Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b3c2aa536b1e9b612f52da2d1f15f261b308888a.roa
File:                     b3c2aa536b1e9b612f52da2d1f15f261b308888a.roa (raw, json)
Hash identifier:          9KEJuRQ6yAO/wB/TolsP270sNxRfl1EHR/FK0KhTbkk=
Subject key identifier:   88:2A:76:83:C8:2F:EE:74:36:3A:D1:80:89:2B:BB:B4:33:A0:67:7A
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1964CB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b3c2aa536b1e9b612f52da2d1f15f261b308888a.roa
Signing time:             Thu 15 Sep 2022 20:44:52 +0000
ROA not before:           Thu 15 Sep 2022 20:42:00 +0000
ROA not after:            Sun 15 Sep 2024 20:42:00 +0000
asID:                     3790
IP address blocks:        190.10.64.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664203 (0x1964cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:42:00 2022 GMT
            Not After : Sep 15 20:42:00 2024 GMT
        Subject: CN=b3c2aa536b1e9b612f52da2d1f15f261b308888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:19:e2:b9:59:0d:b9:f6:8a:55:78:6a:78:
                    fa:87:2f:b6:9c:1d:fd:a0:38:01:26:59:ca:ec:fd:
                    3d:19:30:1c:a6:9f:03:c4:ed:5e:0e:cf:36:64:79:
                    67:c1:a7:9d:89:ea:ed:81:b1:c0:29:2b:0f:a1:11:
                    b1:ea:14:57:f0:01:b1:b0:fd:d7:59:dd:aa:9c:6e:
                    54:ae:97:72:82:b4:49:98:f2:5d:dd:6d:0b:04:f5:
                    42:0d:e2:55:ce:08:16:e6:8d:2c:c3:c0:f2:af:62:
                    a3:86:d9:ca:2b:0e:7a:66:ca:05:4d:eb:1f:05:04:
                    8d:aa:5d:51:be:78:57:11:c8:70:03:12:63:ff:3e:
                    ca:90:be:f7:25:dc:11:c7:ff:71:1e:5a:c3:f9:72:
                    bb:f0:29:1f:91:93:9a:37:7d:87:37:0b:ea:eb:8a:
                    71:ab:44:5d:1c:e1:ab:af:0d:b0:19:85:d9:d2:3f:
                    af:c8:71:b7:fd:c6:fc:80:d9:02:fb:6a:29:63:40:
                    fe:2f:e9:46:e7:5c:c8:57:1d:c8:60:a5:c7:ad:5d:
                    6b:19:23:f1:f4:55:63:73:64:b1:42:95:ac:ea:b8:
                    e8:2d:64:b1:d3:ac:83:7d:4f:e7:91:e8:f7:19:af:
                    21:a2:84:7d:c2:fd:00:15:f2:02:8d:5d:51:78:80:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2A:76:83:C8:2F:EE:74:36:3A:D1:80:89:2B:BB:B4:33:A0:67:7A
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b3c2aa536b1e9b612f52da2d1f15f261b308888a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:86:da:cf:a9:4b:b8:10:84:3c:71:0a:bd:d1:8e:31:44:
         47:5d:55:4f:ef:1e:14:7d:a7:ff:7b:52:85:30:11:87:4a:1c:
         7e:71:f9:d0:19:89:2b:95:cf:2f:ed:41:91:8e:d0:c3:f1:eb:
         e7:35:27:e0:71:cb:ee:ad:62:78:38:7b:1e:98:5d:d9:28:a9:
         eb:28:45:25:e4:9c:36:4e:58:2b:f9:fb:db:04:e4:a7:b9:bb:
         8b:75:5c:c5:34:84:eb:40:f1:68:36:73:6c:2f:1a:08:c9:ac:
         f2:94:4b:fb:6d:79:8e:e5:c5:d3:dc:10:df:da:0b:1d:c3:34:
         85:6e:b1:c7:c3:31:0d:2a:f9:ee:a6:92:46:aa:ac:54:04:08:
         4f:81:a1:f9:1c:82:88:24:d7:6f:01:9a:89:fe:c3:94:f4:c6:
         89:c0:8d:83:a0:d1:64:0c:6e:25:a9:cb:a8:e4:56:18:fc:f5:
         d5:26:0a:ac:e0:49:97:0d:d1:76:4e:ac:41:c0:16:35:5b:9c:
         b1:5b:64:69:cb:b3:57:e9:1b:71:e5:90:c9:82:58:62:36:8c:
         bd:1f:df:2f:24:ee:86:05:78:ea:5d:10:c9:26:c1:7d:b0:8d:
         e3:ee:c6:b3:c3:a7:7b:e4:78:30:67:f3:e8:33:ec:3a:aa:da:
         31:1e:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----