Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/03994d4e88bfba0c889279806800163343e6d246.roa
File:                     03994d4e88bfba0c889279806800163343e6d246.roa (raw, json)
Hash identifier:          f408pRdfrteRX33ZvzZW8Z/LigMS5ooAfilZC9aUOKg=
Subject key identifier:   D6:F4:29:28:E4:53:72:1D:67:1C:05:ED:42:8C:38:E8:44:CE:4D:3D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       7E08
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/03994d4e88bfba0c889279806800163343e6d246.roa
Signing time:             Mon 31 Jan 2022 01:24:49 +0000
ROA not before:           Mon 31 Jan 2022 03:00:00 +0000
ROA not after:            Tue 31 Jan 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32264 (0x7e08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jan 31 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2023 GMT
        Subject: CN=03994d4e88bfba0c889279806800163343e6d246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:ef:e3:8d:d9:fb:64:95:7f:78:09:51:ed:
                    3e:b3:63:81:87:ab:9a:fb:8f:41:f2:6b:9b:70:a4:
                    1d:4d:c3:b6:7b:09:36:ca:4c:b2:6c:10:e0:b8:e4:
                    99:02:71:3e:5c:b9:a9:af:29:12:44:33:d5:f7:33:
                    92:4c:dd:f4:a7:a9:95:c5:7f:7e:fa:e8:e4:57:fd:
                    db:92:99:18:5d:9a:82:1d:cc:1b:c8:a8:ba:8d:2a:
                    aa:f8:1f:cc:34:9a:e5:f1:f0:b5:09:f9:9a:a7:f3:
                    72:53:9d:18:04:23:cf:e7:d9:b0:7b:cb:90:14:18:
                    49:91:cb:4a:db:7c:81:d6:4e:d6:da:6d:0a:f4:7c:
                    58:ab:5d:f4:19:19:9f:a3:fe:19:46:25:23:6a:ae:
                    73:03:df:ff:78:fd:fc:f9:b1:d3:76:ae:e5:ba:66:
                    96:dd:09:7b:b4:9f:49:89:b7:dc:69:02:0b:f2:1c:
                    d0:18:f5:47:22:89:df:2c:46:4d:4f:b4:34:e2:9a:
                    b6:63:bc:2a:9e:91:b9:48:f3:e7:df:01:3d:92:b3:
                    b5:41:5a:08:54:2f:a9:a0:49:75:4d:7d:db:20:23:
                    34:c6:46:05:85:b0:45:6f:ee:20:b1:c5:b3:15:68:
                    f8:ae:cc:f3:82:1d:ba:4e:b7:c5:e8:39:8c:df:31:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F4:29:28:E4:53:72:1D:67:1C:05:ED:42:8C:38:E8:44:CE:4D:3D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/03994d4e88bfba0c889279806800163343e6d246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:46:a1:34:92:6b:7a:49:4b:40:34:9c:34:f4:fe:1c:a7:
         47:c4:c1:fc:37:74:77:40:4b:46:ea:e9:03:90:bc:11:94:9a:
         e9:15:f9:99:45:e7:9c:c2:ed:8c:f0:c5:8d:77:e7:cc:8e:32:
         02:a7:5a:37:b2:47:3e:ad:68:d6:7b:23:75:17:04:c1:9f:d4:
         5f:ab:c1:e6:1d:a1:ca:f6:72:90:c2:05:77:f9:e2:f9:01:9e:
         56:a3:73:01:54:1e:80:8f:ff:cc:90:1e:56:f6:86:36:ed:15:
         35:a8:63:76:9e:95:7a:ff:11:32:58:ff:c3:1a:7e:88:ea:ac:
         bd:d9:58:11:35:1a:ca:bb:41:85:35:12:93:ec:55:f2:a7:57:
         6e:57:f1:b6:ac:5e:0b:ec:1d:0a:3b:7b:98:76:71:ff:a4:14:
         41:7d:08:6e:c9:13:00:99:9f:81:b8:fa:e1:8c:49:a4:5a:bd:
         d2:77:f0:5d:4a:d9:5d:51:74:3d:86:1b:50:a2:35:b4:71:7a:
         66:a7:9f:1e:8c:8f:5b:82:f9:39:73:62:67:1b:bb:74:18:34:
         40:63:65:7e:37:b3:45:67:73:b3:c9:d8:1a:2d:54:94:08:d0:
         3f:34:2a:79:49:0b:90:b8:ce:7a:11:f1:4b:3a:62:60:68:aa:
         90:30:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----