Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/670863617215b42ca07cf0d64d21ad6601a3a2b3.roa
File:                     670863617215b42ca07cf0d64d21ad6601a3a2b3.roa (raw, json)
Hash identifier:          I0NeHM5GbOD5GYCxNo3Z9Igdr/s72VfuJVvuVACRlIY=
Subject key identifier:   3D:AC:FF:11:07:B3:D1:CE:DB:40:8E:FC:BD:DC:64:85:77:1D:D2:91
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1ECBD1
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/670863617215b42ca07cf0d64d21ad6601a3a2b3.roa
Signing time:             Wed 23 Nov 2022 12:54:32 +0000
ROA not before:           Tue 22 Nov 2022 12:44:30 +0000
ROA not after:            Sat 23 Nov 2024 12:44:30 +0000
asID:                     3816
IP address blocks:        186.103.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018257 (0x1ecbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Nov 22 12:44:30 2022 GMT
            Not After : Nov 23 12:44:30 2024 GMT
        Subject: CN=670863617215b42ca07cf0d64d21ad6601a3a2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:b7:c6:9c:ae:7f:5c:50:10:e2:06:07:ef:
                    ab:3d:a8:31:97:2f:07:95:a2:7f:ff:8a:bd:82:3e:
                    89:ed:4e:5d:46:75:f3:4b:a5:30:2f:9d:2c:b2:90:
                    22:b7:3c:28:02:df:d8:de:c3:cc:a6:44:1b:db:bc:
                    ce:a0:8b:29:76:76:1c:8a:31:8f:2e:d3:3b:6b:71:
                    09:ce:54:b4:89:50:c7:87:78:f7:d8:a0:26:cd:7e:
                    61:fa:51:45:f4:a9:62:bf:2a:e9:7f:1b:ed:6a:2b:
                    bc:a5:ac:7b:61:c6:83:e4:b3:42:c6:18:ba:4b:cd:
                    5f:cc:93:1c:52:27:6c:3b:07:43:1c:2c:ab:15:7f:
                    c8:f1:e1:e4:f5:8d:60:ed:7d:84:8c:53:64:ab:25:
                    9f:f9:6e:0c:e1:ea:25:f7:3d:4d:90:4f:56:a0:f8:
                    4b:35:b4:cc:ab:d8:de:c0:4c:72:fe:29:74:80:95:
                    d8:ed:b6:99:2a:69:3d:dd:b1:08:90:a3:6f:f0:29:
                    5e:f4:8f:a3:d2:81:2b:23:e2:fb:6c:b9:c0:a2:70:
                    02:33:d4:95:eb:f9:a2:1b:ac:75:c2:93:0f:f4:0b:
                    3c:e7:40:19:a7:d8:ab:c7:00:49:2c:8e:e8:a4:f7:
                    c0:b1:3f:09:60:9e:0a:9a:04:f2:a8:ea:da:c3:ce:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:FF:11:07:B3:D1:CE:DB:40:8E:FC:BD:DC:64:85:77:1D:D2:91
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/670863617215b42ca07cf0d64d21ad6601a3a2b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:74:63:ea:a7:18:d4:2e:e7:0d:aa:0c:b7:ee:4c:01:70:a4:
         2b:b6:b6:f8:6d:9b:f0:2c:58:28:72:ff:7c:76:cc:b2:47:1b:
         9c:e3:7d:27:6b:2a:70:a7:13:c5:73:46:9b:0f:b8:39:d9:fc:
         fa:3b:50:8e:b6:14:e1:64:78:c4:c3:6c:41:b6:a3:63:58:29:
         98:ab:98:02:a2:4b:25:fa:f0:a3:ee:51:87:88:7c:66:76:a2:
         c4:04:6b:ee:e4:c0:b1:a0:84:58:78:98:74:9d:7b:16:bb:89:
         c9:ad:9b:b5:b9:e6:53:c3:1e:cd:a7:3a:aa:db:98:db:57:c3:
         7f:1d:8e:60:f7:63:b3:0e:7a:f8:34:51:7b:a6:0c:34:7a:bb:
         4f:78:12:e2:8e:cd:84:3a:7e:a2:1d:5c:94:5f:b8:cf:a9:40:
         69:ed:84:b5:09:f3:2f:da:76:a4:88:9e:a7:31:28:44:81:f7:
         df:a9:92:00:77:38:a9:cc:04:96:81:29:c2:6a:9f:3a:73:18:
         73:68:c6:9d:32:6a:ed:42:20:21:75:59:93:8d:ec:16:9e:4d:
         e4:d9:fb:b0:7d:dc:eb:5e:79:74:01:58:16:84:0d:78:df:e7:
         07:e9:d9:52:ac:11:b5:0e:a6:b1:ae:3a:a3:a6:57:cc:45:b2:
         e7:e6:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----