Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/3927bdb55524a293d91141d08d6556667c54b7a3.roa
File:                     3927bdb55524a293d91141d08d6556667c54b7a3.roa (raw, json)
Hash identifier:          XyDheUWijYi2zMfnquLlLELEuStfIHucvCmSVsoObDM=
Subject key identifier:   6C:55:09:F3:C8:C2:5F:6F:BD:4A:96:FC:2F:91:70:A8:2D:F4:FC:7D
Certificate issuer:       /CN=6be393e45115b660820b61ac8c4ad69627b29fa3
Certificate serial:       1A16F7
Authority key identifier: EB:44:B3:06:5B:A6:C4:B7:C1:C3:F9:3B:F7:75:8E:B5:09:ED:3F:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6be393e45115b660820b61ac8c4ad69627b29fa3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/3927bdb55524a293d91141d08d6556667c54b7a3.roa
Signing time:             Wed 10 Aug 2022 20:50:16 +0000
ROA not before:           Wed 10 Aug 2022 20:47:38 +0000
ROA not after:            Sat 10 Aug 2024 20:47:38 +0000
asID:                     264625
IP address blocks:        143.208.36.0/22 maxlen: 24
                          2803:2140::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709815 (0x1a16f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be393e45115b660820b61ac8c4ad69627b29fa3
        Validity
            Not Before: Aug 10 20:47:38 2022 GMT
            Not After : Aug 10 20:47:38 2024 GMT
        Subject: CN=3927bdb55524a293d91141d08d6556667c54b7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:ac:42:78:fb:59:e3:09:d1:41:1f:2c:9c:
                    88:ae:bb:ec:af:63:62:1b:2c:02:94:2e:82:54:22:
                    dc:b2:35:19:a1:47:37:71:e2:da:06:d9:fc:c0:d8:
                    a3:db:0e:d0:4e:42:a3:a0:90:b9:48:40:d8:79:66:
                    bd:f2:b9:8f:06:96:9a:7b:6e:e3:1e:4b:09:94:aa:
                    a6:f9:a4:1b:ae:fc:cc:0d:99:74:da:99:56:44:2a:
                    0b:8d:8b:6b:1f:57:cd:c8:25:7e:e1:30:3c:b8:3d:
                    c0:7a:a8:33:02:d1:d8:1a:14:08:a2:00:1d:ba:94:
                    4a:83:fd:f4:56:5b:f7:f0:98:0d:58:f0:59:ff:d7:
                    c7:cd:e3:10:3a:28:b1:1f:c9:da:32:f3:5e:96:56:
                    96:d6:1f:19:70:76:c5:17:75:d8:b6:3e:a2:df:c2:
                    f4:0e:51:3f:50:5b:7f:b1:57:e5:b9:4c:eb:aa:85:
                    66:3f:d6:67:d2:ae:12:b2:bd:d2:66:ae:cf:8c:f7:
                    f5:44:33:19:6d:2b:53:bf:1a:13:6e:8e:10:65:39:
                    c2:49:1e:1c:0a:6b:be:52:82:ad:ba:5e:95:8e:7a:
                    99:88:02:c3:48:40:e0:bf:34:90:56:a8:3a:87:05:
                    2a:3d:18:ec:91:b8:21:5a:8c:16:62:8a:01:f3:54:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:09:F3:C8:C2:5F:6F:BD:4A:96:FC:2F:91:70:A8:2D:F4:FC:7D
            X509v3 Authority Key Identifier:
                keyid:EB:44:B3:06:5B:A6:C4:B7:C1:C3:F9:3B:F7:75:8E:B5:09:ED:3F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6be393e45115b660820b61ac8c4ad69627b29fa3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/3927bdb55524a293d91141d08d6556667c54b7a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4484569-0d8f-48f9-8949-0977791a3cb2/6be393e45115b660820b61ac8c4ad69627b29fa3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.36.0/22
                IPv6:
                  2803:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:66:3e:1c:e2:a7:56:57:55:ec:bc:d6:f6:3f:66:4e:67:91:
         a1:c3:2b:54:c9:45:7a:36:0b:e2:50:fe:fd:be:00:e4:e2:5b:
         cc:33:f5:ee:bd:12:87:fb:48:35:0f:d9:38:78:1a:b8:14:eb:
         82:ac:db:b0:fe:aa:43:9e:ea:68:f4:11:f2:8d:62:b1:e4:a4:
         86:96:e4:72:5b:3c:fb:c2:f5:66:b4:4e:e4:a2:00:91:9d:b0:
         81:d9:20:dc:cb:d0:12:ba:3a:44:7b:6f:f2:31:52:f1:68:3a:
         ec:9e:f7:0b:b4:fe:c6:98:6b:e5:f9:20:b6:a0:7a:85:52:84:
         99:d0:1c:54:5b:2f:8b:13:03:79:02:44:3d:b5:9f:db:51:9b:
         b5:ca:c8:d0:16:1d:88:f7:8f:a5:7c:05:8e:09:a1:ff:9c:69:
         d5:b8:1d:19:ff:a1:1d:ec:c3:ad:d2:59:c2:24:16:f5:2b:64:
         e4:d3:8c:9f:f0:0f:1e:bb:5a:67:d4:04:70:26:bd:f2:fc:fa:
         f2:04:75:d0:ca:ee:9d:33:dd:10:02:80:cc:ad:e6:da:25:d5:
         8f:27:8e:9a:ac:43:3e:90:43:e2:13:17:af:de:56:03:60:fb:
         5b:69:6b:7e:b7:ba:36:db:69:f1:c7:ae:f8:ee:a2:c1:8d:f6:
         dd:ab:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----