49:2a:ce:43:35:b1:57:
                    10:58:73:1a:ba:6b:36:8d:09:5a:dd:b2:42:e0:0e:
                    34:5c:d1:19:81:5c:d5:4d:36:71:73:f6:9e:d6:dd:
                    fd:05:0b:f5:06:97:84:76:3b:a9:2e:d1:4c:b1:6b:
                    2d:64:65:bc:25:a4:02:53:07:39:c5:e0:f7:77:ee:
                    ad:fa:4a:f0:b0:22:01:45:22:24:5b:28:a6:1e:1a:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:DE:A5:C9:FF:54:90:C0:3A:98:5B:86:AA:58:B5:05:DB:CD:97
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/abaf1c4ad4166b6bd34df2debc7286489f3e4914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:93:fc:ee:ac:d9:14:d9:10:d1:52:83:b9:be:62:6a:f4:
         0b:85:fd:d9:00:69:f6:54:b9:ad:52:a9:f3:80:b3:98:95:f8:
         fa:6f:8b:38:37:93:84:20:48:3e:72:49:e5:0f:e4:ab:d5:ba:
         f6:2d:cd:03:6c:8d:a1:57:98:99:5a:6c:db:01:72:09:29:3c:
         cb:00:9e:30:e4:39:2e:e6:be:48:6c:db:92:00:75:ec:03:e8:
         3b:11:27:ad:79:4f:18:40:70:40:5d:d6:2a:db:8a:5f:67:61:
         59:6a:e5:e0:ae:3d:b3:ad:a3:19:3b:ad:65:c5:45:bb:2d:77:
         b8:f9:e9:c8:18:82:f3:e7:12:cd:09:a0:80:d6:2c:ee:1e:90:
         4a:80:f7:65:99:20:35:0e:9f:ee:2e:65:e5:1e:75:be:60:8f:
         42:19:e1:eb:1d:1f:1d:46:5f:3a:8b:31:c2:88:55:86:02:1b:
         ce:c8:b3:1e:8e:ad:a9:18:ba:b3:bb:0c:59:d0:4a:af:d8:8a:
         42:24:66:5b:ad:92:13:84:61:8e:b8:f3:ad:4d:fb:9f:50:96:
         72:9f:cd:10:c4:b3:f9:2d:5f:9a:d6:ac:ab:13:c9:2a:7c:90:
         4a:4f:a2:f4:f1:92:85:cb:cb:96:3c:d3:2b:f4:fe:63:f4:b6:
         e5:4e:e2:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGhNkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTIy
MjAxNjIxWhcNMjQwOTIyMjAxNjIxWjAzMTEwLwYDVQQDEyhhYmFmMWM0YWQ0MTY2
YjZiZDM0ZGYyZGViYzcyODY0ODlmM2U0OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoU115TD1hgflORTFu4o0lc8ervYNMAqBSr3onq1PmTnBs/ak
+wS5D6F2H+nWAFV4k+KQ9TP/rpDGu6oOD6eIkHgN8QeLwL5+i2eMKqYOdCfHmwbE
5Hb253W0NjjS/1WO42DXb803eUwIVIP0vrh6k5zxCfhmfZe6P1bRf/9GZjicrL8X
lX4vFIJQR6nF22Bb9lHNZZSerLunIgkcdkaLkNVM9o2Sooge7+G4oUkqzkM1sVcQ
WHMaums2jQla3bJC4A40XNEZgVzVTTZxc/ae1t39BQv1BpeEdjupLtFMsWstZGW8
JaQCUwc5xeD3d+6t+krwsCIBRSIkWyimHhqGVwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJme3qXJ/1SQwDqYW4aqWLUF282XMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2FiYWYxYzRhZDQxNjZiNmJkMzRkZjJkZWJjNzI4NjQ4OWYzZTQ5MTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA77xQDANBgkqhkiG9w0BAQsFAAOCAQEAHT+T/O6s2RTZENFS
g7m+Ymr0C4X92QBp9lS5rVKp84CzmJX4+m+LODeThCBIPnJJ5Q/kq9W69i3NA2yN
oVeYmVps2wFyCSk8ywCeMOQ5Lua+SGzbkgB17APoOxEnrXlPGEBwQF3WKtuKX2dh
WWrl4K49s62jGTutZcVFuy13uPnpyBiC8+cSzQmggNYs7h6QSoD3ZZkgNQ6f7i5l
5R51vmCPQhnh6x0fHUZfOosxwohVhgIbzsizHo6tqRi6s7sMWdBKr9iKQiRmW62S
E4RhjrjzrU37n1CWcp/NEMSz+S1fmtasqxPJKnyQSk+i9PGShcvLljzTK/T+Y/S2
5U7ixw==
-----END CERTIFICATE-----