Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fcd1957495542bc3e7495d068360bfc43a42e47a.roa
File:                     fcd1957495542bc3e7495d068360bfc43a42e47a.roa (raw, json)
Hash identifier:          3jJZ/NXMKNxln/qD5KQd5ns6GNeve2rQVbawfB7EeeU=
Subject key identifier:   A3:38:6F:19:F9:9F:B5:34:A3:51:F3:CB:22:BA:70:C1:EB:A9:22:04
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1A077E
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fcd1957495542bc3e7495d068360bfc43a42e47a.roa
Signing time:             Thu 22 Sep 2022 20:15:05 +0000
ROA not before:           Thu 22 Sep 2022 20:14:39 +0000
ROA not after:            Sun 22 Sep 2024 20:14:39 +0000
asID:                     3790
IP address blocks:        190.241.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705854 (0x1a077e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 22 20:14:39 2022 GMT
            Not After : Sep 22 20:14:39 2024 GMT
        Subject: CN=fcd1957495542bc3e7495d068360bfc43a42e47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7c:a5:e2:39:28:bb:2a:a3:74:19:3a:99:5d:
                    6d:a4:02:63:cb:cb:c3:62:08:f1:c3:29:e3:63:33:
                    74:b3:ff:72:87:7c:9f:cb:c3:03:df:ae:6c:f2:42:
                    5b:c9:2d:47:88:c2:d0:05:59:53:ad:3f:9b:1f:24:
                    45:ce:05:aa:02:c1:d9:6f:aa:27:93:2c:ee:c2:14:
                    ae:5d:66:24:ca:5a:c1:0e:c8:b2:30:d9:40:18:ad:
                    26:59:8f:84:b0:29:4b:71:18:32:9a:88:a9:fc:dc:
                    3b:a1:33:b8:53:3d:02:8b:99:87:2a:57:7f:db:f3:
                    35:fc:5d:b4:d6:32:b8:9f:a3:78:9a:1c:62:ea:d8:
                    28:ae:37:13:21:1c:b9:30:12:9a:18:a0:0e:06:aa:
                    8b:9e:68:ad:8c:29:9f:f7:1c:91:2b:be:f9:a9:ec:
                    f9:c7:8a:86:7e:a0:61:cd:7e:25:d2:04:c9:b0:16:
                    d4:0f:aa:6f:98:2a:eb:13:b9:04:56:9c:4e:62:a1:
                    9d:82:e8:aa:aa:41:1c:e4:bb:14:67:47:14:3f:d2:
                    7a:54:f6:39:0f:08:c3:2e:2a:d1:d8:5a:d1:8e:aa:
                    e3:38:be:ae:73:70:8e:ef:58:01:84:95:a8:87:a1:
                    ff:ff:3e:de:60:c6:69:1e:38:22:d0:96:a9:0c:b6:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:6F:19:F9:9F:B5:34:A3:51:F3:CB:22:BA:70:C1:EB:A9:22:04
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/fcd1957495542bc3e7495d068360bfc43a42e47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:76:fb:ea:ae:84:16:b7:60:f0:77:67:63:56:7d:96:0b:f3:
         11:b9:49:fe:e9:0c:b2:8e:57:04:be:ef:d1:ce:19:a9:9d:44:
         15:99:55:09:b6:e0:8d:d0:28:a6:6b:af:eb:87:be:24:17:4f:
         ff:59:3a:8b:40:24:8d:ef:e5:38:99:80:ce:e0:5d:42:dd:63:
         08:ae:d8:4b:1f:b7:db:82:85:50:ee:6d:05:28:10:09:8e:eb:
         52:7c:77:4f:5a:17:0b:61:ff:dd:40:04:06:59:81:63:36:9d:
         fc:86:d8:da:40:ee:e0:be:b5:44:09:73:b2:dc:7a:d1:ee:99:
         15:ed:5e:fd:e0:16:8b:87:5f:d6:0d:cc:7b:ce:44:2d:d2:16:
         34:04:23:19:e6:e8:b4:cf:46:87:1e:0a:77:25:c1:b0:0f:bf:
         30:8c:07:ba:dd:21:3d:b2:17:fb:95:d0:3f:bd:ae:7d:34:6c:
         db:94:af:37:9e:e2:2b:3c:93:07:0a:0b:06:31:c2:ba:59:54:
         80:16:ff:de:2b:5a:41:30:8f:0d:ed:4e:e5:17:a1:9c:33:27:
         80:38:98:1f:6a:94:f0:74:a7:84:9b:4f:e6:03:d1:5b:ee:d8:
         80:a5:6d:bb:e0:ef:4e:fa:bd:1b:c7:e3:51:26:cf:58:14:d3:
         b4:69:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----