Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/57cf76d2873f21d20101f3b5903d59cfe4d09b51.roa
File:                     57cf76d2873f21d20101f3b5903d59cfe4d09b51.roa (raw, json)
Hash identifier:          B3qZuvW5IEzhlZ9NlgrqfviCuHhxwnw/sYnn98qnZTI=
Subject key identifier:   DA:A4:8F:AD:87:F0:BE:04:A6:CC:B1:BB:CA:7D:B3:76:58:B1:FA:A3
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C7B30
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/57cf76d2873f21d20101f3b5903d59cfe4d09b51.roa
Signing time:             Sat 22 Oct 2022 00:13:18 +0000
ROA not before:           Fri 21 Oct 2022 03:00:00 +0000
ROA not after:            Sun 22 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817968 (0xc7b30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 21 03:00:00 2022 GMT
            Not After : Oct 22 03:00:00 2023 GMT
        Subject: CN=57cf76d2873f21d20101f3b5903d59cfe4d09b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:d5:60:3d:1e:dc:67:d3:b0:c2:8a:98:51:
                    e5:bc:18:39:4d:6b:1e:df:90:6f:d9:70:16:bc:c2:
                    23:ea:28:a9:bb:5a:d3:08:15:8a:2b:0e:dc:a5:43:
                    75:3f:ad:cf:d7:b6:9b:90:d8:15:2d:a5:e9:03:4b:
                    d4:41:c6:ce:25:ed:bd:c2:76:6b:22:15:3c:65:76:
                    74:93:91:97:25:96:9c:4d:00:17:b2:6d:e1:25:46:
                    b1:a2:62:d6:e2:69:15:fb:07:07:fe:dc:92:4c:ae:
                    44:33:31:62:dd:9a:f1:c2:03:e7:9e:0a:3d:22:fe:
                    9c:af:c8:fc:16:50:07:96:3e:36:fe:de:5e:78:63:
                    d7:ea:1c:e9:44:0f:ad:a8:bb:8c:3a:4a:72:d5:3d:
                    3c:72:5b:70:69:74:d8:5c:2c:b2:66:94:bd:3a:3a:
                    41:40:94:5b:8b:4d:79:98:dc:81:36:e4:c6:63:50:
                    49:d2:bb:8b:db:83:93:24:67:1d:1e:38:2b:ed:16:
                    40:47:c3:29:ee:f4:c1:9c:7b:b4:ba:64:e9:30:0f:
                    7e:ec:86:e7:24:8f:8d:da:32:12:34:c0:f1:c2:2b:
                    4d:97:67:c4:3f:e6:ce:73:a7:c4:78:c9:21:32:d4:
                    f3:c9:a8:07:7f:67:20:8d:b8:d0:c3:74:74:56:f4:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A4:8F:AD:87:F0:BE:04:A6:CC:B1:BB:CA:7D:B3:76:58:B1:FA:A3
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/57cf76d2873f21d20101f3b5903d59cfe4d09b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:13:f7:c6:37:4a:f1:a3:5f:a9:7a:3f:c5:fb:68:11:e3:70:
         c3:bf:18:37:78:3d:81:19:a3:0f:56:18:ba:8a:d8:26:0e:d1:
         7e:5f:67:35:ac:09:64:a7:58:68:a0:5c:49:2d:c7:18:01:aa:
         30:f4:de:bb:8f:d1:10:ed:85:2e:40:97:19:8a:d1:60:5b:2b:
         c7:0a:ab:43:97:fb:f3:62:8f:b1:7b:1f:c8:08:4c:02:60:78:
         e7:f9:68:9c:5f:86:8f:1a:d4:62:0b:97:1c:a8:c9:6b:3c:75:
         85:0e:27:0b:8e:39:2e:d9:34:01:ed:8d:cb:d3:ee:a0:df:aa:
         65:51:f4:81:49:fa:40:39:47:0f:fc:6e:26:51:7c:89:e2:ee:
         f4:11:14:1d:4b:57:64:7c:e9:ec:b8:9d:53:f8:91:6f:bd:ac:
         ff:77:d9:8b:17:0c:db:f0:10:34:94:0c:0a:02:60:46:a2:fb:
         7c:87:cd:71:02:de:88:bd:f8:c6:18:41:c2:c8:0b:e6:13:f3:
         1a:4b:a3:5d:5f:e1:0f:79:6b:f1:c4:4d:a7:19:6a:59:c0:b1:
         7e:91:f5:00:18:63:bd:84:fb:95:86:02:31:95:63:27:ca:7c:
         bc:04:6a:cf:61:90:58:c8:f3:18:4f:dd:eb:51:e0:5a:1b:26:
         0d:c4:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----