Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cab80b2d61677f8627d74b6a25695d0c6b1554f1.roa
File:                     cab80b2d61677f8627d74b6a25695d0c6b1554f1.roa (raw, json)
Hash identifier:          C9hQsemBfNbDOKArOBM660gOWpw3W+JbajkPikr675c=
Subject key identifier:   CD:D0:12:27:13:A7:3C:2D:28:A9:8D:5E:3C:EA:0E:8B:C5:47:01:87
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A9AEA
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cab80b2d61677f8627d74b6a25695d0c6b1554f1.roa
Signing time:             Thu 22 Sep 2022 20:54:04 +0000
ROA not before:           Thu 22 Sep 2022 20:52:02 +0000
ROA not after:            Sun 22 Sep 2024 20:52:02 +0000
asID:                     3790
IP address blocks:        196.40.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743594 (0x1a9aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:52:02 2022 GMT
            Not After : Sep 22 20:52:02 2024 GMT
        Subject: CN=cab80b2d61677f8627d74b6a25695d0c6b1554f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:66:4f:b8:c8:d6:0a:55:9e:1f:75:93:db:
                    b3:b4:32:15:a6:48:de:63:d9:ef:4b:d2:bf:f6:f1:
                    f4:29:2e:f5:ff:ca:27:fe:3a:a0:86:e9:35:ad:e6:
                    4d:7d:73:a4:9d:43:ed:80:a2:40:39:91:42:98:14:
                    fc:39:cf:89:c0:f0:18:3a:ff:a3:79:40:c4:4d:0a:
                    bb:a9:0d:ff:ef:17:6e:fa:0b:78:2e:56:01:47:71:
                    da:c0:f8:77:f6:37:f0:10:58:7d:ea:67:23:cb:43:
                    83:a2:82:71:50:12:72:3f:72:29:ce:49:c3:7e:63:
                    59:f6:df:95:c5:88:ed:4f:82:a4:9a:df:c2:08:f3:
                    77:02:1d:5d:0e:bb:d0:aa:56:b3:8a:22:14:be:c1:
                    9f:fc:98:98:f2:74:c0:53:5a:01:9a:c0:96:ee:ad:
                    25:b0:ff:1e:95:4c:e9:f6:ef:c6:77:db:80:90:08:
                    79:03:a6:3a:9e:c6:5b:06:40:af:7f:85:58:ee:b6:
                    37:38:6b:12:ca:ef:f4:94:77:d9:e5:b4:9d:14:36:
                    21:3d:29:bd:88:f1:6d:41:16:31:8e:3e:b9:7b:de:
                    bc:94:12:60:97:14:1e:7a:52:3b:2f:9a:65:82:5c:
                    63:26:d5:02:c3:e4:5f:c2:ff:89:a0:8f:56:b7:c4:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:12:27:13:A7:3C:2D:28:A9:8D:5E:3C:EA:0E:8B:C5:47:01:87
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cab80b2d61677f8627d74b6a25695d0c6b1554f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:77:57:15:0f:f2:23:6e:aa:25:3f:d5:30:f4:28:b8:78:
         fa:23:7e:39:22:7a:5c:3a:55:7c:eb:7e:72:a6:f0:cc:fa:27:
         96:a1:80:43:73:cd:3f:7e:e2:28:1e:51:c9:12:33:1b:8c:40:
         89:30:c4:93:f8:1b:0e:d8:13:38:3a:04:78:17:f7:e0:b2:71:
         f9:50:71:b7:4b:ae:7c:d7:34:55:72:38:b1:7c:88:a9:f0:77:
         f9:49:a9:1d:21:71:31:d7:22:8a:c2:b5:4b:97:c1:e3:a6:53:
         bd:30:3c:8d:4a:a3:4b:e5:ad:9c:15:66:ab:93:d3:aa:d0:5d:
         39:08:3b:a5:83:99:0e:69:97:0c:64:fe:a3:68:be:8d:01:6d:
         59:d2:a8:46:c1:84:0e:60:95:f2:15:af:cd:b3:48:8c:fb:a0:
         dc:82:6c:82:47:34:cb:97:a6:0d:fe:03:e8:c8:b4:66:4b:af:
         b1:5f:ec:cc:05:cc:a6:21:95:34:b6:29:6a:ca:48:d2:95:dd:
         99:70:da:64:29:ae:2a:fe:9e:43:9c:32:70:ae:d9:76:b2:f0:
         b8:50:60:47:4a:82:b0:ad:d0:b7:45:f3:29:e2:8e:37:da:e4:
         53:36:95:5c:e0:94:ff:43:be:26:17:f8:65:cb:e9:c3:55:4b:
         14:0e:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----