Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e6d6794393cf68cd43400e4e59c6f20be56fe1d6.roa
File:                     e6d6794393cf68cd43400e4e59c6f20be56fe1d6.roa (raw, json)
Hash identifier:          rWEoXLQMwl9g4YEZXFjY1Vlw7K13Az0XNgshCkAYx88=
Subject key identifier:   C4:90:3D:B5:A0:33:7A:4B:F7:08:CE:F0:00:6D:B1:34:07:9D:3B:40
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1AAD2C
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e6d6794393cf68cd43400e4e59c6f20be56fe1d6.roa
Signing time:             Thu 22 Sep 2022 20:58:21 +0000
ROA not before:           Thu 22 Sep 2022 20:57:17 +0000
ROA not after:            Sun 22 Sep 2024 20:57:17 +0000
asID:                     3790
IP address blocks:        200.122.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748268 (0x1aad2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:57:17 2022 GMT
            Not After : Sep 22 20:57:17 2024 GMT
        Subject: CN=e6d6794393cf68cd43400e4e59c6f20be56fe1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:30:3e:e0:51:df:c7:8a:5a:0b:9e:86:f2:
                    5b:95:54:ec:9d:c4:fe:2e:e8:b6:81:74:36:7e:e4:
                    ee:1f:17:39:2e:03:b5:65:4f:45:2c:b5:75:28:b5:
                    7e:82:7e:6a:02:ba:89:4a:fe:6d:e3:41:53:9b:dd:
                    34:57:f3:1c:17:a7:5e:46:aa:d2:f0:c1:29:68:57:
                    8a:67:18:2f:41:1b:83:65:f6:8f:ed:22:c5:4b:74:
                    91:5c:79:53:4e:52:72:76:13:3b:db:2d:ae:39:2a:
                    17:85:99:bf:79:b7:9b:37:cd:27:e9:d4:61:6e:29:
                    41:e5:9e:46:75:28:84:cc:bd:5a:d7:69:ab:d8:5d:
                    93:03:6b:78:d7:dd:36:c7:29:3b:84:68:56:ab:54:
                    fc:47:28:6c:e4:89:e4:88:c5:7c:69:48:39:d3:5a:
                    1b:f7:09:25:6e:dd:d8:b3:3d:59:06:4a:cd:86:89:
                    f6:83:28:c6:41:84:3b:b3:43:16:20:f1:4b:a7:da:
                    37:37:28:1f:b0:c9:6c:88:e7:8d:0c:56:16:30:67:
                    dd:76:f9:9a:90:1d:ec:8c:24:1b:02:f8:af:a9:6b:
                    ea:cd:e5:96:2d:6f:01:3e:d0:62:3b:03:9d:c1:41:
                    c8:c6:6f:ce:00:14:88:53:8e:01:1c:90:0b:4b:eb:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:90:3D:B5:A0:33:7A:4B:F7:08:CE:F0:00:6D:B1:34:07:9D:3B:40
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e6d6794393cf68cd43400e4e59c6f20be56fe1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.122.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:0a:e7:99:7e:5e:bb:8b:ea:47:d7:e8:a8:da:47:6f:c5:
         5d:55:8c:2e:8d:ea:7b:a2:e8:b7:02:63:e1:3e:fe:61:a3:9a:
         1d:f2:a0:cc:63:76:47:8c:a4:3a:21:e6:91:d0:8f:09:68:62:
         cd:7d:52:e0:70:c0:10:7f:d0:42:9f:75:b7:80:1c:44:1e:5e:
         46:f9:bf:73:66:67:09:f8:b8:66:df:c1:e8:d4:ee:8f:7a:e9:
         42:b7:b5:52:87:be:47:84:29:0f:b1:b6:a7:a5:cc:dc:cc:a9:
         7c:7a:03:da:62:46:7d:a8:83:d2:6f:1d:c4:97:5e:7f:b8:24:
         8a:36:43:9d:56:00:ef:31:f1:46:2b:a5:30:06:fd:a1:4a:ef:
         82:92:91:f2:18:20:8c:de:0e:fd:3b:7b:65:f0:3f:fc:36:ac:
         27:8d:f5:85:48:a4:71:16:ef:99:62:a3:64:88:a7:1b:53:62:
         8f:6f:f9:66:9a:47:9b:3d:74:e8:de:76:70:4d:6a:f2:61:f3:
         bf:67:a2:28:e3:c5:ff:28:14:83:8e:43:8f:e9:f2:6a:75:ae:
         be:69:88:05:77:65:91:cc:71:03:34:b5:2b:ae:fd:f3:34:b9:
         d0:8f:19:6e:5f:a0:be:5a:12:7b:fe:40:ad:c2:d3:6b:db:fd:
         98:9b:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----