Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/707ac49a0ee856e3ef94de1cc9ab6d487d4cd2bd.roa
File:                     707ac49a0ee856e3ef94de1cc9ab6d487d4cd2bd.roa (raw, json)
Hash identifier:          3wpnY80DYgdjASyeU43ey2RuFW/iDVemvkkuH5UdiaM=
Subject key identifier:   42:86:C6:11:60:1C:7E:A0:9B:32:FA:AC:58:EA:76:71:17:49:25:D6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       066BBB
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/707ac49a0ee856e3ef94de1cc9ab6d487d4cd2bd.roa
Signing time:             Sun 12 Jun 2022 02:38:25 +0000
ROA not before:           Sun 12 Jun 2022 03:00:00 +0000
ROA not after:            Mon 12 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420795 (0x66bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 12 03:00:00 2022 GMT
            Not After : Jun 12 03:00:00 2023 GMT
        Subject: CN=707ac49a0ee856e3ef94de1cc9ab6d487d4cd2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:0a:8d:77:6d:18:aa:9d:86:54:57:d7:6c:
                    da:6b:8b:02:d2:a8:02:f7:18:fc:fa:79:ab:17:93:
                    f5:e8:93:d8:c5:cb:ce:9f:f1:56:06:24:b2:71:c6:
                    f3:b7:c1:9a:79:c8:45:4d:ed:05:02:4f:35:44:d8:
                    e2:1d:50:8a:f1:b0:df:35:86:aa:39:5d:7c:bb:07:
                    15:e7:4f:fe:cd:c5:3d:cc:36:17:0d:ba:8b:1f:b8:
                    8b:34:e6:f4:e5:cc:45:0d:e5:72:75:d4:7b:26:98:
                    85:31:a2:7c:89:bc:33:99:f3:3a:0d:32:ea:55:7a:
                    a1:de:26:d4:d7:b7:90:48:6e:c1:8c:6e:37:c5:44:
                    4c:b5:c1:3e:8c:01:54:61:ca:df:9f:6a:ce:2e:e8:
                    a7:ae:93:a9:6d:54:bd:9d:8b:57:fc:19:9b:31:fe:
                    5b:07:25:0b:f7:a8:a8:a3:a6:74:32:dd:05:d5:9d:
                    6e:ed:aa:d3:e5:bb:9b:b3:da:72:8f:fd:34:07:b7:
                    b9:02:f0:9a:9e:bd:94:a5:2e:89:14:33:5a:de:fb:
                    6e:bf:92:83:87:ce:8e:73:43:7b:6c:48:ed:51:4c:
                    1d:94:4a:3e:a0:53:ee:f0:71:95:cb:d0:04:a6:9a:
                    a9:b3:cf:66:23:97:eb:25:08:37:d5:aa:f6:6a:31:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:86:C6:11:60:1C:7E:A0:9B:32:FA:AC:58:EA:76:71:17:49:25:D6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/707ac49a0ee856e3ef94de1cc9ab6d487d4cd2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:8f:1d:cc:36:96:01:3e:7d:25:aa:b1:82:35:dc:9b:13:
         d5:8f:95:04:a2:b9:7f:72:b8:79:1a:fe:22:82:cb:8e:b0:44:
         b0:c5:07:48:b7:13:92:89:d2:b5:04:19:90:f1:13:6c:d1:ba:
         70:8e:1f:e2:9a:65:9f:da:a7:75:58:a5:7f:06:03:ab:50:d8:
         dd:89:8c:f5:37:37:d2:47:4f:ad:fe:33:4a:49:47:55:8d:2a:
         6f:92:59:7b:16:91:01:3e:d5:bf:46:f4:d1:02:ce:07:5c:a4:
         f9:ff:33:54:a3:c7:d9:11:d0:3e:1e:0d:e2:4b:f9:47:7a:fa:
         48:87:87:8c:5a:84:f4:27:af:6b:1b:e1:55:6c:51:84:ff:14:
         44:64:04:14:98:81:b4:7d:76:14:bf:fc:9c:b2:72:28:52:7e:
         39:78:48:af:93:ef:ea:98:de:1b:bc:73:07:b8:01:b2:e4:8c:
         09:73:1a:c3:6d:b9:c4:34:90:42:79:b0:80:42:8b:66:2c:e1:
         b2:87:66:15:f8:97:ed:da:52:62:0c:85:ac:7a:f5:2e:e5:f5:
         2f:d3:37:99:38:58:08:6c:8c:aa:ad:a2:9d:82:09:b5:2b:23:
         8f:3e:65:19:89:31:ec:f2:2c:e8:94:44:21:04:d0:e2:d8:a2:
         e6:1f:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----