Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fac07809a28e5731986ecb5ac09ef11c449aafd6.roa
File:                     fac07809a28e5731986ecb5ac09ef11c449aafd6.roa (raw, json)
Hash identifier:          CKAvzdUY1sxuUewsl3FcYf1L/9zkb+dwb57rrJn1nP4=
Subject key identifier:   29:1B:E5:05:B4:22:40:0D:6C:3A:33:7B:B1:2A:12:34:9E:13:E8:B3
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A83FB
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fac07809a28e5731986ecb5ac09ef11c449aafd6.roa
Signing time:             Thu 22 Sep 2022 20:48:17 +0000
ROA not before:           Thu 22 Sep 2022 20:47:32 +0000
ROA not after:            Sun 22 Sep 2024 20:47:32 +0000
asID:                     3790
IP address blocks:        196.40.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737723 (0x1a83fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:47:32 2022 GMT
            Not After : Sep 22 20:47:32 2024 GMT
        Subject: CN=fac07809a28e5731986ecb5ac09ef11c449aafd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:37:ad:88:c7:1a:bf:85:25:11:0f:d0:9f:
                    2a:2b:33:2e:51:a5:1a:b5:f3:f7:0e:ef:a4:ce:e2:
                    9d:09:72:5e:94:2f:04:54:e3:fc:73:91:06:b3:a3:
                    d6:af:0e:bd:09:60:c9:f0:55:64:87:17:10:9a:38:
                    f9:56:12:85:fe:06:0f:2b:35:85:df:5e:9b:47:cb:
                    16:0f:8d:1f:04:9f:04:69:82:fc:57:2b:7d:8f:a9:
                    cb:47:89:ca:3c:08:98:c5:88:c1:14:cb:ef:ee:70:
                    f3:e4:a1:8d:fb:dc:ca:0b:c2:a9:cb:53:70:2b:7c:
                    41:6e:1d:85:9b:04:67:58:e9:ef:69:51:f6:9a:9a:
                    e0:9a:5d:57:d9:34:91:7f:41:97:f9:29:3a:98:dd:
                    44:78:6e:5b:b3:59:e5:9c:79:5d:5c:a3:9e:d4:28:
                    33:ea:20:1e:b5:07:10:50:eb:6c:fd:09:44:7e:e9:
                    c5:fe:7a:e1:7f:bd:c4:b9:4c:9d:3e:ad:cc:c7:9a:
                    e7:45:55:a6:56:a7:3d:23:f5:57:3b:76:0b:87:19:
                    b2:8f:6e:45:25:98:59:72:6c:65:27:27:e1:83:d9:
                    32:c8:88:96:e2:f9:0f:50:27:0b:9a:54:e0:22:a8:
                    35:c9:57:c9:20:75:5f:ae:05:b6:03:21:2d:04:5f:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:E5:05:B4:22:40:0D:6C:3A:33:7B:B1:2A:12:34:9E:13:E8:B3
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fac07809a28e5731986ecb5ac09ef11c449aafd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:e8:63:cc:5c:49:0b:59:52:f1:09:aa:07:70:cd:c1:ad:
         b0:4e:cb:71:7d:f6:9a:32:57:1f:9e:d9:a5:d7:2d:36:4c:2b:
         77:b2:de:a5:e4:37:ea:0a:c3:4a:de:ba:7c:4e:16:6b:10:e5:
         28:ca:00:3e:e5:49:12:24:7d:9a:af:5e:da:56:05:42:f8:cc:
         9a:09:e5:75:02:a9:6d:10:59:45:19:d1:9d:00:43:2a:70:a8:
         ce:91:63:08:47:78:64:fe:08:c4:69:09:5a:a8:13:d2:16:e6:
         d8:72:94:71:88:5a:df:a9:07:07:00:db:ca:63:fa:3b:77:13:
         35:e6:eb:a3:65:42:af:48:a6:e0:56:50:e1:df:ef:81:1f:74:
         73:33:6b:3e:4b:c3:67:4d:a2:43:5e:0d:83:e4:ef:34:a5:78:
         af:49:1b:83:5f:bf:a4:6d:4c:f8:3d:bc:12:99:96:3e:49:5b:
         67:5d:f1:07:2b:c7:2f:d0:a7:e5:7a:cc:7c:ed:8e:64:84:3f:
         b0:7f:55:59:96:f2:08:0c:e0:d9:0d:4e:42:33:ce:33:9d:bb:
         96:83:ff:52:29:93:20:0c:d4:79:49:47:e7:cf:d6:84:99:78:
         05:fd:17:c4:1a:35:08:9f:aa:66:c7:33:20:39:d8:f0:b1:fb:
         56:7e:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----