Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5b125e11e0badbe6913387474fab4fe0e8c7836.roa
File:                     b5b125e11e0badbe6913387474fab4fe0e8c7836.roa (raw, json)
Hash identifier:          37gDDzd3cwUlKoKjCmiXPmds2h2w3ks0jj7J/WBvNGI=
Subject key identifier:   77:06:EA:2B:69:D2:87:9B:A8:FA:C3:D3:23:E5:45:3C:80:C5:E8:A3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1B1111
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5b125e11e0badbe6913387474fab4fe0e8c7836.roa
Signing time:             Tue 27 Sep 2022 17:08:50 +0000
ROA not before:           Tue 27 Sep 2022 17:08:06 +0000
ROA not after:            Fri 27 Sep 2024 17:08:06 +0000
asID:                     11830
IP address blocks:        190.10.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773841 (0x1b1111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 27 17:08:06 2022 GMT
            Not After : Sep 27 17:08:06 2024 GMT
        Subject: CN=b5b125e11e0badbe6913387474fab4fe0e8c7836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:68:ce:b4:19:a8:32:54:34:24:63:37:01:
                    2e:bf:7d:ba:3d:0d:84:5f:bb:a6:34:77:99:0a:a9:
                    e4:9a:b3:ad:4b:67:32:de:2a:e7:b3:7c:5b:71:89:
                    d3:c9:4c:9e:74:2c:ca:51:4c:eb:69:09:c7:25:2b:
                    3e:74:36:4f:02:97:e7:c9:64:1a:cd:87:72:a9:b0:
                    04:0b:ef:12:eb:5f:0c:6c:cc:1b:c0:78:81:c1:85:
                    50:fd:f8:dc:24:4e:93:a9:54:fe:ca:3a:c8:48:c4:
                    5d:d9:24:3c:b6:43:2a:25:e3:c0:f4:7c:48:a1:ce:
                    63:bd:b7:1f:fe:fd:60:3b:14:cd:d5:f7:ba:83:0c:
                    5a:24:22:cb:69:0c:e4:4d:06:9c:1e:b0:fc:20:07:
                    c4:ec:56:64:cd:c1:71:18:69:e2:92:fa:5d:a3:c3:
                    90:67:85:0f:67:b6:85:07:08:a8:14:e7:a4:8a:f0:
                    94:15:68:b1:d2:95:e2:fc:b9:d9:b1:e6:66:db:88:
                    90:f3:aa:35:49:80:1d:bc:57:69:bc:9b:c7:44:1f:
                    b6:c3:c3:0c:4f:5d:f8:b2:af:cc:e6:34:8d:55:d5:
                    fb:48:7f:94:10:68:12:53:ac:f2:26:c2:fc:f5:a2:
                    2f:2f:80:69:4d:b2:54:24:93:b2:c7:c4:cf:44:0a:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:EA:2B:69:D2:87:9B:A8:FA:C3:D3:23:E5:45:3C:80:C5:E8:A3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5b125e11e0badbe6913387474fab4fe0e8c7836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:27:31:bf:9e:92:2c:16:90:30:e3:5f:04:1d:e7:f2:b8:
         08:55:65:bc:46:47:a2:b8:65:71:56:d6:71:c6:84:4b:16:31:
         00:fb:a3:e8:32:c4:9d:9f:04:c2:cd:d6:26:28:74:d8:da:04:
         2a:19:3b:32:ee:25:24:60:ec:2c:dd:08:a8:63:10:23:7b:62:
         7a:3c:02:dc:48:b1:09:bf:7f:5e:a0:4b:23:c9:ca:69:18:7a:
         f8:e0:13:5b:76:ce:b1:0f:f8:f2:a7:ae:b4:6a:79:78:74:c4:
         03:95:79:dd:99:0b:b1:af:39:23:57:fe:c2:eb:ab:c5:92:fc:
         80:ed:67:e0:7d:b3:c9:d8:fe:5c:ea:46:6a:6b:de:de:c4:98:
         21:8a:28:20:71:47:b3:1c:b9:bb:8b:00:72:48:27:e8:80:73:
         f6:9c:da:db:49:48:a4:a7:9e:a2:37:3d:36:7e:5d:b6:c7:cf:
         d4:e5:03:e9:23:b9:c5:c9:41:52:b8:83:d9:ae:05:a5:66:ff:
         d5:66:ef:65:5d:37:3d:a6:26:64:07:74:5b:52:90:e3:c0:72:
         eb:3f:57:ec:bd:d4:75:8e:f7:b8:bb:73:f5:42:1c:fc:40:74:
         a7:7d:c7:7d:3f:6f:eb:42:7d:c4:07:9e:cb:38:12:1b:f0:c3:
         5e:30:16:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGxERMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI3
MTcwODA2WhcNMjQwOTI3MTcwODA2WjAzMTEwLwYDVQQDEyhiNWIxMjVlMTFlMGJh
ZGJlNjkxMzM4NzQ3NGZhYjRmZTBlOGM3ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuFBozrQZqDJUNCRjNwEuv326PQ2EX7umNHeZCqnkmrOtS2cy
3irns3xbcYnTyUyedCzKUUzraQnHJSs+dDZPApfnyWQazYdyqbAEC+8S618MbMwb
wHiBwYVQ/fjcJE6TqVT+yjrISMRd2SQ8tkMqJePA9HxIoc5jvbcf/v1gOxTN1fe6
gwxaJCLLaQzkTQacHrD8IAfE7FZkzcFxGGnikvpdo8OQZ4UPZ7aFBwioFOekivCU
FWix0pXi/LnZseZm24iQ86o1SYAdvFdpvJvHRB+2w8MMT134sq/M5jSNVdX7SH+U
EGgSU6zyJsL89aIvL4BpTbJUJJOyx8TPRArFqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHcG6itp0oebqPrD0yPlRTyAxeijMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyL2I1YjEyNWUxMWUwYmFkYmU2OTEzMzg3NDc0ZmFiNGZlMGU4Yzc4MzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4KKjANBgkqhkiG9w0BAQsFAAOCAQEASiYnMb+ekiwWkDDj
XwQd5/K4CFVlvEZHorhlcVbWccaESxYxAPuj6DLEnZ8Ews3WJih02NoEKhk7Mu4l
JGDsLN0IqGMQI3tiejwC3EixCb9/XqBLI8nKaRh6+OATW3bOsQ/48qeutGp5eHTE
A5V53ZkLsa85I1f+wuurxZL8gO1n4H2zydj+XOpGamve3sSYIYooIHFHsxy5u4sA
ckgn6IBz9pza20lIpKeeojc9Nn5dtsfP1OUD6SO5xclBUriD2a4FpWb/1WbvZV03
PaYmZAd0W1KQ48By6z9X7L3UdY73uLtz9UIc/EB0p33HfT9v60J9xAeeyzgSG/DD
XjAWew==
-----END CERTIFICATE-----