Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/800ff0388da89236d525dd2c02e0034ef1baaa47.roa
File:                     800ff0388da89236d525dd2c02e0034ef1baaa47.roa (raw, json)
Hash identifier:          eD3fzrC5DE4LFWuFli9PtL6v4r3dexynfJc/dzqMdCc=
Subject key identifier:   12:3D:22:7B:92:A1:F5:3D:81:89:2D:DF:ED:C8:D7:7D:F6:70:5C:DE
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09AA96
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/800ff0388da89236d525dd2c02e0034ef1baaa47.roa
Signing time:             Thu 25 Aug 2022 05:11:47 +0000
ROA not before:           Thu 25 Aug 2022 03:00:00 +0000
ROA not after:            Fri 25 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633494 (0x9aa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 25 03:00:00 2022 GMT
            Not After : Aug 25 03:00:00 2023 GMT
        Subject: CN=800ff0388da89236d525dd2c02e0034ef1baaa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:95:da:f1:68:2d:72:df:d3:99:b4:8e:e4:
                    d1:04:4c:70:18:aa:6b:b6:63:cb:b9:af:b4:1f:eb:
                    04:c8:ab:1b:f6:92:7b:b3:b8:6c:83:10:cf:ad:db:
                    b8:1a:91:5c:ee:fd:51:bd:61:75:d9:f0:77:9f:b6:
                    a0:80:8c:26:5e:92:c6:54:5a:18:ab:5b:a4:4e:c8:
                    22:9e:c5:2b:a4:fa:9c:06:cb:b1:bd:5a:dd:dd:56:
                    b2:98:21:a9:82:ee:bc:58:b5:84:fb:ab:8e:ed:e5:
                    96:af:ce:a1:9d:21:db:9e:fb:a9:ac:a0:b1:17:96:
                    fe:e7:a8:d3:1f:02:a7:49:21:ac:d1:0b:91:49:5d:
                    30:a6:6a:ed:45:0e:c0:de:a9:7e:01:ad:29:29:0d:
                    d7:d1:be:20:4d:75:ce:81:13:ae:28:2b:10:c1:49:
                    a6:ba:15:d7:e7:b9:b9:16:fb:a6:85:9c:9c:f1:c2:
                    bf:fb:a2:7f:ab:32:d6:e9:61:5d:79:44:8a:ca:c4:
                    33:97:91:4d:56:75:1d:76:22:b4:06:37:b4:42:cf:
                    d8:6c:9e:17:4f:14:ae:99:7c:a1:a7:fd:51:fb:a0:
                    f5:69:b1:31:ba:ce:aa:7c:17:e4:1a:de:63:d1:ce:
                    03:e8:56:ee:c5:18:ae:d7:6d:d8:ef:12:24:f3:7b:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:22:7B:92:A1:F5:3D:81:89:2D:DF:ED:C8:D7:7D:F6:70:5C:DE
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/800ff0388da89236d525dd2c02e0034ef1baaa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:fd:26:70:c0:44:5e:66:29:f3:74:2c:5f:14:47:2f:43:
         ab:10:c9:5f:b3:ce:0a:47:13:3d:c3:2d:71:ca:c5:a8:e0:2c:
         33:ea:48:18:be:31:e5:3e:91:6b:03:94:53:05:de:68:77:a3:
         90:0a:b8:97:ba:c4:00:24:ee:82:fe:09:c3:7e:de:4e:13:7b:
         4b:bc:9c:4a:42:f7:0e:fc:e1:d5:59:76:7a:66:98:bb:fc:78:
         03:d3:cc:cf:d6:b8:a4:1e:f3:60:ad:47:c2:0b:c3:5f:45:75:
         41:04:1a:33:41:75:ff:10:95:cc:e1:0a:91:67:bf:41:3c:87:
         12:73:16:c5:65:6f:f4:50:1f:9d:28:b2:dd:d8:7d:98:a6:7e:
         64:e1:ed:28:1c:fb:26:2e:fa:38:4f:eb:0f:52:9d:e3:3e:bb:
         87:90:92:ae:48:c7:0e:43:00:4d:b6:a7:68:b3:ed:c3:2e:f2:
         b1:69:b5:31:9a:ec:a1:50:7d:32:d6:fd:ed:8a:ec:ca:dd:d1:
         fa:56:0b:cc:bc:68:29:d5:2b:92:99:f8:a9:5e:a8:cd:7e:76:
         9f:58:61:7d:5a:ab:a4:67:73:e6:2e:19:b9:dc:b9:a5:42:c5:
         8c:b1:d9:e4:b7:a4:d4:c9:29:db:39:e6:53:39:03:7f:ee:64:
         ce:11:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----