Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1f471d232ff41682025eba480fc4b71d8f6946e9.roa
File:                     1f471d232ff41682025eba480fc4b71d8f6946e9.roa (raw, json)
Hash identifier:          Yek3mDuE8vSg41JJ8Mk+R6h2n+Ip2I04fLOIMZFWNGE=
Subject key identifier:   4A:00:E6:46:44:63:BE:0B:0F:50:8A:5B:83:A2:65:EA:1A:05:C4:82
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       031CA0
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1f471d232ff41682025eba480fc4b71d8f6946e9.roa
Signing time:             Tue 29 Mar 2022 03:18:26 +0000
ROA not before:           Tue 29 Mar 2022 03:00:00 +0000
ROA not after:            Wed 29 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203936 (0x31ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 29 03:00:00 2022 GMT
            Not After : Mar 29 03:00:00 2023 GMT
        Subject: CN=1f471d232ff41682025eba480fc4b71d8f6946e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:24:0f:9f:24:23:9c:f0:30:78:02:95:f5:
                    7a:3c:aa:b9:b0:34:3d:49:77:e7:7b:7f:48:4c:df:
                    3f:79:dd:c0:1a:9b:73:06:b8:79:fb:18:dc:45:76:
                    75:de:01:dd:d0:84:93:fc:69:bc:35:31:db:4d:2a:
                    26:c8:a5:90:fe:29:bb:2c:5c:f9:85:79:07:a0:39:
                    dc:fa:fc:49:b8:29:0c:00:77:1d:cf:bf:04:99:b4:
                    89:dc:b4:84:b0:d3:08:c9:f9:29:ce:64:dd:7d:e2:
                    e7:fc:52:53:ff:44:b3:2a:68:c0:39:69:a8:16:a1:
                    a9:6d:80:79:fc:eb:ca:1d:9a:fb:8b:82:f4:01:3f:
                    f2:74:f3:54:41:6c:c6:94:16:07:8c:fa:d1:42:78:
                    18:7b:dd:11:0e:52:72:e2:3f:ad:3a:f4:74:d4:0a:
                    9f:b5:41:3b:ba:e4:1b:fa:3c:96:8c:85:9c:db:cf:
                    60:b9:07:09:97:84:44:4e:8a:92:44:7a:62:dd:4e:
                    d1:e7:3f:cf:4c:47:ea:eb:61:5c:55:c9:dc:0a:94:
                    93:62:7c:b1:bf:64:dc:2c:c5:87:d7:31:c8:7b:24:
                    03:93:9d:6a:2a:9f:fb:be:22:ed:7a:4f:15:2b:ca:
                    12:6f:c4:df:50:0b:4d:a5:b9:1f:d6:7c:73:17:f3:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:E6:46:44:63:BE:0B:0F:50:8A:5B:83:A2:65:EA:1A:05:C4:82
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1f471d232ff41682025eba480fc4b71d8f6946e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:9b:e5:e4:39:0e:54:ec:c2:a4:18:dc:ed:89:de:6d:c9:
         67:fe:af:de:70:55:9c:08:9d:5f:a0:dc:14:71:b4:dd:98:04:
         22:62:5c:0e:6a:90:42:c4:58:05:a7:5d:89:99:06:96:8e:d8:
         4b:af:c4:5a:37:4d:6c:c8:34:a8:62:c3:ee:fe:79:aa:29:78:
         42:e8:81:3a:d7:a7:4d:49:3e:6f:e7:81:ee:db:4f:a1:c3:0a:
         c7:a3:a2:fb:dd:5c:ae:1d:e9:e8:f3:45:6b:34:d2:53:c0:33:
         6b:bf:f0:9b:83:49:42:f7:b6:b7:00:89:78:b1:ec:3e:43:fe:
         2b:4f:68:71:b3:13:1a:16:a8:e1:7d:07:c5:f0:17:1c:a8:ed:
         91:27:75:9a:08:b1:12:a9:59:ae:a0:60:3d:b4:16:f0:81:12:
         4f:79:c9:25:d6:49:1f:ec:64:5b:b6:ef:37:c7:49:bd:cd:91:
         96:92:88:61:24:44:b0:08:64:ba:16:ab:cb:2b:ef:22:66:e5:
         d6:8b:83:bc:7c:d6:67:7b:e3:c5:34:cb:3f:09:2f:c7:e9:03:
         b6:25:9d:7a:f6:aa:aa:4c:0d:7f:dc:28:e0:66:c7:5b:94:e9:
         38:1d:31:b2:ab:b3:4f:76:83:bb:79:de:e8:2b:81:a9:cb:21:
         49:e2:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----