Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bccad9f07901609a688ee6bee5464bba80f9c4aa.roa
File:                     bccad9f07901609a688ee6bee5464bba80f9c4aa.roa (raw, json)
Hash identifier:          beom8Tm+2MwvSD+rJMznG/F6uNf5ZD32F3uIpuqPsts=
Subject key identifier:   7C:8F:FB:B3:71:4C:9C:08:AB:9B:4D:0F:A9:7F:69:C6:71:C0:8A:A7
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A10CC
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bccad9f07901609a688ee6bee5464bba80f9c4aa.roa
Signing time:             Thu 22 Sep 2022 20:16:18 +0000
ROA not before:           Thu 22 Sep 2022 20:15:53 +0000
ROA not after:            Sun 22 Sep 2024 20:15:53 +0000
asID:                     3790
IP address blocks:        190.241.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708236 (0x1a10cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:15:53 2022 GMT
            Not After : Sep 22 20:15:53 2024 GMT
        Subject: CN=bccad9f07901609a688ee6bee5464bba80f9c4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:ce:f6:d5:1b:7b:c9:8f:48:64:34:32:35:
                    b7:6f:5a:98:1f:39:6a:51:25:5c:06:18:d0:60:d0:
                    8f:2d:28:1c:3e:72:b7:d9:96:44:db:7f:d1:c1:45:
                    0d:0f:6b:3e:ca:11:22:c9:08:e4:28:df:ac:cd:08:
                    5b:a8:6f:27:b4:85:e6:09:8b:8d:a5:1e:7a:f1:a9:
                    fb:4e:2e:e6:2e:4c:74:65:e5:d5:47:bb:e1:68:8e:
                    36:88:21:ac:3b:d9:6d:95:be:ee:b8:1b:5b:a6:72:
                    51:ff:b5:73:67:00:29:68:1d:5a:7d:3e:c6:84:df:
                    42:9b:f6:98:a6:b0:0f:55:37:15:32:47:56:48:49:
                    1c:14:52:e9:e7:02:81:1f:b0:f7:b6:86:ed:87:f7:
                    2d:60:4c:a1:8a:70:88:07:30:02:0d:c9:7b:5b:e6:
                    4f:06:f5:7b:9c:67:4f:23:89:59:6e:16:72:29:29:
                    67:91:a8:bd:a1:05:91:18:47:c9:55:ce:da:58:d0:
                    67:88:95:a1:c2:fa:fa:4f:cf:d6:c9:93:14:e8:85:
                    f8:20:fb:fe:90:2e:72:73:5b:7d:70:30:ae:a6:e9:
                    98:37:2b:cf:e6:a7:81:8e:0a:65:a4:c7:4e:89:21:
                    48:87:39:d4:93:28:c2:12:4c:95:e5:75:aa:61:f4:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8F:FB:B3:71:4C:9C:08:AB:9B:4D:0F:A9:7F:69:C6:71:C0:8A:A7
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/bccad9f07901609a688ee6bee5464bba80f9c4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:06:9d:56:10:31:d7:c4:fc:37:0f:79:5c:3e:e5:f7:3e:
         6c:71:fe:28:d4:ae:87:71:07:e6:75:0d:23:d2:8d:11:d7:78:
         f8:92:cf:7a:00:33:00:c4:05:d8:59:d6:9a:8a:62:1c:4b:7f:
         f0:17:6e:24:4e:ae:4e:f7:2f:f2:06:47:ad:c2:5b:6e:43:41:
         f5:b3:b9:9f:b0:ad:2e:56:3e:e8:d8:79:14:eb:c0:4f:dc:22:
         ff:d6:5b:db:41:19:a5:6c:fd:d3:08:e9:e9:30:21:40:65:f3:
         6e:eb:2f:09:f0:d0:a2:0c:ad:07:38:d1:e0:20:a1:ab:af:90:
         e5:16:5f:e8:4e:80:16:69:0c:da:78:df:e0:ba:2c:a7:78:a4:
         86:9d:65:c5:18:8e:a3:22:75:8e:20:6f:64:4a:9f:20:2a:bb:
         f4:37:78:93:e0:2a:e9:40:7d:83:aa:df:56:73:2f:de:12:c2:
         14:73:21:9d:86:c7:fc:31:7d:09:e4:46:7f:52:5a:64:62:9f:
         36:20:3e:cf:04:28:ec:97:f0:cd:e5:76:02:06:83:1d:bb:bb:
         99:f5:2e:6d:99:90:7d:a0:12:e0:26:49:22:d2:0b:85:d2:ae:
         50:61:38:ef:59:36:43:16:dc:76:1a:e0:21:c3:cd:94:61:01:
         a7:a0:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----