Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/aeea462a06bae59ab67939fe3006a9ded01950c6.roa
File:                     aeea462a06bae59ab67939fe3006a9ded01950c6.roa (raw, json)
Hash identifier:          kcYvSw4upGH3AWjuSlajWBGAepRyoWK0JqRy+nOD8IQ=
Subject key identifier:   C5:A3:61:C0:82:49:0F:46:6C:F1:8A:90:86:EA:81:E5:BA:30:82:87
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AA200
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/aeea462a06bae59ab67939fe3006a9ded01950c6.roa
Signing time:             Thu 22 Sep 2022 20:56:22 +0000
ROA not before:           Thu 22 Sep 2022 20:55:32 +0000
ROA not after:            Sun 22 Sep 2024 20:55:32 +0000
asID:                     3790
IP address blocks:        196.40.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745408 (0x1aa200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:55:32 2022 GMT
            Not After : Sep 22 20:55:32 2024 GMT
        Subject: CN=aeea462a06bae59ab67939fe3006a9ded01950c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:e5:ea:6b:19:79:a2:53:bf:68:73:84:0b:
                    d2:72:3c:5d:2b:ff:dc:0f:f0:c4:ac:1c:63:78:d3:
                    9e:56:15:4e:28:dc:91:71:24:cf:a1:a8:3b:14:07:
                    8f:fd:f2:8d:e2:65:b8:d2:25:b0:25:b0:a8:13:a8:
                    82:23:db:d1:53:c2:c6:0f:9e:2f:be:d0:63:e1:53:
                    75:fb:7c:ca:92:4a:81:70:44:20:df:54:18:b7:69:
                    01:e5:25:27:19:0c:0b:30:3f:5a:49:f4:32:5c:34:
                    a6:53:56:9a:34:e2:51:8c:c9:9e:91:d5:8d:95:e5:
                    0a:fe:fc:6e:a3:62:89:11:a5:41:6b:e1:7a:94:b2:
                    8c:dd:a6:2a:9d:83:28:33:cb:d5:2f:70:b3:27:93:
                    a8:6b:b5:e3:d8:b8:fa:09:f8:32:a7:05:95:c8:47:
                    eb:1d:12:18:7a:3b:e3:b9:b5:ac:08:da:2d:f9:71:
                    f1:23:85:91:3c:f0:01:e8:95:6c:31:e0:a8:65:04:
                    dc:e5:f7:93:68:04:51:09:c9:ad:b5:b8:a4:a4:57:
                    2e:77:87:98:27:83:85:68:d3:04:b7:b0:96:8e:f0:
                    fe:ac:ea:64:3d:11:ec:e2:58:6d:24:9e:31:fc:bf:
                    2f:60:24:c5:53:4d:3f:07:22:ea:19:f2:a9:97:d9:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:61:C0:82:49:0F:46:6C:F1:8A:90:86:EA:81:E5:BA:30:82:87
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/aeea462a06bae59ab67939fe3006a9ded01950c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:b3:e0:39:2b:c6:7c:a3:56:64:cd:4a:5a:a8:72:56:d2:
         5e:34:c3:db:e2:e3:5c:11:b8:f6:4a:3c:7f:49:72:72:b0:3b:
         6d:8e:c2:27:df:f4:13:52:f5:c4:e2:d4:49:f2:cc:3a:b4:6b:
         af:b8:c7:e4:7f:7f:ac:d7:ff:9c:fd:84:32:17:02:0d:b5:9f:
         10:e7:fd:21:0e:d5:fd:53:2c:21:a9:b6:f6:e2:da:ca:c3:1f:
         09:7e:dd:6b:26:a0:7a:fe:27:57:08:6c:f8:ce:72:89:94:7a:
         8e:6d:6b:87:2f:8a:f4:43:28:ae:e0:39:bd:ca:a0:4e:5b:cf:
         22:d2:5a:fe:6d:f3:b1:d4:8d:98:59:48:07:d9:e7:5a:a6:1b:
         9e:ff:bb:ff:f3:5e:23:51:7a:83:3a:13:27:77:7e:31:f8:54:
         91:ad:19:67:60:e4:55:87:aa:ae:a3:3c:fa:71:fd:e6:46:a3:
         27:1a:4a:b9:3a:b9:6b:e5:88:f3:0d:6e:35:50:b8:3f:a1:b7:
         0e:c0:d0:0a:fb:84:69:ec:de:bf:9d:94:c9:c8:a5:96:b1:51:
         2a:7a:c5:56:37:c2:c6:7f:a5:9f:2f:92:f8:e3:d0:ce:a8:d4:
         08:17:a9:b5:7d:b4:0c:57:a1:5c:8c:68:92:aa:16:76:8b:bc:
         90:8e:7d:54
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGqIAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTIy
MjA1NTMyWhcNMjQwOTIyMjA1NTMyWjAzMTEwLwYDVQQDEyhhZWVhNDYyYTA2YmFl
NTlhYjY3OTM5ZmUzMDA2YTlkZWQwMTk1MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl8Hl6msZeaJTv2hzhAvScjxdK//cD/DErBxjeNOeVhVOKNyR
cSTPoag7FAeP/fKN4mW40iWwJbCoE6iCI9vRU8LGD54vvtBj4VN1+3zKkkqBcEQg
31QYt2kB5SUnGQwLMD9aSfQyXDSmU1aaNOJRjMmekdWNleUK/vxuo2KJEaVBa+F6
lLKM3aYqnYMoM8vVL3CzJ5Ooa7Xj2Lj6CfgypwWVyEfrHRIYejvjubWsCNot+XHx
I4WRPPAB6JVsMeCoZQTc5feTaARRCcmttbikpFcud4eYJ4OFaNMEt7CWjvD+rOpk
PRHs4lhtJJ4x/L8vYCTFU00/ByLqGfKpl9l4rwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMWjYcCCSQ9GbPGKkIbqgeW6MIKHMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2FlZWE0NjJhMDZiYWU1OWFiNjc5MzlmZTMwMDZhOWRlZDAxOTUwYzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsQoTDANBgkqhkiG9w0BAQsFAAOCAQEAGyWz4DkrxnyjVmTN
SlqoclbSXjTD2+LjXBG49ko8f0lycrA7bY7CJ9/0E1L1xOLUSfLMOrRrr7jH5H9/
rNf/nP2EMhcCDbWfEOf9IQ7V/VMsIam29uLaysMfCX7dayagev4nVwhs+M5yiZR6
jm1rhy+K9EMoruA5vcqgTlvPItJa/m3zsdSNmFlIB9nnWqYbnv+7//NeI1F6gzoT
J3d+MfhUka0ZZ2DkVYeqrqM8+nH95kajJxpKuTq5a+WI8w1uNVC4P6G3DsDQCvuE
aezev52UycillrFRKnrFVjfCxn+lny+S+OPQzqjUCBeptX20DFehXIxokqoWdou8
kI59VA==
-----END CERTIFICATE-----