Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c27494d7703f3909283c8d74b489094671aa59e3.roa
File:                     c27494d7703f3909283c8d74b489094671aa59e3.roa (raw, json)
Hash identifier:          2btchYnzkDePXsPWJNMELbxjD+CwhqE6Vm1FeMxt97M=
Subject key identifier:   D0:0D:50:67:57:2C:93:73:75:0C:11:03:E7:21:F4:33:09:16:BE:47
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CB3B4
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c27494d7703f3909283c8d74b489094671aa59e3.roa
Signing time:             Wed 28 Sep 2022 16:47:22 +0000
ROA not before:           Wed 28 Sep 2022 16:39:31 +0000
ROA not after:            Sat 28 Sep 2024 16:39:31 +0000
asID:                     11830
IP address blocks:        190.241.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881012 (0x1cb3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:39:31 2022 GMT
            Not After : Sep 28 16:39:31 2024 GMT
        Subject: CN=c27494d7703f3909283c8d74b489094671aa59e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:4a:bc:15:d6:4a:06:d5:9c:20:5c:43:16:
                    87:95:35:7e:c9:59:85:b6:c1:55:20:bc:f2:17:12:
                    88:bf:62:a7:dd:ad:26:9d:34:cf:7e:99:13:f1:2c:
                    2b:a5:e2:0b:14:07:1b:f2:58:92:a7:0b:b8:67:2a:
                    6b:74:72:56:f3:73:29:bf:0e:05:48:64:91:e6:a4:
                    be:af:1d:96:bf:b6:29:12:68:0c:46:6b:78:b9:84:
                    c8:14:ce:c0:49:c6:9d:32:5a:b6:3d:5c:74:38:f5:
                    9c:20:33:79:38:a6:2e:ed:d1:ee:8a:64:81:c6:5d:
                    61:31:c5:5f:be:bb:5e:51:69:8d:a0:7b:7a:ea:4b:
                    45:de:92:18:2d:ba:30:bb:b6:b7:c0:b1:66:6d:46:
                    51:01:26:3c:26:f1:6f:50:43:50:ad:04:98:e3:ff:
                    99:6a:6a:71:bf:3a:ba:9e:22:8b:0d:9f:12:9e:7c:
                    87:66:27:20:97:aa:71:37:30:51:80:99:e6:30:9c:
                    07:5d:9b:3d:14:ef:c0:17:d8:29:47:f2:ee:f9:aa:
                    b2:31:10:e7:f5:9d:c1:a3:47:9e:42:c9:98:79:c2:
                    90:98:f8:91:de:45:86:39:43:58:53:dc:f7:68:00:
                    46:58:7f:95:43:75:40:05:c0:de:3c:9f:3d:ab:6b:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0D:50:67:57:2C:93:73:75:0C:11:03:E7:21:F4:33:09:16:BE:47
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/c27494d7703f3909283c8d74b489094671aa59e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:17:ce:1f:95:f9:81:59:f0:ca:ec:a6:b9:ca:b8:8c:2d:
         b4:76:e7:fe:6a:4d:b3:a4:89:4e:1a:60:53:97:82:37:f1:b8:
         61:be:83:33:88:a9:2d:89:21:74:bd:87:2e:9b:97:d3:1d:8a:
         36:ce:9d:4f:5d:87:6a:c7:8a:9b:6a:07:3b:ea:22:2b:76:08:
         12:fa:c3:9c:57:47:36:52:ff:8c:11:c8:03:ac:e2:3d:0e:aa:
         83:db:3c:91:46:db:55:66:e0:3c:b1:b2:c7:60:a8:f4:c3:bd:
         74:68:a9:98:b9:26:54:6c:93:40:0c:c6:3f:56:05:5b:5e:f0:
         bd:93:96:df:43:0f:db:6d:9c:e2:f0:2f:01:da:d0:c3:b4:94:
         bd:74:eb:a0:e6:73:fb:05:05:b0:31:56:ec:c2:29:de:57:94:
         fe:b0:c8:a5:9b:96:5f:d7:82:6f:df:55:d9:5f:5d:cd:a1:ab:
         7f:8b:6d:fa:95:14:a8:91:ae:8e:09:7a:b1:45:a1:7e:75:3e:
         94:da:08:6a:c0:9b:17:9e:49:07:45:e0:e5:1f:95:11:71:10:
         f3:88:a1:4c:ad:59:5e:ab:50:88:d3:46:a5:6d:1c:ee:fd:bf:
         3c:e0:61:80:48:b9:91:43:48:51:40:fe:93:88:6e:ea:46:f0:
         2e:9c:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----