Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0767a2889d56fbbd286e59d5b41be86d9b4e612c.roa
File:                     0767a2889d56fbbd286e59d5b41be86d9b4e612c.roa (raw, json)
Hash identifier:          DzDvYCrNWHZRGbPlMhfmdNnmzsqsZ6rpdBfUTVJNps0=
Subject key identifier:   6A:B5:1D:57:B7:5C:47:18:1E:C9:10:54:45:85:AB:8F:2E:EE:AE:02
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09F5A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0767a2889d56fbbd286e59d5b41be86d9b4e612c.roa
Signing time:             Tue 30 Aug 2022 05:24:07 +0000
ROA not before:           Tue 30 Aug 2022 03:00:00 +0000
ROA not after:            Wed 30 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652713 (0x9f5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 30 03:00:00 2022 GMT
            Not After : Aug 30 03:00:00 2023 GMT
        Subject: CN=0767a2889d56fbbd286e59d5b41be86d9b4e612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:7c:d3:ef:2a:d1:6a:59:58:fd:d6:1f:c0:
                    65:13:07:b3:82:0d:47:68:74:e9:3d:bc:5d:5d:67:
                    45:76:40:ae:24:ac:2d:79:45:0d:93:59:95:b8:f0:
                    6e:7f:5c:ba:b2:1e:09:ee:d0:63:52:55:14:ae:a0:
                    2c:d9:31:94:d0:ec:d3:84:62:7f:d0:49:28:ee:d2:
                    69:44:15:a2:cf:77:8f:98:8e:11:87:d2:cd:fa:1c:
                    8a:1d:65:a3:bf:53:ad:43:4c:28:80:21:5b:6e:c9:
                    8b:d3:86:c1:16:78:41:6a:ed:99:14:e5:9c:93:30:
                    3c:31:bb:01:82:b2:a8:6d:10:2d:f2:57:92:f3:36:
                    d5:d7:61:6e:7f:14:fb:83:a5:40:92:0d:a0:5f:af:
                    67:e2:b3:f5:b5:e1:f0:67:40:75:22:4f:25:f6:a1:
                    64:d6:0f:aa:16:b1:e3:17:6f:2f:9d:b0:1b:8d:42:
                    a5:a7:3b:44:66:10:8b:c0:7e:b2:f2:73:fd:83:3b:
                    b8:83:31:76:b4:f4:20:59:38:e4:20:0e:c0:05:86:
                    f6:d1:1a:45:8c:45:e6:a1:15:cb:48:a4:b4:e5:e1:
                    b2:e0:a8:bd:17:d3:df:9f:86:ad:a4:1a:ee:07:b1:
                    f6:3c:c4:77:62:34:3e:9a:76:47:22:67:4a:04:b4:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:1D:57:B7:5C:47:18:1E:C9:10:54:45:85:AB:8F:2E:EE:AE:02
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0767a2889d56fbbd286e59d5b41be86d9b4e612c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:3c:da:3f:c9:66:b5:2a:41:7d:12:0d:12:f3:aa:a3:21:
         a4:9d:b2:bd:51:12:8c:26:e8:e1:5c:ba:c7:7d:15:b3:f3:5b:
         5d:9b:d9:ee:5d:19:dc:12:b2:3f:32:8b:c1:16:c9:ec:85:20:
         6c:84:9e:f2:0f:7f:6e:32:0a:a2:b6:79:e3:c1:bb:cc:b5:b6:
         ad:bd:37:ed:0b:4c:ab:6f:ed:f2:1f:15:ba:71:3b:8c:e2:e0:
         46:81:29:38:62:57:2e:00:10:25:60:db:0d:df:38:61:3a:81:
         44:16:ca:bd:d1:cc:04:e6:c0:d8:e3:7b:d2:05:fa:90:a0:c1:
         7c:14:b5:c7:15:1f:b7:ff:18:15:e5:8a:cd:b5:73:ab:39:43:
         30:45:c8:99:03:3a:ac:d7:83:dd:e3:0c:c7:c8:94:a2:5d:65:
         7c:f8:e7:03:1c:6a:d3:9b:6f:43:3f:d2:02:f9:f5:c4:a2:d3:
         e7:33:25:fa:20:aa:1c:4a:1f:9c:6c:50:99:a9:9a:e6:a7:4c:
         02:63:db:9c:cd:e4:f0:34:ef:3b:e8:2d:30:44:ba:5d:ee:9f:
         f7:6d:2c:a8:85:74:12:c5:80:a9:f1:bb:51:b7:10:50:3e:4e:
         89:90:30:d1:a4:a8:f9:d9:0a:6a:3d:55:87:7f:2d:43:4a:c2:
         9e:ad:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----