Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/264ef1d6c4bf26b474043e2938a160ff9a69fb23.roa
File:                     264ef1d6c4bf26b474043e2938a160ff9a69fb23.roa (raw, json)
Hash identifier:          klfDIyAeZSMA71uhYFfJOgOUC9qm4LkfSSKLbcQ3r+Q=
Subject key identifier:   70:10:18:6E:B4:14:25:93:99:18:30:B4:CF:4B:B2:05:B4:DF:5A:A6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       070EB2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/264ef1d6c4bf26b474043e2938a160ff9a69fb23.roa
Signing time:             Sun 26 Jun 2022 00:07:06 +0000
ROA not before:           Sun 26 Jun 2022 03:00:00 +0000
ROA not after:            Mon 26 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462514 (0x70eb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 26 03:00:00 2022 GMT
            Not After : Jun 26 03:00:00 2023 GMT
        Subject: CN=264ef1d6c4bf26b474043e2938a160ff9a69fb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1c:52:9d:01:b2:3d:c3:d0:c5:dd:7f:4d:7d:
                    bb:20:43:48:48:a5:5f:a8:4d:d9:8a:e9:3e:2e:65:
                    6f:63:e9:ee:a6:4b:70:1c:52:f6:d0:d3:9e:8d:71:
                    4a:94:15:9e:99:3c:aa:54:cb:fa:e3:62:e6:ce:64:
                    84:c6:e1:3d:28:08:12:0a:68:01:a5:5e:e2:0e:10:
                    e4:79:ca:df:a2:44:8e:4b:f5:f6:ae:04:a4:3c:8d:
                    0f:2f:ca:cf:9b:36:3f:e3:55:88:3e:6c:26:2d:91:
                    85:dc:f2:2f:c1:70:bf:32:79:24:7e:24:a0:94:91:
                    39:c2:7a:0f:61:10:53:6d:c4:4b:c3:ef:8c:c6:2e:
                    9c:31:7d:e1:3a:c1:17:f7:dd:15:42:61:ca:10:2f:
                    3a:68:1f:2b:b8:c3:93:cb:12:86:24:11:52:90:a6:
                    8d:83:98:a4:28:fc:a6:b8:20:50:07:d2:be:98:34:
                    92:d7:96:db:8d:3c:1a:1a:5f:32:17:7b:6d:bb:8b:
                    b1:70:c9:8c:c1:66:3e:89:77:d3:36:57:59:19:da:
                    40:26:d0:25:02:b9:94:a6:85:f0:2c:16:69:b0:e8:
                    cf:fa:89:8f:61:82:1b:74:33:3f:aa:58:dd:c4:e9:
                    e4:0c:b3:67:ce:e8:58:20:df:e7:60:0b:39:6a:b8:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:18:6E:B4:14:25:93:99:18:30:B4:CF:4B:B2:05:B4:DF:5A:A6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/264ef1d6c4bf26b474043e2938a160ff9a69fb23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:d9:be:a6:f7:8f:a5:c7:e2:cb:ec:24:d5:4a:14:33:1d:
         2b:26:91:85:1c:b6:70:56:aa:f0:19:51:3e:a2:df:ef:24:3d:
         59:3a:00:da:3c:2f:6e:8a:63:2f:b4:bc:d6:3e:43:8f:85:11:
         45:db:29:b3:d4:c3:e1:33:89:a1:34:ea:cd:78:1f:07:ee:58:
         db:76:8f:b7:e0:bb:5a:59:9a:73:fa:6f:06:13:27:bb:e5:8a:
         2e:c6:ce:ef:7e:34:d7:01:38:f9:07:27:5b:af:75:2a:76:f5:
         0e:21:55:09:16:b5:d4:54:ab:62:43:c2:3d:e9:c6:e2:65:1e:
         08:04:c7:b8:4f:f2:e8:28:af:ca:b7:40:e1:74:06:a3:b6:5a:
         31:70:47:91:eb:cd:b1:fa:94:4e:72:d4:8e:46:77:3c:6d:f7:
         7e:94:17:a5:86:30:b3:85:34:70:ad:41:13:c7:3a:97:bb:66:
         2a:de:73:3c:e7:f0:6f:60:87:12:99:b1:54:bc:ed:cb:65:98:
         c2:84:aa:11:5a:40:7e:d0:ee:c5:ee:3d:b7:24:ef:16:a0:9a:
         fa:02:dc:0e:39:3a:58:5e:a6:f9:d0:85:91:8e:4a:41:03:63:
         99:24:97:c7:29:d7:89:4d:33:5f:fd:72:8a:de:f5:cd:48:df:
         f0:0f:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----