Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa
File:                     4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa (raw, json)
Hash identifier:          Es+EVQwi5isyUo6dPl2hx+WsJUIjFUx1gV59eFvZnc8=
Subject key identifier:   02:B4:3C:0A:C7:85:4D:5E:F6:A4:83:8E:EF:66:15:40:9D:DE:50:20
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       065B10
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa
Signing time:             Sat 11 Jun 2022 01:34:16 +0000
ROA not before:           Sat 11 Jun 2022 03:00:00 +0000
ROA not after:            Sun 11 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416528 (0x65b10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 11 03:00:00 2022 GMT
            Not After : Jun 11 03:00:00 2023 GMT
        Subject: CN=4e4d271f23b1de94ab088e308cff1a7dfe480d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:ce:37:ed:e2:39:17:87:ae:7e:65:f3:9f:
                    e0:25:bb:a2:bb:e8:ee:fa:92:ce:8e:5d:a9:2c:57:
                    d7:aa:d6:d0:d8:35:09:3f:64:81:02:6b:b2:5a:fe:
                    74:db:3d:c2:e7:4f:94:61:cb:1a:cc:38:ec:7f:df:
                    6d:b2:7e:e1:af:24:6d:08:74:dc:6a:29:68:d7:2c:
                    17:04:4d:f7:ea:5d:1a:0c:57:73:70:04:59:72:bf:
                    c7:c3:fa:50:d7:94:6d:45:e6:dc:6e:df:93:27:67:
                    c9:ca:61:cb:a9:77:23:90:21:ba:76:c6:35:f1:fb:
                    d4:a0:47:96:bf:d9:a5:bc:d5:97:c5:2c:44:6c:83:
                    88:64:a0:72:1f:ba:84:2c:f3:da:a7:3c:00:1d:1e:
                    20:ed:12:3e:e0:da:81:88:20:37:1e:64:fe:f0:c5:
                    a5:a0:4c:c6:6e:c5:25:50:92:66:46:40:0e:3c:09:
                    48:5b:c7:90:8d:68:c3:4a:5f:20:f7:81:e3:5c:9a:
                    a0:39:a4:e0:6b:9d:26:7f:6a:87:d6:87:28:1f:5e:
                    25:65:8e:01:09:36:91:42:ef:ee:22:e9:5c:c7:9f:
                    02:f9:6b:7b:39:57:1a:9d:f1:89:43:47:e4:b6:ce:
                    34:67:a8:9e:17:85:2c:81:7d:56:72:be:1f:d2:bb:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:3C:0A:C7:85:4D:5E:F6:A4:83:8E:EF:66:15:40:9D:DE:50:20
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4e4d271f23b1de94ab088e308cff1a7dfe480d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:d8:79:39:b6:ac:c9:34:37:45:f3:6c:97:dd:5b:b8:80:
         5d:e0:30:ca:71:62:1c:aa:2d:08:48:c9:98:85:f7:32:26:ec:
         0c:75:70:5f:06:03:eb:b6:3d:7d:98:ec:79:f1:34:5f:73:bb:
         eb:93:20:39:d9:04:bc:ce:bd:b0:62:c9:47:4c:b6:f8:b4:22:
         da:bf:92:fe:04:7c:29:73:35:61:18:39:e9:4b:7f:2a:ef:76:
         2b:26:22:79:72:da:d4:93:48:7b:92:88:9f:e7:a6:5d:89:21:
         b0:d1:41:10:4e:0a:24:cf:10:3d:3f:91:8b:0f:2f:cc:f4:55:
         a8:ea:00:10:4a:56:a0:70:4f:c1:10:3d:84:e8:2d:10:96:8e:
         d9:5e:eb:f0:15:4a:64:3c:07:11:a6:82:73:8a:10:6a:2a:bd:
         c0:34:a1:b2:97:29:fc:2b:c0:6e:3b:f0:85:e5:3c:df:63:96:
         59:60:c7:0a:d6:be:cf:61:9f:99:30:c4:bd:5f:bc:ef:2f:c4:
         c7:4e:a9:34:a5:ed:b8:74:41:2c:6b:fc:f7:ad:64:eb:17:35:
         b0:18:e5:8b:bc:7d:de:1f:73:f9:a5:b6:bd:7f:47:6b:10:cf:
         8d:78:ee:a3:fa:9b:4c:99:e2:ee:a5:6a:4b:16:75:a7:fd:d7:
         23:0e:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----