Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e8f8cd5decc5eb4ce413730dd5cde7411bbe7378.roa
File:                     e8f8cd5decc5eb4ce413730dd5cde7411bbe7378.roa (raw, json)
Hash identifier:          QOmSXDZ3D5ZBhpcYr8ZIuxhPSpsFP+ixvuWfG/6kQ0c=
Subject key identifier:   62:EB:E2:C3:F2:54:DC:62:0B:54:33:3C:32:05:87:BC:D4:A4:FA:24
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A7C7D
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e8f8cd5decc5eb4ce413730dd5cde7411bbe7378.roa
Signing time:             Thu 22 Sep 2022 20:42:39 +0000
ROA not before:           Thu 22 Sep 2022 20:42:12 +0000
ROA not after:            Sun 22 Sep 2024 20:42:12 +0000
asID:                     3790
IP address blocks:        190.241.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735805 (0x1a7c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:42:12 2022 GMT
            Not After : Sep 22 20:42:12 2024 GMT
        Subject: CN=e8f8cd5decc5eb4ce413730dd5cde7411bbe7378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:3f:23:a3:f3:62:20:7e:3f:0f:26:8c:c4:
                    f4:e9:8c:d2:55:3a:96:ba:4f:6c:75:0e:2d:5d:6f:
                    64:c1:96:9b:86:4b:ca:2a:98:94:4d:35:4e:07:cc:
                    1d:44:23:71:0c:35:67:63:5f:74:9d:98:80:e3:0c:
                    dc:a2:c8:d7:6d:05:a1:3e:6f:62:aa:cb:ea:65:a8:
                    b9:e2:1f:cc:45:8e:64:9c:1f:ad:5c:4e:ac:1d:41:
                    1e:77:25:9d:bd:e7:2d:a8:5a:55:95:30:d5:11:3d:
                    4c:98:e2:8f:98:b8:8d:c1:a4:57:5b:aa:dc:c0:01:
                    e8:98:c8:ac:45:1e:70:eb:fa:28:c7:12:c1:3d:9f:
                    27:67:b4:69:01:a7:1c:f2:63:dc:a9:f5:c3:96:54:
                    6c:6f:6f:b5:65:69:7e:e8:53:3e:2a:72:f1:8f:1e:
                    d7:d5:d8:8c:6f:e4:90:91:87:ae:82:0e:02:0b:3d:
                    61:97:78:cb:d9:79:3e:18:e7:b0:80:b7:16:26:ec:
                    d0:0a:29:7f:85:1a:0b:04:d0:b8:40:33:1d:6c:d4:
                    2a:e6:2d:ce:72:33:48:19:61:91:36:46:72:c4:e4:
                    e3:87:fb:66:b9:4c:64:1f:fa:03:c1:39:98:2e:02:
                    0d:cb:d7:28:d3:84:16:24:68:6d:80:1f:fc:9c:72:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:E2:C3:F2:54:DC:62:0B:54:33:3C:32:05:87:BC:D4:A4:FA:24
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/e8f8cd5decc5eb4ce413730dd5cde7411bbe7378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:03:0a:08:9f:aa:c1:1d:66:22:0a:fa:07:16:6e:54:de:
         9f:ba:55:2d:4b:ec:29:8d:a4:62:aa:6d:33:fc:56:a8:ab:2a:
         40:51:36:f3:30:6d:ef:7a:4c:7d:28:f8:67:1b:52:ba:d9:c3:
         33:e1:d3:fb:2c:4f:eb:3c:5d:2d:b1:5a:76:7e:49:88:2f:2a:
         14:b5:72:84:1f:60:4c:fc:45:c3:28:0f:43:f2:ad:64:ae:56:
         2d:cb:38:6a:aa:3a:b6:b1:58:0c:a2:59:40:78:0e:64:23:25:
         54:a5:21:bc:59:83:e4:27:fc:eb:4a:74:44:a0:c6:52:bc:e5:
         ff:4b:13:e7:08:4f:76:33:d7:38:0c:82:49:e0:e2:27:7c:e7:
         2a:27:b7:f0:09:a0:42:9e:86:dc:02:3e:79:15:84:bb:e0:0a:
         c7:5a:bc:5b:63:b6:86:c6:4c:8a:a0:5d:b1:ca:0d:e2:20:21:
         aa:bc:e0:8d:ac:50:84:f2:13:83:dd:d9:bf:8e:03:99:96:6f:
         10:d5:5e:d0:bc:40:a6:06:eb:a6:3c:8c:70:4b:64:46:ea:bc:
         9e:bc:71:9c:e1:71:9d:7c:34:6e:69:2c:7b:60:3d:0e:4a:0a:
         64:fc:88:04:db:12:16:38:f4:4a:35:96:51:0a:e2:28:31:68:
         fb:cd:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----