Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7dab12ee6cdba2b8d9a9731d511465af6b5c7dcc.roa
File:                     7dab12ee6cdba2b8d9a9731d511465af6b5c7dcc.roa (raw, json)
Hash identifier:          r6RA2OSn7R9MiZtD4Mrx0YuqK62++h7xwPjxzERcEcc=
Subject key identifier:   51:32:38:9C:86:7A:2F:71:94:CC:5B:2D:68:DB:EA:61:AA:0C:97:78
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       FD7E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7dab12ee6cdba2b8d9a9731d511465af6b5c7dcc.roa
Signing time:             Fri 11 Feb 2022 05:54:52 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Sat 11 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64894 (0xfd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 11 03:00:00 2023 GMT
        Subject: CN=7dab12ee6cdba2b8d9a9731d511465af6b5c7dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:58:6b:de:bc:1f:d0:9e:d8:e5:48:74:e6:
                    dc:55:2e:a4:e1:44:ee:da:1c:8e:17:62:33:15:75:
                    15:59:be:1c:19:9d:ed:6b:8c:22:01:61:bc:72:18:
                    87:c1:e5:6c:4a:66:05:84:a1:ec:59:60:6f:09:4f:
                    0d:0a:bf:b4:b4:90:a4:bf:cd:fb:4a:48:15:fc:e7:
                    2d:84:ae:ca:15:06:2f:f6:13:e4:ae:bb:7e:d1:f9:
                    91:ec:1d:35:b4:da:b2:e6:4e:5e:b5:fd:34:8d:5c:
                    a1:e3:eb:64:8b:f6:a0:8c:d6:2b:ea:40:77:aa:b7:
                    ff:5c:25:97:19:61:18:85:6c:32:e7:e6:c5:81:25:
                    63:6f:a9:67:be:dc:7b:cb:de:fa:54:ce:24:32:7f:
                    26:42:d1:ab:eb:1c:af:0c:41:f4:54:b1:8b:1b:d5:
                    52:7f:e8:b6:1a:b3:b9:7e:bc:92:fa:28:73:c0:df:
                    7b:99:fb:23:d4:fc:d8:6e:49:ab:48:62:d4:15:e4:
                    8a:03:2b:df:a5:31:ac:25:8d:62:49:1b:03:09:68:
                    2a:26:06:4f:ac:69:f1:e7:f9:50:91:64:00:d3:0d:
                    74:50:7d:0d:f0:ac:48:d8:66:88:4e:b8:64:9f:17:
                    43:2a:19:2f:d6:71:4b:bf:75:07:7f:82:04:d0:ab:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:38:9C:86:7A:2F:71:94:CC:5B:2D:68:DB:EA:61:AA:0C:97:78
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7dab12ee6cdba2b8d9a9731d511465af6b5c7dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:c3:28:c1:0a:09:35:fd:45:31:52:41:b3:30:5c:0c:e9:
         93:93:b8:29:7c:f8:d0:73:52:d9:58:6e:36:24:ff:5c:43:fd:
         4b:30:7a:f2:94:1a:f5:c7:0b:9f:87:24:df:08:e4:bd:a5:b0:
         68:97:44:a9:9b:c9:10:f7:b1:aa:3f:ec:98:26:20:2a:6f:5e:
         72:09:f1:90:c9:f9:f7:dc:43:c6:9a:fe:a9:63:7d:30:c0:cb:
         28:e4:0c:79:82:1a:a6:c5:ba:16:30:0f:3d:8b:65:ad:ab:90:
         db:28:8f:8a:3f:a9:e3:48:26:bf:93:12:64:c6:c6:80:7b:31:
         2e:6f:98:b2:a9:4c:cc:97:19:06:d9:1a:c1:5c:0a:9c:a5:51:
         c5:bc:6f:70:80:56:e3:32:31:5a:a9:c1:bf:42:8d:a7:e4:ea:
         76:9d:ee:08:c9:fb:7c:00:ab:8c:1c:ac:c0:0a:52:d1:b9:ce:
         07:89:6b:95:a0:00:fc:89:e8:53:6e:4c:d4:eb:44:eb:a7:8d:
         f7:6e:23:2d:ef:b3:f3:5c:ce:8c:e5:3d:a5:ed:1e:e4:97:ac:
         d6:cf:5c:47:22:ac:3b:26:7e:52:03:9c:f6:84:10:8d:5e:be:
         b0:4d:97:20:c0:ef:08:e0:e1:e3:1c:fc:d3:4d:fa:95:8a:f3:
         d0:a9:95:96
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAP1+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjEx
MDMwMDAwWhcNMjMwMjExMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZGFiMTJlZTZjZGJh
MmI4ZDlhOTczMWQ1MTE0NjVhZjZiNWM3ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwApYa968H9Ce2OVIdObcVS6k4UTu2hyOF2IzFXUVWb4cGZ3t
a4wiAWG8chiHweVsSmYFhKHsWWBvCU8NCr+0tJCkv837SkgV/OcthK7KFQYv9hPk
rrt+0fmR7B01tNqy5k5etf00jVyh4+tki/agjNYr6kB3qrf/XCWXGWEYhWwy5+bF
gSVjb6lnvtx7y976VM4kMn8mQtGr6xyvDEH0VLGLG9VSf+i2GrO5fryS+ihzwN97
mfsj1PzYbkmrSGLUFeSKAyvfpTGsJY1iSRsDCWgqJgZPrGnx5/lQkWQA0w10UH0N
8KxI2GaITrhknxdDKhkv1nFLv3UHf4IE0KtZswIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFEyOJyGei9xlMxbLWjb6mGqDJd4MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzdkYWIxMmVlNmNkYmEyYjhkOWE5NzMxZDUxMTQ2NWFmNmI1YzdkY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAAj7DKMEKCTX9RTFS
QbMwXAzpk5O4KXz40HNS2VhuNiT/XEP9SzB68pQa9ccLn4ck3wjkvaWwaJdEqZvJ
EPexqj/smCYgKm9ecgnxkMn599xDxpr+qWN9MMDLKOQMeYIapsW6FjAPPYtlrauQ
2yiPij+p40gmv5MSZMbGgHsxLm+YsqlMzJcZBtkawVwKnKVRxbxvcIBW4zIxWqnB
v0KNp+Tqdp3uCMn7fACrjByswApS0bnOB4lrlaAA/InoU25M1OtE66eN924jLe+z
81zOjOU9pe0e5Jes1s9cRyKsOyZ+UgOc9oQQjV6+sE2XIMDvCODh4xz80036lYrz
0KmVlg==
-----END CERTIFICATE-----