Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bab4a8210d79fdb6fa9db8c8088a1de9aa4ca8b.roa
File:                     2bab4a8210d79fdb6fa9db8c8088a1de9aa4ca8b.roa (raw, json)
Hash identifier:          iS/NQv1ikpW/mYkRloyqKHI+KOzNszVCD2PX8H6rDyY=
Subject key identifier:   4E:D2:A0:3A:A6:3C:F7:53:73:05:68:0D:C5:46:AE:2F:4B:89:51:95
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06ECDE
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bab4a8210d79fdb6fa9db8c8088a1de9aa4ca8b.roa
Signing time:             Thu 23 Jun 2022 01:49:38 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453854 (0x6ecde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=2bab4a8210d79fdb6fa9db8c8088a1de9aa4ca8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:cb:39:ab:14:1e:da:3b:38:fd:79:26:b8:
                    6c:96:ee:60:61:a6:e0:a9:ca:65:b1:7d:43:5f:00:
                    0b:8b:66:f4:58:38:1a:51:ec:75:96:22:8d:f0:8f:
                    90:3d:a7:6c:89:5b:c4:29:c7:11:f9:40:39:26:92:
                    b6:9b:e6:67:ae:ca:de:f3:c0:fb:ef:2b:15:a5:2a:
                    a9:54:39:8f:ed:8c:57:f2:11:7a:a2:ea:1c:9d:d2:
                    97:55:d2:ea:5b:c0:fe:0f:4d:1c:04:43:39:fd:48:
                    10:75:95:60:a7:f0:87:40:fe:3e:51:74:b2:02:2b:
                    48:0a:34:18:43:99:86:79:1c:9c:78:b5:42:91:43:
                    75:3d:f3:8b:bc:fd:57:f1:d1:b5:24:6d:03:51:f2:
                    c0:77:17:d6:df:67:1b:0a:1b:c4:bc:1c:b0:7e:36:
                    af:24:f7:c5:d8:e0:f0:4c:c6:35:a0:24:41:ac:f0:
                    f8:fd:8d:99:f8:6f:0f:e2:46:b9:dc:94:be:3f:3f:
                    b2:14:a3:83:80:11:6f:f6:b5:c9:28:c0:61:61:23:
                    88:33:4a:c1:56:20:96:4e:b7:a7:dc:21:89:f9:1a:
                    71:12:bb:76:d0:1e:d1:b4:ad:64:d7:53:63:4b:f8:
                    36:8b:be:61:64:14:81:34:e4:96:8f:88:de:94:b0:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:A0:3A:A6:3C:F7:53:73:05:68:0D:C5:46:AE:2F:4B:89:51:95
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2bab4a8210d79fdb6fa9db8c8088a1de9aa4ca8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:22:f4:d2:51:ba:44:ae:be:f0:bb:a5:36:a0:57:7f:53:9c:
         ca:66:28:44:19:9b:59:68:1c:18:c1:d0:74:83:bb:e5:2a:53:
         2c:4c:6d:8f:f0:55:c9:92:eb:8a:f6:c5:a8:a6:b2:65:db:c9:
         86:2d:df:39:7e:5d:39:2f:a0:4f:4d:6f:c2:c2:a4:26:6d:13:
         03:82:dc:18:e3:59:81:c5:24:07:4e:ac:db:86:69:d5:a2:da:
         13:cc:8f:4d:90:a8:eb:97:f8:18:45:3f:2c:0c:20:80:9e:0c:
         c4:93:8f:3a:26:01:b7:2f:ad:95:0a:fb:55:d7:f4:62:c3:68:
         f0:93:ad:89:68:88:b3:01:53:09:ff:ad:66:2d:81:e6:a5:f4:
         61:2f:bb:ce:92:98:88:18:05:1d:42:4c:89:b8:c2:6e:28:57:
         d5:b0:43:88:0a:a1:58:b1:44:e7:ac:f2:48:87:8f:5d:fd:f6:
         c7:d1:62:04:ee:49:d7:29:f9:34:0d:dc:c0:11:5e:f0:88:ea:
         ea:96:7e:a2:6b:88:6d:50:03:a9:8c:05:c4:7e:61:88:d7:5b:
         4e:33:3e:2b:92:da:64:69:37:6f:d2:28:4f:31:65:48:a9:a7:
         b8:be:fb:b5:75:1c:53:17:d1:b9:9e:ea:b2:73:69:3a:a7:86:
         23:46:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----