Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3c4b64-7a65-406b-aaf5-c1498952fa18/4f69452579f35a85c05ea885aa266773cc5bbb7f.roa
File:                     4f69452579f35a85c05ea885aa266773cc5bbb7f.roa (raw, json)
Hash identifier:          cURF6e4qFKICwN7y2N8Olg1/3H8FJMWVOrHLySgl908=
Subject key identifier:   E9:7A:69:64:21:7A:AE:EB:DC:E7:89:4F:DF:62:E5:88:34:77:15:AF
Certificate issuer:       /CN=ff6cfdb143558c0e5b74984e7f22bc75537686b6
Certificate serial:       180F2A
Authority key identifier: E7:6D:56:E8:BA:5F:BB:E9:52:69:A7:53:EF:38:8C:BE:C9:CE:AD:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff6cfdb143558c0e5b74984e7f22bc75537686b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba3c4b64-7a65-406b-aaf5-c1498952fa18/4f69452579f35a85c05ea885aa266773cc5bbb7f.roa
Signing time:             Sun 19 Jun 2022 07:02:57 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Wed 19 Jun 2024 03:00:00 +0000
asID:                     52284
IP address blocks:        190.123.44.0/22 maxlen: 24
                          2803:200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576746 (0x180f2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6cfdb143558c0e5b74984e7f22bc75537686b6
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 19 03:00:00 2024 GMT
        Subject: CN=4f69452579f35a85c05ea885aa266773cc5bbb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:2b:7a:0d:04:87:02:67:5f:0e:b6:ff:5f:
                    f4:46:3a:68:00:de:23:d2:d0:91:76:ba:48:80:6d:
                    e5:30:31:10:23:1c:65:19:cb:fb:47:dc:fb:e2:d0:
                    3f:82:a3:e9:71:72:95:e0:47:d6:ee:1d:05:ca:23:
                    c0:b3:01:3a:13:9f:bc:f5:bc:4f:22:ea:e3:b5:a6:
                    0d:09:da:21:11:88:1c:4e:c4:dd:31:bc:20:5c:17:
                    8d:b7:ae:ab:59:bf:43:74:5d:6b:b8:43:e3:2d:24:
                    9d:f9:ef:9f:65:06:fe:dc:f7:fe:5b:ee:be:5e:dd:
                    6f:e7:b4:3d:09:f8:4d:ac:67:36:38:cd:e2:a3:db:
                    57:f3:18:86:d7:1e:80:ed:d0:96:e6:9c:68:fc:52:
                    e9:b2:63:16:87:0b:19:eb:df:d9:8c:48:4d:8a:b5:
                    26:a5:86:e9:52:18:2d:ba:5f:8c:3c:58:dd:63:a7:
                    d9:e0:d0:94:05:bc:04:73:28:7b:71:94:64:4a:bc:
                    6c:a7:5e:96:bb:fc:2d:64:35:66:a2:87:d4:92:d6:
                    41:51:04:82:29:5e:f6:f0:e3:d2:0b:d9:03:05:94:
                    62:a2:39:53:ac:f7:f1:bc:42:9e:17:7d:b8:5d:b6:
                    d1:04:d7:8f:67:0d:79:09:2d:37:3d:0c:9b:96:5e:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7A:69:64:21:7A:AE:EB:DC:E7:89:4F:DF:62:E5:88:34:77:15:AF
            X509v3 Authority Key Identifier:
                keyid:E7:6D:56:E8:BA:5F:BB:E9:52:69:A7:53:EF:38:8C:BE:C9:CE:AD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff6cfdb143558c0e5b74984e7f22bc75537686b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3c4b64-7a65-406b-aaf5-c1498952fa18/4f69452579f35a85c05ea885aa266773cc5bbb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba3c4b64-7a65-406b-aaf5-c1498952fa18/ff6cfdb143558c0e5b74984e7f22bc75537686b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.44.0/22
                IPv6:
                  2803:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:80:5c:de:0a:6e:da:c9:30:2b:36:ef:6b:72:c6:ae:35:
         82:8c:e4:5e:57:84:50:d6:91:ca:5e:22:f4:3b:ec:27:19:37:
         ab:85:a8:59:1d:a3:22:0d:37:e3:83:1c:bc:e5:1e:df:5b:fd:
         8f:66:80:9d:fd:94:eb:96:97:34:e2:29:ad:50:8c:81:ef:80:
         eb:61:d0:4a:63:8e:33:7f:d2:43:b2:54:ce:ee:cf:ad:ba:5e:
         7d:ce:12:8c:2c:2a:6c:3c:85:75:08:d3:da:c3:d3:97:9d:e9:
         82:f3:54:49:5d:ce:7b:80:60:8f:9c:d1:4e:a2:fd:d1:82:dd:
         1c:90:22:88:ba:33:3d:32:88:e7:4e:8c:a6:51:a4:62:97:64:
         13:11:c4:73:b1:ad:d3:d1:8d:87:1e:bc:26:cc:74:ce:ae:9c:
         05:65:c3:db:6e:0d:12:b9:44:c4:f4:9f:4e:83:01:2c:3c:e7:
         9e:e1:71:5b:79:29:4f:56:87:56:c0:85:62:76:eb:97:f2:ab:
         db:6e:1f:50:d1:7e:c9:f4:f5:ee:62:0a:e9:51:01:a1:2f:40:
         f6:85:3b:83:2c:bd:b1:3c:45:9b:c0:40:f3:ac:3e:a9:61:33:
         81:54:e2:86:f5:fe:65:6d:cd:61:16:c3:77:e3:ad:4e:d1:b8:
         f9:ae:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----