Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ceff5f5606957a87f31aaae69f54e006c950d7c.roa
File:                     6ceff5f5606957a87f31aaae69f54e006c950d7c.roa (raw, json)
Hash identifier:          eNxNF8fHgL5LKYrf57VaQrZSgyO6PNtoxMyNvai679M=
Subject key identifier:   B1:82:71:A9:7D:F8:2B:08:F0:22:45:23:B3:A0:E0:C8:55:D7:07:85
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       03AEED
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ceff5f5606957a87f31aaae69f54e006c950d7c.roa
Signing time:             Sun 10 Apr 2022 10:28:56 +0000
ROA not before:           Sun 10 Apr 2022 03:00:00 +0000
ROA not after:            Mon 10 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241389 (0x3aeed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 10 03:00:00 2022 GMT
            Not After : Apr 10 03:00:00 2023 GMT
        Subject: CN=6ceff5f5606957a87f31aaae69f54e006c950d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:9b:3c:63:ec:59:eb:92:fe:bc:ef:d6:30:
                    7b:23:b8:ec:dd:da:ec:78:cd:23:5a:21:46:73:ff:
                    f0:95:f6:a4:14:d6:83:34:c7:cd:9c:06:bb:27:e1:
                    c9:ea:97:b0:ee:34:e4:c5:a2:4a:3b:63:ae:2f:26:
                    c3:00:f5:d5:d2:c7:9a:53:8c:18:2d:f7:fc:eb:c1:
                    92:e7:c0:04:88:6d:c2:e0:a1:8a:7e:52:0b:06:09:
                    49:64:3c:86:64:73:27:73:91:01:d4:87:f6:46:36:
                    71:dd:99:d9:f7:70:23:0d:fd:e7:39:cb:07:91:e6:
                    83:62:70:aa:60:82:36:9d:a9:0d:b2:f0:13:2f:5b:
                    3a:66:d8:e3:42:a9:16:30:dd:6e:24:02:e5:a3:b0:
                    8c:7a:87:a7:1e:5f:d4:6c:b2:e0:de:e5:34:1a:19:
                    3c:4c:cc:c1:91:a8:ff:ac:14:9a:91:a9:0f:5e:1a:
                    17:36:b3:84:17:10:18:f1:5d:45:2b:87:16:87:ea:
                    87:3c:88:10:e7:3a:61:69:15:a2:92:43:3b:ff:df:
                    39:97:0e:5f:c2:d4:e1:7a:0d:79:00:9a:84:63:63:
                    4f:eb:ca:13:06:07:ea:a5:69:0a:a4:a0:32:88:10:
                    44:34:63:a1:be:ef:88:fb:db:f0:2b:c1:81:02:09:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:82:71:A9:7D:F8:2B:08:F0:22:45:23:B3:A0:E0:C8:55:D7:07:85
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ceff5f5606957a87f31aaae69f54e006c950d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:4a:95:9d:95:ac:4f:72:ad:00:a6:cf:8b:4a:de:28:53:
         89:00:f5:c5:b2:e9:e3:07:a3:ff:a6:6c:72:57:5c:51:ec:0f:
         eb:1b:56:2a:f2:89:c8:9b:0c:19:68:28:8b:52:ee:b4:87:d4:
         f8:3f:f8:64:2c:0a:87:76:bf:2b:97:60:2d:68:fc:1d:bc:4a:
         36:c4:f3:1d:4c:b7:31:5e:77:07:8c:6a:de:1c:e8:a1:d5:bb:
         ca:7e:fc:62:d8:b5:8e:4b:f0:18:3e:2a:ee:cf:1d:e5:45:69:
         06:d0:3f:67:b6:e9:47:21:c9:9b:7b:3f:0f:92:e3:5f:04:a9:
         80:1d:cc:2e:9b:f8:ed:7c:ce:e1:a5:2b:83:64:a5:3b:7d:cc:
         4e:da:03:66:c1:d7:45:49:3a:99:27:2f:53:93:b9:47:f6:03:
         76:20:2f:17:68:0c:ed:5b:6c:99:32:3f:7d:6e:5e:62:72:af:
         8f:5e:39:63:e5:70:89:9b:c4:f1:ce:ae:2f:8c:c7:0a:34:3c:
         c0:62:74:e1:1f:a5:f1:d7:1a:b7:85:5f:c3:56:77:67:f6:a1:
         66:cb:30:cf:3d:df:d1:93:54:f8:14:eb:52:f4:fa:98:81:ec:
         d1:fa:de:c3:07:6f:13:7f:c0:13:b2:ea:7a:f7:a5:1d:26:05:
         8e:0f:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----