Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6b782d0a70306d2b62debda4b5a2b79e018454a6.roa
File:                     6b782d0a70306d2b62debda4b5a2b79e018454a6.roa (raw, json)
Hash identifier:          9MsLVNYWvJqdTB7BnLv55Nv0xbATf989quftOeMNxGQ=
Subject key identifier:   A3:B2:37:CF:22:F7:14:18:EE:4E:1B:00:6C:FF:64:60:EB:1E:6A:E9
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       07C6DA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6b782d0a70306d2b62debda4b5a2b79e018454a6.roa
Signing time:             Mon 11 Jul 2022 00:26:02 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Tue 11 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509658 (0x7c6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2023 GMT
        Subject: CN=6b782d0a70306d2b62debda4b5a2b79e018454a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:ae:4e:d4:5c:05:59:e4:2d:df:3a:ab:03:
                    af:57:dd:6c:f2:b6:3b:69:c2:eb:e7:e5:ee:7c:b8:
                    65:61:b5:e2:52:29:6f:73:90:a9:37:76:1f:9d:6b:
                    10:25:4e:43:6c:bb:70:0e:7d:8b:b5:bc:b8:2a:00:
                    53:f9:f0:d4:ff:bb:45:24:56:ac:1e:35:b5:8e:f5:
                    bd:c5:84:7c:57:3e:66:c1:5a:74:cc:fd:d7:e7:24:
                    ee:1b:42:0a:eb:4d:3a:b1:4c:26:ed:5e:d1:53:f3:
                    3d:de:66:d1:ed:e9:fb:7a:71:bf:cc:cf:dd:14:14:
                    56:28:eb:39:87:15:06:7a:0d:7e:e1:b7:7b:75:b3:
                    bb:94:fd:97:ba:89:6f:ee:6b:b1:86:aa:cd:f9:aa:
                    21:0a:06:a9:af:76:36:91:0b:41:c5:29:53:7f:c3:
                    ca:b8:25:aa:25:fd:b9:4d:c8:0e:37:ec:ee:2a:2e:
                    ec:0a:49:77:d4:b8:d4:d5:19:e6:46:4e:df:17:c3:
                    d9:43:51:5c:71:96:c8:cb:bd:b1:3a:15:56:af:81:
                    4f:ca:d4:9f:1c:10:ed:79:57:9b:28:7f:5a:c8:79:
                    1c:11:41:cb:f0:b0:97:7a:95:c1:27:67:d4:fe:ab:
                    42:9a:22:b5:27:6e:6f:19:48:c9:98:a8:41:96:a1:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:37:CF:22:F7:14:18:EE:4E:1B:00:6C:FF:64:60:EB:1E:6A:E9
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6b782d0a70306d2b62debda4b5a2b79e018454a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:5f:94:f5:64:ca:1a:a2:05:c9:ca:3b:26:b9:e4:89:14:
         33:ad:9c:77:54:a4:dc:f9:5b:52:00:5d:16:3c:ab:90:43:ae:
         e4:64:ce:17:a3:dd:32:80:ed:b6:f5:4d:a0:3f:d1:91:7c:31:
         da:9c:c4:59:16:fa:ff:b6:f5:b7:7e:8c:26:07:43:83:8b:d8:
         22:88:b9:ae:d1:e8:f5:3f:d4:be:29:4a:e1:b0:ad:10:e8:0c:
         2e:a9:42:89:4f:bd:0e:4c:1e:6c:6f:00:b1:e3:c4:2e:27:97:
         18:29:ce:3d:d5:0f:f0:07:4a:1b:5d:86:22:bf:e3:2c:c3:58:
         7e:b4:f7:8d:fe:f0:e7:ba:30:e0:75:97:fd:75:6c:df:1a:f8:
         c9:c4:06:2e:77:7b:a9:16:55:d8:5e:e0:ac:3f:a7:f3:d9:51:
         2e:9f:1c:db:17:c6:ed:1f:da:ca:a1:47:56:4a:5b:1d:34:69:
         e4:fc:dc:75:eb:f0:e1:25:78:85:12:28:1a:78:96:38:4f:be:
         75:4e:12:c0:db:7c:2d:93:8e:5c:87:cd:a6:15:be:79:d6:08:
         f0:76:0f:d7:8e:bd:3b:df:76:13:76:5e:27:48:ce:b0:e7:3a:
         ad:fc:27:8d:d3:c2:35:24:1c:38:44:bc:75:a1:dd:b4:d2:e6:
         94:50:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----