Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885d08f97d6158ce56cdec350d6ea09ea1bffa79.roa
File:                     885d08f97d6158ce56cdec350d6ea09ea1bffa79.roa (raw, json)
Hash identifier:          wknvFHuUAtKbQFjB6BfJWHiMO0t+ymqM9NZDHQrqjk0=
Subject key identifier:   18:D4:AC:BF:67:F9:0E:54:2D:FE:10:FD:D3:69:34:22:1A:0F:73:7B
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       02EBC1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885d08f97d6158ce56cdec350d6ea09ea1bffa79.roa
Signing time:             Sat 26 Mar 2022 00:39:12 +0000
ROA not before:           Sat 26 Mar 2022 03:00:00 +0000
ROA not after:            Sun 26 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191425 (0x2ebc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 26 03:00:00 2022 GMT
            Not After : Mar 26 03:00:00 2023 GMT
        Subject: CN=885d08f97d6158ce56cdec350d6ea09ea1bffa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:60:cf:69:7a:ca:98:3d:3e:18:f5:9c:36:
                    8a:3e:95:fb:e5:7b:68:2e:2f:dc:9b:b3:3d:19:47:
                    42:a6:03:7b:3c:af:35:d1:54:ce:66:37:6d:59:4f:
                    e2:e0:70:e3:5f:45:fd:3b:2d:35:9e:a8:e7:0d:dd:
                    3f:c3:74:cd:7a:2f:1d:52:03:b4:9f:c3:4d:e3:39:
                    e9:0f:f6:1b:e2:23:a6:73:9e:bb:2a:bf:78:e3:81:
                    39:8a:11:4f:42:b4:ce:b1:df:c2:45:1b:ec:63:6d:
                    c1:a7:32:30:76:02:da:a1:0c:69:cc:f9:70:71:9f:
                    91:2b:be:65:e4:92:6c:c3:50:5f:6f:be:0d:3c:bb:
                    f0:0f:7a:47:75:f6:e4:18:97:b7:04:b0:99:90:9c:
                    5e:b5:9b:88:9e:f4:2b:a9:5d:79:f7:49:d1:c8:b6:
                    92:20:7a:35:c4:81:30:3f:86:04:32:5f:40:06:73:
                    58:6c:2f:32:48:f5:b9:3a:33:62:29:fa:a2:79:49:
                    3b:4f:b4:b6:e8:fc:b1:21:64:20:b2:fc:d7:26:b0:
                    0e:1c:32:7e:7a:a7:47:3c:2e:4b:29:b7:8e:a5:a1:
                    a5:a4:57:6f:2a:09:66:f4:de:b6:1c:53:96:a0:d3:
                    3f:12:8b:32:8f:6c:1f:a5:76:55:f7:b2:12:ec:5c:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D4:AC:BF:67:F9:0E:54:2D:FE:10:FD:D3:69:34:22:1A:0F:73:7B
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/885d08f97d6158ce56cdec350d6ea09ea1bffa79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:75:fc:78:9f:ac:3c:75:59:51:04:9e:4c:df:45:c6:41:
         06:5d:a3:e7:18:38:9e:18:82:08:7e:24:d4:5a:7b:f0:4d:8e:
         67:3d:9e:9a:33:5b:77:00:02:08:ea:07:a9:9f:9b:96:c7:4b:
         ab:43:d2:35:c3:3d:9d:b2:7a:53:71:da:12:e0:fe:da:ac:25:
         9d:ba:4d:b3:27:63:2c:7a:60:9b:34:d3:aa:0b:68:62:0b:b0:
         bc:f6:74:2b:2a:7d:a2:be:b9:0d:98:0c:5f:88:be:4e:44:d5:
         9a:0a:a9:ea:9a:4c:3a:70:e1:75:0b:71:16:16:37:cf:c7:3a:
         8f:e9:be:c5:37:e0:f4:02:35:71:34:90:75:1c:cd:e0:7b:64:
         33:bb:87:3b:3e:3a:ff:92:2c:4e:29:99:c8:43:6f:b1:85:44:
         91:d0:37:8f:4f:6b:88:f4:d9:d2:fd:24:f7:8f:67:83:28:3b:
         3f:97:83:55:86:0f:e8:5f:1d:ed:a6:97:9a:7e:7f:c9:36:25:
         4f:68:2f:a7:49:ca:7c:2b:b6:17:0d:11:1b:98:4d:eb:7d:42:
         55:34:91:e5:9b:29:1d:be:e6:1c:79:74:91:cd:a6:86:ee:b0:
         98:27:2f:98:96:07:1d:af:63:80:83:d8:cb:22:c1:60:c0:f4:
         97:c6:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----