Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/934547bc3c8bb7d4e5642ec3fef41a9304431127.roa
File:                     934547bc3c8bb7d4e5642ec3fef41a9304431127.roa (raw, json)
Hash identifier:          eWKkm1MnJ6ziu8TjPci4q3LiId85RNxHWBhbf7yf8iA=
Subject key identifier:   4F:49:18:43:67:BA:1C:A5:31:62:29:BA:79:9D:71:82:41:7B:86:B4
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       096110
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/934547bc3c8bb7d4e5642ec3fef41a9304431127.roa
Signing time:             Wed 17 Aug 2022 00:08:24 +0000
ROA not before:           Wed 17 Aug 2022 03:00:00 +0000
ROA not after:            Thu 17 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614672 (0x96110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 17 03:00:00 2022 GMT
            Not After : Aug 17 03:00:00 2023 GMT
        Subject: CN=934547bc3c8bb7d4e5642ec3fef41a9304431127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:b4:74:40:52:b3:12:1c:fd:d3:47:98:cb:
                    be:91:c4:39:02:c2:cc:b7:1e:4c:80:21:47:ee:1d:
                    d2:e6:46:ae:ae:76:76:a4:51:fb:ac:d5:8a:4b:b0:
                    a8:fa:f5:4d:fc:25:3a:c1:c1:0e:68:b4:56:ba:39:
                    75:31:0b:7d:14:e6:e4:54:98:06:ee:3b:9f:96:2b:
                    71:78:6c:58:97:4a:b5:40:12:81:62:57:c3:f6:55:
                    b4:50:2d:c4:8d:dc:61:ab:54:d9:14:f0:4c:dc:5f:
                    2e:a7:8f:ad:47:54:88:1c:0d:3d:f0:8a:d7:a4:33:
                    dc:b1:d0:07:83:6b:82:57:8a:7b:b9:4f:8b:f8:fa:
                    71:3a:f0:b9:26:1a:38:93:5d:1e:61:84:54:1a:bd:
                    b0:35:d7:3e:e1:21:79:5f:d3:a4:05:57:78:ee:80:
                    d0:21:a0:8b:38:75:d4:89:55:c9:f4:0d:dd:d7:52:
                    1c:64:0a:f4:67:7b:2c:a3:67:35:88:df:4c:bf:69:
                    86:1a:13:0f:40:5b:e4:3b:64:77:27:0b:7c:fe:66:
                    64:68:f4:17:26:b6:94:60:57:d7:4c:7d:76:42:de:
                    81:04:b6:f7:80:67:bb:e3:6a:8c:7e:7b:d1:9c:56:
                    78:5f:ae:aa:cf:3c:03:72:c0:de:db:b2:b4:be:80:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:18:43:67:BA:1C:A5:31:62:29:BA:79:9D:71:82:41:7B:86:B4
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/934547bc3c8bb7d4e5642ec3fef41a9304431127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:12:99:27:ca:08:ef:4f:60:eb:1b:d0:7d:4b:13:d7:4b:a4:
         14:8e:79:82:58:ae:77:9f:76:37:be:22:39:a4:59:5e:2b:75:
         0d:02:64:84:c8:61:b1:ad:45:e6:78:22:cf:2e:8c:6c:39:e8:
         f0:88:c6:e9:44:0a:34:8d:ae:86:73:7a:c3:39:14:2f:d9:c9:
         dc:25:18:94:0f:f3:c4:90:37:58:98:ca:06:b6:6e:13:42:56:
         f2:a9:98:dc:a3:5f:7a:ea:a0:b2:80:aa:bb:04:7b:7b:fa:1f:
         6f:a6:b6:81:98:27:d2:d0:d5:d5:73:3e:f2:5d:ab:cd:67:56:
         e2:39:6c:b2:54:af:b8:58:03:16:e4:81:9b:90:91:f4:3b:97:
         f9:1a:63:44:58:f1:99:c5:11:dd:cd:d3:ef:b6:0d:41:2b:c3:
         3c:cd:cb:1e:64:69:6e:cc:3a:f8:54:50:77:0f:c5:6b:6d:6e:
         e2:b5:bf:1e:4e:55:5a:08:b4:89:32:26:72:8c:37:2a:6f:a9:
         32:b2:86:b6:d1:29:17:7d:44:d9:8b:8a:69:e9:16:6a:af:e8:
         f1:ab:53:18:0f:47:53:02:4a:62:8a:e8:d1:91:a1:15:31:94:
         ef:23:7f:03:f1:fe:a0:7a:d9:58:b5:50:c0:b7:3e:c4:32:4c:
         18:a1:22:5a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCWEQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwODE3
MDMwMDAwWhcNMjMwODE3MDMwMDAwWjAzMTEwLwYDVQQDEyg5MzQ1NDdiYzNjOGJi
N2Q0ZTU2NDJlYzNmZWY0MWE5MzA0NDMxMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApaq0dEBSsxIc/dNHmMu+kcQ5AsLMtx5MgCFH7h3S5kaurnZ2
pFH7rNWKS7Co+vVN/CU6wcEOaLRWujl1MQt9FObkVJgG7juflitxeGxYl0q1QBKB
YlfD9lW0UC3Ejdxhq1TZFPBM3F8up4+tR1SIHA098IrXpDPcsdAHg2uCV4p7uU+L
+PpxOvC5Jho4k10eYYRUGr2wNdc+4SF5X9OkBVd47oDQIaCLOHXUiVXJ9A3d11Ic
ZAr0Z3sso2c1iN9Mv2mGGhMPQFvkO2R3Jwt8/mZkaPQXJraUYFfXTH12Qt6BBLb3
gGe742qMfnvRnFZ4X66qzzwDcsDe27K0voD5qwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE9JGENnuhylMWIpunmdcYJBe4a0MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzkzNDU0N2JjM2M4YmI3ZDRlNTY0MmVjM2ZlZjQxYTkzMDQ0MzExMjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAURKZJ8oI709g6xvQ
fUsT10ukFI55gliud592N74iOaRZXit1DQJkhMhhsa1F5ngizy6MbDno8IjG6UQK
NI2uhnN6wzkUL9nJ3CUYlA/zxJA3WJjKBrZuE0JW8qmY3KNfeuqgsoCquwR7e/of
b6a2gZgn0tDV1XM+8l2rzWdW4jlsslSvuFgDFuSBm5CR9DuX+RpjRFjxmcUR3c3T
77YNQSvDPM3LHmRpbsw6+FRQdw/Fa21u4rW/Hk5VWgi0iTImcow3Km+pMrKGttEp
F31E2YuKaekWaq/o8atTGA9HUwJKYoro0ZGhFTGU7yN/A/H+oHrZWLVQwLc+xDJM
GKEiWg==
-----END CERTIFICATE-----