Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ead314bdb0992c82440cce7ecff901a39d45e989.roa
File:                     ead314bdb0992c82440cce7ecff901a39d45e989.roa (raw, json)
Hash identifier:          6hcItoWf085TklgUNsticjq/LTja1lUIkfHJ907OhLI=
Subject key identifier:   E8:0C:84:A6:71:4E:0C:D4:8A:6A:92:B8:06:50:BB:04:E1:BB:61:E0
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       199526
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ead314bdb0992c82440cce7ecff901a39d45e989.roa
Signing time:             Thu 15 Sep 2022 20:53:22 +0000
ROA not before:           Thu 15 Sep 2022 20:53:00 +0000
ROA not after:            Sun 15 Sep 2024 20:53:00 +0000
asID:                     3790
IP address blocks:        190.171.22.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676582 (0x199526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:53:00 2022 GMT
            Not After : Sep 15 20:53:00 2024 GMT
        Subject: CN=ead314bdb0992c82440cce7ecff901a39d45e989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:79:48:f6:a7:48:d1:56:49:68:77:13:8c:
                    cc:03:d2:01:b7:35:aa:e9:4d:e8:d0:f7:56:28:83:
                    17:e4:4a:c3:64:33:35:15:7f:75:92:db:96:20:f4:
                    2b:16:d7:df:c2:97:9b:15:6a:20:61:9c:12:4c:38:
                    ca:16:47:4c:f1:2f:08:05:0b:55:ce:a1:15:d2:1d:
                    10:99:4b:a8:8f:0b:a0:3a:89:1d:e1:81:dc:2c:c7:
                    5e:cd:52:76:b6:93:de:02:6c:b1:07:ab:6d:f6:3e:
                    1a:c2:c6:3b:a9:34:ba:48:94:fc:4c:52:40:fa:aa:
                    48:3c:50:48:bd:66:2f:62:11:76:65:7a:1e:e5:e5:
                    66:c7:cd:d9:9a:37:94:34:af:f7:e1:83:b6:2a:ec:
                    fc:28:65:59:e1:c0:9b:5c:d8:db:e5:6d:36:d2:ec:
                    65:23:d6:3c:1b:aa:93:86:af:c2:b1:95:56:29:82:
                    64:e8:38:a4:af:2e:87:5d:2c:d3:3b:54:dc:62:22:
                    cd:ef:91:c4:48:67:96:9a:e7:6c:d9:98:e2:58:4d:
                    dc:00:b7:05:a4:04:87:85:c2:4c:ac:54:b8:43:54:
                    cb:93:6e:41:0c:ad:59:80:24:05:f3:f0:7e:a0:d1:
                    6c:3b:2c:19:0a:bf:1a:dd:73:72:ea:27:a3:2c:e2:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0C:84:A6:71:4E:0C:D4:8A:6A:92:B8:06:50:BB:04:E1:BB:61:E0
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/ead314bdb0992c82440cce7ecff901a39d45e989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:19:a2:f8:94:98:15:91:db:41:67:c6:6f:ee:f7:a9:3a:5b:
         7c:7b:c2:77:08:47:05:c2:00:bf:93:7f:4b:28:46:0c:42:7d:
         bb:8f:e5:ac:03:a9:0c:83:cc:db:7c:82:8c:f6:74:0f:45:5f:
         f4:13:87:03:82:98:4d:64:25:68:6c:46:8c:c6:0b:46:cf:59:
         62:2c:6d:f2:cf:07:d0:59:7f:9e:86:0d:f7:6d:9e:a7:3e:5a:
         ee:60:d9:8a:4e:4b:d0:7d:aa:f2:b9:8b:ba:38:88:4f:c0:02:
         6b:5b:0f:f5:02:0a:0f:fc:5c:e7:e4:6c:3e:08:3c:3d:e4:f3:
         89:b2:da:9c:da:35:9e:c4:b1:08:bb:c6:eb:6a:78:61:06:3d:
         45:80:3f:3a:e9:13:dd:39:b9:68:87:dd:6e:b7:c8:2a:2a:52:
         18:e2:dc:93:4c:52:d2:4a:1b:93:4a:d3:24:07:e2:87:d6:de:
         0f:e9:5d:66:18:fc:4e:c4:a2:e8:f8:d0:e3:66:7f:b7:c2:38:
         b7:6f:9a:0a:76:8a:ef:a2:de:ce:01:aa:15:dc:bb:aa:9c:a2:
         52:23:9b:1e:51:fe:11:a7:9c:c8:82:a9:99:a6:ea:f1:2a:fd:
         e4:5a:aa:9d:7a:60:a0:ec:69:8b:12:36:7e:9b:33:a5:ab:ce:
         59:e6:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----