Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/86379d76330dc652072952eaa10b5549f7713d01.roa
File:                     86379d76330dc652072952eaa10b5549f7713d01.roa (raw, json)
Hash identifier:          PWcWxms9iFhQqy1CiAOagezMqdsiEg7Am57rFPZ8KuA=
Subject key identifier:   C5:8D:49:0B:2B:6E:66:CE:51:2B:70:DE:73:50:04:C6:2A:C0:DE:D1
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       028521
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/86379d76330dc652072952eaa10b5549f7713d01.roa
Signing time:             Thu 17 Mar 2022 05:37:41 +0000
ROA not before:           Thu 17 Mar 2022 03:00:00 +0000
ROA not after:            Fri 17 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165153 (0x28521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 17 03:00:00 2022 GMT
            Not After : Mar 17 03:00:00 2023 GMT
        Subject: CN=86379d76330dc652072952eaa10b5549f7713d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:c0:24:f0:d1:2c:c7:e0:13:7d:18:6a:dc:
                    14:73:6b:2b:fb:34:51:ee:ad:a6:19:71:14:76:23:
                    5d:fc:d0:a9:19:cc:fb:4b:b3:fd:d2:7d:c0:1c:1b:
                    70:12:21:1f:f7:58:3b:98:c6:27:b7:6f:e1:63:d9:
                    ea:bc:6a:3e:e0:d4:26:cc:3c:7a:3a:66:6a:69:63:
                    98:9d:c5:13:d3:49:3d:61:f3:25:24:de:95:20:44:
                    99:9e:0b:fe:42:52:4c:d6:91:f2:76:3a:86:ae:24:
                    88:46:62:b9:49:7a:fb:a9:d3:62:3f:f4:0c:90:be:
                    94:d2:88:0e:87:11:5c:fa:08:ee:37:2c:c8:23:da:
                    b9:ee:ca:74:34:39:27:1e:0c:88:c7:1a:ed:49:66:
                    2a:bf:85:ef:ee:0a:82:8a:ac:de:89:13:80:91:dc:
                    94:c1:19:bc:37:57:31:a3:3c:f2:88:93:a3:0e:cc:
                    06:09:21:68:fb:0b:07:73:90:c4:c7:11:78:ca:36:
                    b3:d1:b8:3a:6b:7a:63:5f:f9:69:28:0c:ae:09:80:
                    45:58:7c:1c:3d:d2:fb:12:77:05:b7:08:b1:70:4a:
                    04:c8:e3:8f:07:f9:f4:0d:f2:11:d4:28:00:37:8c:
                    08:ad:e5:40:90:5a:49:c3:97:50:e2:0a:52:5a:cf:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8D:49:0B:2B:6E:66:CE:51:2B:70:DE:73:50:04:C6:2A:C0:DE:D1
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/86379d76330dc652072952eaa10b5549f7713d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:77:01:a7:17:f5:8d:4a:73:08:a4:a5:9c:2b:fa:57:dd:95:
         11:e5:18:1f:9d:80:c5:75:cc:20:ed:d0:37:dc:ff:fa:67:fb:
         ea:1c:29:d5:07:6d:60:8d:e1:cc:51:8e:d8:9c:ab:77:43:c5:
         54:09:b9:2a:f1:ff:89:c6:55:2b:e0:cc:8a:9c:22:41:e4:e7:
         c3:5e:6f:7b:02:8b:d4:ef:87:91:8c:4c:56:ea:3a:40:04:c0:
         a8:fa:7d:84:15:fd:b8:25:f8:b3:10:32:12:35:8b:ac:8b:82:
         0f:af:32:db:65:00:d8:6b:c3:e7:67:63:dd:ac:21:75:04:d9:
         ea:c7:14:f5:88:f7:86:a4:82:88:bd:44:08:d2:81:e0:95:eb:
         47:4c:ba:a2:a2:99:c3:ed:16:d6:d4:69:b9:6d:79:79:12:67:
         9d:2c:ef:87:39:31:f8:63:b5:17:29:40:af:e0:b1:e2:f3:72:
         bc:d3:db:a8:5d:54:9a:15:df:68:f5:f7:d5:19:b6:df:c7:33:
         66:08:76:bc:eb:52:6c:eb:ec:6e:38:ce:97:e3:16:3f:38:1a:
         6d:63:b4:25:e8:4b:76:1f:64:6a:91:7a:90:6d:3e:be:d7:81:
         8d:da:8a:9e:db:42:ee:6f:0b:50:94:0b:8a:04:92:e4:5b:76:
         b1:99:fd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----