Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cca227e3056ae9cea615a1ccf68ab5cf4e68e855.roa
File:                     cca227e3056ae9cea615a1ccf68ab5cf4e68e855.roa (raw, json)
Hash identifier:          I4n0QHC/2IXjIkkRSxSAOWZP5IUiG4xNnJkV8uxUVoA=
Subject key identifier:   E1:56:E7:6E:E5:CC:B5:26:5A:74:74:06:1A:D4:16:6F:98:04:19:30
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A9477
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cca227e3056ae9cea615a1ccf68ab5cf4e68e855.roa
Signing time:             Thu 22 Sep 2022 20:51:57 +0000
ROA not before:           Thu 22 Sep 2022 20:51:28 +0000
ROA not after:            Sun 22 Sep 2024 20:51:28 +0000
asID:                     3790
IP address blocks:        196.40.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741943 (0x1a9477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:51:28 2022 GMT
            Not After : Sep 22 20:51:28 2024 GMT
        Subject: CN=cca227e3056ae9cea615a1ccf68ab5cf4e68e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:fb:4a:40:9e:0b:f7:39:5b:d9:93:10:30:
                    a8:a6:91:18:b9:8c:23:2b:a9:f8:f3:7f:8b:44:8a:
                    6e:b5:17:c5:b0:d9:62:41:74:9e:69:d0:31:d5:a5:
                    5a:67:39:ff:3e:08:ad:5b:8b:fd:60:25:25:4a:cb:
                    35:87:e8:42:1b:3c:9d:8d:49:7b:72:03:5d:5b:bf:
                    37:a0:c6:63:dc:31:3d:3e:fb:20:18:35:7c:f4:4f:
                    f7:9b:65:2f:a1:48:74:56:9a:e4:7c:a2:5e:f1:0d:
                    16:9d:5e:ad:7d:1a:af:c1:35:77:4d:32:d7:2e:a3:
                    d6:ed:0b:db:1a:54:ee:9d:c8:ef:f2:e0:4d:df:f1:
                    04:b7:05:b0:c8:c3:53:db:41:98:18:32:c8:2e:1c:
                    8d:c6:0f:db:2a:9d:d0:a8:a7:1e:66:c0:6e:cf:54:
                    63:d3:ea:50:cf:9c:53:a6:b8:6b:92:02:0d:69:58:
                    e4:49:58:17:6d:fb:ec:e3:f7:71:ec:74:0d:fb:20:
                    71:7c:ab:b2:18:e8:fc:d9:80:21:0f:ec:36:ed:8b:
                    b9:63:0c:cf:90:c4:70:14:8d:11:56:65:19:ad:9c:
                    49:cb:c1:43:aa:ea:99:4f:b3:32:1c:0c:54:49:23:
                    d4:03:29:a6:0d:3d:8f:ab:9f:02:13:82:c0:19:33:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:E7:6E:E5:CC:B5:26:5A:74:74:06:1A:D4:16:6F:98:04:19:30
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/cca227e3056ae9cea615a1ccf68ab5cf4e68e855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:51:4f:36:6a:c2:bb:cd:a4:23:65:79:6c:6e:88:b4:8f:
         08:2b:03:64:cc:4d:a5:85:ff:01:5d:ff:66:bf:9f:aa:83:46:
         8c:92:1f:d9:2e:6a:ed:e4:b4:e4:e4:e0:90:b5:8c:be:ba:2b:
         1c:f3:ae:f3:c6:14:89:73:dd:08:ed:36:df:ea:99:c3:db:01:
         ab:7a:79:51:ef:bd:4f:1c:2a:80:f8:d8:95:69:04:a6:05:81:
         3d:0b:77:ad:40:58:1f:f2:cf:cf:0b:b7:2a:d5:11:12:ed:2c:
         9e:92:1e:cf:29:1f:e7:0c:fa:8f:da:8a:f6:fd:4b:7a:b2:40:
         5b:5d:df:82:51:0e:e7:4d:70:e4:b3:4e:7d:03:6f:aa:62:ac:
         94:b4:43:1d:d7:bb:7e:45:3a:ed:52:28:c6:13:e5:72:73:b4:
         08:e6:09:8a:26:29:89:74:55:8a:10:c7:d6:54:c4:77:14:34:
         f6:84:1c:40:37:91:73:28:4b:f5:25:e3:f0:67:38:3e:3e:f7:
         21:01:f2:48:5c:61:97:2e:96:40:9b:df:86:7a:88:7f:32:37:
         98:62:22:c6:27:c8:4f:13:a5:99:e6:a5:2d:b6:25:68:31:b0:
         80:58:c1:c9:fb:cc:e5:ac:54:49:39:bf:51:32:b7:74:4d:da:
         c4:30:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----