Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0d30cc7815243e14334239f8ae9ce6d463bb52a3.roa
File:                     0d30cc7815243e14334239f8ae9ce6d463bb52a3.roa (raw, json)
Hash identifier:          dUqCC/H2rsBGVhq3DTN4YI0hsuwYlqTG8Rvo9UHv45Q=
Subject key identifier:   C4:F7:24:01:C0:B5:0F:D3:D9:E8:4C:DC:98:DF:9C:95:DF:B1:8A:3F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       015D14
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0d30cc7815243e14334239f8ae9ce6d463bb52a3.roa
Signing time:             Sat 19 Feb 2022 01:23:03 +0000
ROA not before:           Sat 19 Feb 2022 03:00:00 +0000
ROA not after:            Sun 19 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89364 (0x15d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 19 03:00:00 2022 GMT
            Not After : Feb 19 03:00:00 2023 GMT
        Subject: CN=0d30cc7815243e14334239f8ae9ce6d463bb52a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:ad:e2:fc:0a:47:31:0c:9b:87:e4:5e:9f:
                    ef:fa:6a:f5:30:9f:65:95:b1:7d:a6:c5:39:24:c3:
                    3c:1f:05:55:64:18:dd:c9:de:27:94:74:d6:fe:f2:
                    99:6f:73:93:e0:b5:39:8c:c0:fe:e5:a2:56:04:bc:
                    85:8a:83:6b:64:3b:53:0b:67:2c:8e:09:bc:b8:a9:
                    42:44:8d:c4:a5:5f:24:10:d3:f0:6c:2f:93:51:ce:
                    cc:65:82:82:eb:39:55:0e:42:3c:44:e1:a2:68:22:
                    9f:94:a6:9c:8c:ae:34:59:13:20:cc:cb:3a:cc:6b:
                    8d:46:45:05:fb:17:81:36:64:ef:80:1c:33:ea:6c:
                    f9:58:83:28:89:58:b9:23:13:4c:ab:71:0d:9d:4b:
                    68:1c:a5:9e:3d:13:ce:db:f5:e3:92:ea:44:72:82:
                    7d:6b:96:47:c1:8f:18:5f:e5:a7:70:4a:e8:bd:29:
                    07:93:11:2b:47:02:fe:43:6c:bd:f6:fa:5f:d9:cb:
                    f6:bc:02:ca:ef:b8:39:f4:b4:b5:5d:71:4f:68:35:
                    a9:84:56:87:26:24:b4:b4:49:82:4f:4c:1b:c7:df:
                    e6:db:bf:a0:a7:a5:f4:2b:5c:1e:89:24:5e:fb:08:
                    0a:95:cc:66:00:5d:1c:3b:4a:9f:13:4e:3d:bb:b2:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:24:01:C0:B5:0F:D3:D9:E8:4C:DC:98:DF:9C:95:DF:B1:8A:3F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0d30cc7815243e14334239f8ae9ce6d463bb52a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:73:16:3d:69:5c:d2:da:05:66:7b:03:d1:73:41:d1:35:
         6e:85:18:17:bf:91:ff:77:5c:77:92:07:6d:0e:8b:dc:ef:b2:
         2b:c2:6a:7e:62:a8:bf:a6:70:27:8e:ae:99:75:10:b6:55:77:
         04:4c:ce:ac:7f:f7:94:fb:9a:e1:1b:a5:e1:51:3b:81:a3:51:
         3e:9f:9c:63:d1:4f:27:42:32:35:1a:22:20:7d:7b:28:5d:39:
         6d:f6:0e:2d:bb:5e:7f:19:0a:7d:98:80:3e:8d:cb:37:57:61:
         d7:2c:c8:e2:6f:1f:34:9f:28:a5:14:7d:96:7c:f1:0d:8e:95:
         2d:ce:ba:1b:31:bc:11:2a:02:4b:a3:f3:da:eb:2d:0e:71:8b:
         3e:32:79:a0:f9:23:6a:32:2c:00:7e:ea:af:75:a3:c5:5e:df:
         72:71:fd:2f:c1:b9:9b:7d:b0:e9:be:83:4a:f9:ee:ba:83:f5:
         b8:3b:51:db:ce:80:f9:76:1b:06:7e:c4:02:5d:aa:9b:0d:09:
         2e:94:5f:f4:e4:24:2a:ef:21:8e:c2:39:d7:9d:4a:67:31:02:
         86:1c:f6:10:8b:e3:8f:81:4e:32:56:21:4c:e3:bb:01:4d:8f:
         09:7f:d8:4d:c9:00:24:66:97:bd:53:bd:68:c2:b3:42:a8:1c:
         6e:26:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----