Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa
File:                     0388cd252fb8f5b461cd90033651437abf58e329.roa (raw, json)
Hash identifier:          eOEk02OzLFRATU/jhR72Seg7MqL/Rw9y1kdTgoaOJJ4=
Subject key identifier:   D0:9F:8A:15:46:AE:AA:7C:DA:CB:E8:99:10:11:51:9F:6B:69:40:CC
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0857A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa
Signing time:             Mon 25 Jul 2022 00:07:57 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Tue 25 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546729 (0x857a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2023 GMT
        Subject: CN=0388cd252fb8f5b461cd90033651437abf58e329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:11:49:68:a1:53:bc:ea:1e:9a:52:a8:0a:
                    c3:90:b6:3e:a5:7c:d3:6e:2a:88:e6:3c:11:93:50:
                    f2:bc:26:69:f6:1a:b5:6f:7e:70:25:1b:49:55:f4:
                    91:0e:de:4c:97:da:12:ed:a0:28:8f:dd:25:87:84:
                    53:32:df:c0:10:ca:0e:18:28:3e:06:b6:c6:bc:02:
                    58:24:83:42:1c:9d:d1:2a:16:a7:aa:ed:37:4f:37:
                    bc:ad:37:8a:83:a4:08:ad:b9:14:45:a4:f1:5b:8d:
                    65:29:bf:50:22:5b:c8:fb:d9:42:6b:a3:be:7a:d2:
                    bf:40:f1:6d:19:e0:39:8e:f9:9b:55:0d:f3:e6:63:
                    a8:4e:08:eb:b0:02:99:6a:64:d1:74:a1:c9:07:e6:
                    51:d1:7e:89:e8:a6:5f:08:f8:90:e7:5d:1a:aa:d8:
                    9d:73:97:7d:ae:2e:3e:db:8a:05:b7:21:cc:03:02:
                    86:a1:f6:57:8f:4d:a6:fd:f9:9b:0e:f0:ec:f6:3d:
                    86:07:62:d5:ed:e6:c2:76:1e:6a:13:98:fb:a9:3a:
                    a2:2e:9e:3d:b5:81:fa:3a:fb:22:40:b0:79:9e:3a:
                    b9:47:73:61:26:cf:0c:93:6f:41:18:96:1a:ca:5f:
                    b7:6b:43:af:21:ef:34:b7:bf:3c:2e:e6:48:ee:b4:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:8A:15:46:AE:AA:7C:DA:CB:E8:99:10:11:51:9F:6B:69:40:CC
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0388cd252fb8f5b461cd90033651437abf58e329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:de:d0:c1:fa:6a:3a:75:f5:83:ab:95:b5:77:2f:17:9b:
         50:f6:cf:f2:55:46:45:43:c3:92:e5:a0:d6:e0:a4:ee:95:c8:
         02:8f:a0:f5:90:f1:0d:71:3a:b8:74:a1:ca:17:cd:4c:84:52:
         a0:2b:5a:93:7a:6d:e1:d8:0d:1d:9e:e9:68:db:e1:12:8d:41:
         4c:98:88:31:5a:7b:9d:c7:fa:dd:c4:6c:2d:a9:9f:00:aa:3d:
         dd:1f:c7:4b:1d:ec:10:be:15:df:e5:88:1b:a1:79:1c:0e:50:
         38:b9:a4:a2:34:6b:f5:2b:8a:a2:99:4d:86:c8:a8:b1:06:95:
         59:a9:49:68:16:03:84:29:f9:e7:39:a5:53:62:a1:67:7f:b2:
         ee:bd:08:4b:b6:e3:4f:b0:35:63:7e:cd:b9:eb:9b:9e:79:0d:
         19:fc:5a:cf:0c:a7:0e:8a:7e:b9:af:74:ee:03:31:8c:2f:cf:
         f9:6e:24:91:8a:c7:fc:1d:a8:a6:94:02:85:87:b3:38:ce:53:
         f0:2b:af:1e:0a:07:e0:73:d1:81:96:e4:41:b2:9e:ff:84:f8:
         5a:d1:bc:7c:ec:ab:71:30:cd:ec:5b:b3:fe:19:ed:2f:28:26:
         a8:2e:b7:1c:ef:a0:e9:7b:c8:76:8a:a2:ff:1f:95:40:21:e7:
         65:aa:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----