Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b819ada41bf5f9eed697b33ef33ee8e464076122.roa
File:                     b819ada41bf5f9eed697b33ef33ee8e464076122.roa (raw, json)
Hash identifier:          yoqABXQUzN41t+t8ztvRcawNPCbe8El0WNWHUwe0gCI=
Subject key identifier:   55:DC:FE:10:FF:E4:0F:FE:96:B4:64:30:51:16:12:05:DC:49:D3:9F
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19E46C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b819ada41bf5f9eed697b33ef33ee8e464076122.roa
Signing time:             Thu 22 Sep 2022 20:09:20 +0000
ROA not before:           Thu 22 Sep 2022 20:08:48 +0000
ROA not after:            Sun 22 Sep 2024 20:08:48 +0000
asID:                     3790
IP address blocks:        190.241.4.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696876 (0x19e46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:08:48 2022 GMT
            Not After : Sep 22 20:08:48 2024 GMT
        Subject: CN=b819ada41bf5f9eed697b33ef33ee8e464076122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:80:ff:6e:e1:66:18:41:85:24:ab:53:cf:
                    06:2a:ac:c5:30:39:7f:b2:bf:a3:7a:fa:55:d3:0a:
                    c6:86:9c:9f:8e:be:ec:26:f3:d4:61:f4:ff:67:3f:
                    a3:ac:79:90:29:bc:2f:69:9c:78:1f:b3:3d:23:c7:
                    65:a8:0b:70:9e:6c:c7:ea:08:0e:22:08:f9:13:23:
                    43:5d:55:84:15:61:93:ad:a2:74:a6:a3:4c:1a:94:
                    4e:10:5a:68:b7:7c:7e:03:f5:44:3c:91:1e:b9:b9:
                    bd:c2:29:7a:80:9d:0c:cb:60:ae:fd:c2:e9:52:99:
                    a8:e3:95:09:93:03:d2:a0:44:0f:02:7f:dc:21:0e:
                    ad:cb:d6:ed:a5:8a:0b:31:ea:70:7c:ea:6c:2b:f5:
                    97:a5:00:31:70:2f:56:de:5e:76:df:fa:29:15:b8:
                    11:67:bf:65:45:29:61:18:ec:0e:24:a8:9a:cb:c3:
                    3c:5e:92:3b:88:b1:e0:e3:d6:92:a8:64:95:67:e2:
                    74:d4:16:d0:bc:a2:86:80:9b:4f:90:5f:ec:d9:04:
                    ad:dd:e4:b8:7e:4f:95:4c:97:76:6c:3b:3b:9b:01:
                    1b:db:c8:27:96:84:43:e4:b4:67:54:ae:22:6c:4d:
                    53:e9:57:bb:db:1e:1b:11:01:c5:a9:aa:23:3e:fd:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:FE:10:FF:E4:0F:FE:96:B4:64:30:51:16:12:05:DC:49:D3:9F
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/b819ada41bf5f9eed697b33ef33ee8e464076122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ad:f8:b6:b3:34:1e:08:17:a0:a3:7f:db:6d:64:c5:e9:08:
         06:f1:17:f1:3c:78:cf:5a:06:8b:dc:7b:92:6c:43:89:3f:4b:
         04:90:2b:88:46:dc:f8:ab:da:2c:ed:1d:3e:c0:37:4c:4d:ca:
         15:2f:15:bc:eb:69:d6:1d:7b:72:2d:8c:db:69:1e:7a:6b:24:
         f3:96:df:96:d3:77:05:dc:76:e1:17:fd:ec:fe:63:f4:b3:dd:
         c2:8d:13:e1:2b:6d:85:4e:9d:f5:ac:7a:dc:71:52:f7:e2:43:
         52:cd:ec:e1:e5:ec:a9:4b:92:3c:3e:37:ff:ec:89:a4:77:03:
         21:71:03:03:ca:05:45:fd:e1:d5:d0:93:8a:c7:1a:e3:42:88:
         61:56:39:71:39:5f:ec:6d:44:b0:a3:0f:99:c1:54:b7:22:ff:
         da:2b:4c:ad:36:ce:81:3b:d8:62:15:35:2b:c2:4b:72:67:61:
         80:28:d8:9f:8b:6e:53:46:5c:0d:09:b2:01:68:d1:63:02:19:
         3c:b9:f4:22:f2:aa:9a:5e:e3:fc:01:94:6a:ba:9c:e5:41:56:
         32:70:b1:2e:f5:0d:e8:01:4c:c5:b0:06:ab:6c:67:6d:5f:5f:
         f1:00:26:d1:49:c3:78:bb:af:3c:2b:f0:36:ba:e2:52:62:22:
         37:5a:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----