Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca4d6798ff5bde7fe3302975b031f5c184a460a2.roa
File:                     ca4d6798ff5bde7fe3302975b031f5c184a460a2.roa (raw, json)
Hash identifier:          n6C49MQHHKBflYN+/RDICKHTBD3Xg7xiIDphyRgTYf4=
Subject key identifier:   25:FC:C9:85:7C:30:17:A4:17:B1:E9:4B:97:76:30:F7:B5:E2:E0:EF
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       19A9C0
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca4d6798ff5bde7fe3302975b031f5c184a460a2.roa
Signing time:             Thu 15 Sep 2022 21:12:57 +0000
ROA not before:           Thu 15 Sep 2022 20:54:12 +0000
ROA not after:            Sun 15 Sep 2024 20:54:12 +0000
asID:                     3790
IP address blocks:        190.171.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681856 (0x19a9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:54:12 2022 GMT
            Not After : Sep 15 20:54:12 2024 GMT
        Subject: CN=ca4d6798ff5bde7fe3302975b031f5c184a460a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:15:b1:50:85:8c:2f:56:c7:b2:68:7c:c6:
                    35:a7:91:3e:de:7f:34:60:59:21:13:eb:dc:e3:c3:
                    64:75:ed:ea:72:02:3d:7e:55:25:c5:66:c4:59:13:
                    0d:cc:06:51:20:3f:13:b3:c7:e7:29:d9:51:43:7a:
                    77:9c:1d:6b:34:1a:be:df:e0:c4:6c:1b:18:cc:1c:
                    25:70:ea:5a:89:61:db:9f:b7:81:71:ef:98:b9:48:
                    b0:df:23:7e:61:b5:e1:63:bd:3b:ea:8c:5d:e7:25:
                    cc:fa:98:20:12:f9:d7:c1:f3:1a:26:89:e3:6c:6b:
                    a4:e0:bf:fc:74:07:c1:92:0c:26:46:22:7a:69:ca:
                    1c:a6:5c:06:db:68:5c:14:a8:51:52:4d:ad:c8:34:
                    4b:ae:d1:de:3f:5b:da:8a:b7:c1:33:01:cd:e5:39:
                    38:5f:28:97:d1:c0:1a:ad:77:c0:94:7d:ed:06:95:
                    66:e2:d3:3f:65:a6:2e:34:a0:0e:f2:a4:4d:a4:d1:
                    11:2b:98:5f:00:d1:21:6b:67:fa:5b:32:ca:38:a1:
                    f4:7b:43:eb:9b:89:78:c8:d3:07:11:0b:af:ba:be:
                    ec:16:8a:d8:de:7a:b4:a6:6c:7c:18:73:a7:d4:86:
                    1c:d8:a6:24:e5:86:c5:ad:17:3d:ac:05:3c:15:2d:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:C9:85:7C:30:17:A4:17:B1:E9:4B:97:76:30:F7:B5:E2:E0:EF
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ca4d6798ff5bde7fe3302975b031f5c184a460a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:38:5f:d4:81:bf:e7:0a:48:29:9d:57:9c:89:f2:8a:38:d9:
         57:db:b1:12:6c:39:ba:96:8a:8f:6c:0e:27:02:08:84:94:4c:
         41:8c:4a:ea:57:09:0a:c0:e1:fc:dc:11:71:19:21:ea:3f:3d:
         75:aa:3d:cb:ff:60:3b:e9:de:bd:b0:a8:22:49:2b:a3:57:29:
         38:f7:45:f8:01:87:75:36:40:07:0e:18:7b:55:16:fe:03:0e:
         81:21:3b:96:42:8b:86:32:be:e0:a0:0d:33:b8:1a:d0:b4:36:
         5c:a8:f4:7c:05:4f:87:2a:2a:53:b0:a4:3d:3b:34:3c:7e:fd:
         d7:69:a5:34:b5:f8:ae:3b:d1:2a:c5:e1:3f:3e:6f:a2:f3:05:
         ca:28:9d:99:76:c1:62:4c:6b:bc:4e:0f:1d:f4:75:0a:e8:bd:
         0d:ea:f6:84:b5:0a:63:76:36:71:95:75:44:a9:49:28:7d:38:
         9c:4c:5c:ba:3f:24:f3:cf:d6:74:5b:7c:a5:52:e2:c5:7e:ec:
         21:30:13:23:3d:16:cb:71:15:ec:40:cd:1a:c7:10:44:44:21:
         31:50:9a:65:d1:69:98:ff:df:79:85:9e:26:e0:35:88:6f:2b:
         e8:cd:e5:19:fb:ba:e6:3e:c3:c0:57:2d:ea:1b:18:5c:b6:56:
         b1:ac:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----