Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/bf63e9cb5e6b1e21b11c312387a37a9c20e63a4c.roa
File:                     bf63e9cb5e6b1e21b11c312387a37a9c20e63a4c.roa (raw, json)
Hash identifier:          7NIPoDEwLZ2mB4CK/xOgpMMQC86UR3BYAmuVG0jeFGA=
Subject key identifier:   C9:AF:23:A4:4B:5F:D4:5F:5D:A3:CB:E7:43:57:3B:41:AF:35:67:98
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C3BE7
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/bf63e9cb5e6b1e21b11c312387a37a9c20e63a4c.roa
Signing time:             Wed 28 Sep 2022 14:06:00 +0000
ROA not before:           Wed 28 Sep 2022 14:04:22 +0000
ROA not after:            Sat 28 Sep 2024 14:04:22 +0000
asID:                     3816
IP address blocks:        200.89.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850343 (0x1c3be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 14:04:22 2022 GMT
            Not After : Sep 28 14:04:22 2024 GMT
        Subject: CN=bf63e9cb5e6b1e21b11c312387a37a9c20e63a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:bf:95:83:1f:a2:b6:13:89:3d:e2:f7:b5:
                    33:ba:be:82:90:32:6f:54:7b:26:1f:7c:d4:88:d5:
                    96:6a:a1:82:7b:4b:c5:76:ae:99:5d:0c:0d:c1:3c:
                    21:87:20:57:7a:8b:56:15:15:63:96:0e:73:e0:9b:
                    7f:0d:11:bc:e1:8c:99:44:02:f3:ed:cd:34:c8:ab:
                    90:f1:63:e7:59:9d:f4:9d:96:ee:ea:c7:54:32:f5:
                    55:ae:e6:20:07:bf:7c:f8:15:5c:34:64:7b:0c:d9:
                    fd:eb:6b:cd:6f:a3:98:05:b9:e8:b5:05:79:e9:e4:
                    fd:b5:07:14:07:81:52:f6:82:19:35:b5:84:7b:f7:
                    67:90:4e:56:ba:98:86:7d:bc:e4:19:be:1f:74:77:
                    d2:60:02:d6:07:7e:09:b6:4d:1b:7a:f4:68:4b:4c:
                    c3:88:d7:46:6c:6c:c7:57:fd:c8:64:85:74:9e:cd:
                    87:b8:ad:c7:9f:38:f0:df:24:28:e0:1d:4a:2a:13:
                    7f:7b:93:8d:0f:b3:16:ed:73:87:1f:5e:61:6b:e2:
                    99:ef:a5:98:16:9e:cd:9b:ba:97:1a:e6:bd:87:4f:
                    79:c4:f7:fe:97:93:25:aa:ee:ae:b9:de:d5:ba:6b:
                    f4:f2:6d:17:4b:71:87:c3:a6:6e:36:03:f1:e6:b7:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:23:A4:4B:5F:D4:5F:5D:A3:CB:E7:43:57:3B:41:AF:35:67:98
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/bf63e9cb5e6b1e21b11c312387a37a9c20e63a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:13:12:88:6e:b3:d1:54:4f:09:d9:71:09:e8:fd:03:44:55:
         f1:48:a4:2b:39:77:d8:de:7a:d9:cf:7c:4a:ac:78:7b:b3:78:
         f8:20:35:fd:32:9a:c7:29:24:60:15:8b:a5:94:60:21:d7:d9:
         da:1b:95:fd:69:ea:c5:8f:39:c6:ee:90:7e:92:e1:be:d9:c9:
         69:13:44:a6:8b:a2:a4:8b:ad:cd:9b:96:4f:32:17:23:94:40:
         ba:be:70:24:19:b3:c6:47:06:47:36:da:eb:95:bf:56:59:00:
         a3:ae:96:c0:5d:2c:58:02:e0:de:93:26:49:85:17:4c:e2:b0:
         68:0d:51:7a:82:7b:1e:65:53:ef:2e:a9:61:d4:15:1c:f2:cd:
         aa:fc:6b:c3:36:17:32:1e:fc:0b:8f:25:30:d9:0b:d3:13:4c:
         a8:a5:c3:b5:90:e4:4f:53:62:87:5b:31:8f:c1:f9:62:aa:05:
         be:b0:80:fb:5f:72:4d:ec:5d:39:bb:6d:04:97:27:c6:41:d8:
         e8:e2:a0:27:3e:86:f1:aa:9d:50:a6:f7:17:58:00:f6:51:13:
         9c:23:2b:06:df:54:42:f3:41:45:5a:54:e6:37:36:05:13:49:
         ad:cc:26:35:02:8e:3f:63:ce:ad:73:ce:a0:e2:8a:e0:35:4d:
         77:d6:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----