Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5e479fa34050336592226d7ffc239727c991dbc.roa
File:                     b5e479fa34050336592226d7ffc239727c991dbc.roa (raw, json)
Hash identifier:          bjGjfc36nLfCCKVrOi4T9Wnc4Okwp7CRs8IbX49+Wi0=
Subject key identifier:   48:8C:E1:66:1B:F4:3D:FE:73:7A:D6:47:28:F2:85:36:E9:ED:8D:AC
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CC0A1
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5e479fa34050336592226d7ffc239727c991dbc.roa
Signing time:             Wed 28 Sep 2022 16:50:48 +0000
ROA not before:           Wed 28 Sep 2022 16:49:50 +0000
ROA not after:            Sat 28 Sep 2024 16:49:50 +0000
asID:                     11830
IP address blocks:        190.241.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884321 (0x1cc0a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:49:50 2022 GMT
            Not After : Sep 28 16:49:50 2024 GMT
        Subject: CN=b5e479fa34050336592226d7ffc239727c991dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:ff:14:38:d6:fe:67:7c:b0:16:22:22:a8:
                    95:fe:d6:ff:6e:63:51:4e:4d:9c:2e:9b:c9:47:d0:
                    02:98:6b:cf:96:6e:4e:eb:76:4a:fe:75:3e:84:16:
                    ff:bc:d9:a5:5a:23:07:9a:76:8e:04:bb:fc:33:23:
                    8e:1e:91:c4:67:ab:24:a3:a7:fb:2d:41:d8:30:99:
                    d7:55:cc:ab:e9:a0:b7:c5:49:53:69:1b:fe:ad:91:
                    f0:0d:51:82:57:84:7d:2d:ad:a4:fe:c4:ea:c8:ac:
                    55:43:a1:80:bb:dd:da:08:91:4f:61:ad:1e:5a:f0:
                    27:61:6a:f4:19:1c:22:84:fe:24:1a:47:bf:58:60:
                    13:e9:60:45:11:a1:d3:62:6c:5c:ca:f8:78:2b:9f:
                    f0:f9:b2:a6:a2:f6:d8:3a:2c:dc:36:e7:36:bf:54:
                    27:9d:a2:1c:89:55:64:c1:7a:30:bf:43:fb:96:22:
                    70:c6:0b:00:5e:b1:f2:77:12:c4:2e:fd:92:96:e4:
                    0e:e5:c4:b3:4a:fe:b4:5a:5e:16:94:18:a1:59:40:
                    d5:86:a6:c5:f9:a6:c2:7d:25:13:7f:e5:aa:73:ad:
                    d1:72:18:72:9b:b5:4a:74:ce:b8:70:2a:e2:7f:6a:
                    71:4b:66:05:ab:da:4d:1c:66:c6:a9:1c:f1:2a:46:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:E1:66:1B:F4:3D:FE:73:7A:D6:47:28:F2:85:36:E9:ED:8D:AC
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b5e479fa34050336592226d7ffc239727c991dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:70:16:1d:0f:f1:94:37:c2:5f:ad:a8:bc:21:d3:c4:ac:
         cd:4a:dc:76:c0:84:30:26:56:bb:3d:28:0a:f3:3c:8d:55:32:
         1e:d2:9f:d0:69:b9:5d:a9:35:66:52:04:bf:68:c9:bd:bc:9b:
         da:dc:89:5b:0a:c0:cc:37:73:0a:70:e6:f6:3b:c0:98:bb:3c:
         7e:cb:50:53:67:17:e8:05:3b:c0:98:b1:18:82:7c:2c:31:21:
         8f:20:3b:84:a5:e2:39:70:b0:25:2b:49:5d:01:87:52:5d:fa:
         7b:b3:14:2d:e3:10:45:48:5b:29:7f:dc:27:fe:74:f5:43:67:
         5d:bc:84:af:f9:94:4a:fa:b0:97:3f:d0:eb:13:1b:b8:b7:34:
         93:6b:f9:1e:8e:94:4f:75:3a:b8:d9:0a:0d:fa:93:9f:e3:5c:
         e6:4f:2f:2c:b7:c8:cb:1d:58:33:2d:29:6d:27:ae:e6:1b:75:
         08:4e:4d:51:11:67:9b:16:e2:71:d8:ce:58:26:a5:94:fd:e3:
         f3:11:74:5f:01:b5:0d:38:ac:60:ec:8e:88:65:25:86:d7:af:
         58:10:fd:86:a1:0f:dd:ec:be:ce:ee:04:78:18:50:6b:84:85:
         cf:0e:1c:06:dc:ae:29:8d:e3:90:66:67:1e:d1:c4:81:b6:29:
         0e:0d:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----