Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a1e00b1530bbc8908d7cf95673e2206dda8ffa9b.roa
File:                     a1e00b1530bbc8908d7cf95673e2206dda8ffa9b.roa (raw, json)
Hash identifier:          cXBJuEAvcL9LWpeI1eSRJvibQwsJXPhDMqj0ZbYEKQA=
Subject key identifier:   1F:42:93:D3:48:5C:D8:8B:72:AC:66:35:D7:65:D7:AB:DD:0A:52:BA
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0251B9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a1e00b1530bbc8908d7cf95673e2206dda8ffa9b.roa
Signing time:             Sat 12 Mar 2022 04:46:44 +0000
ROA not before:           Sat 12 Mar 2022 03:00:00 +0000
ROA not after:            Sun 12 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151993 (0x251b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 12 03:00:00 2022 GMT
            Not After : Mar 12 03:00:00 2023 GMT
        Subject: CN=a1e00b1530bbc8908d7cf95673e2206dda8ffa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:2c:85:45:74:79:4d:44:b6:fe:bb:df:1e:
                    d3:3e:9d:2a:4a:0a:05:50:d5:9c:a5:fa:93:81:b6:
                    62:ff:b0:e9:a9:57:71:25:35:1a:f3:24:54:50:87:
                    42:38:cf:43:44:bf:6a:b8:15:c5:9e:14:4c:31:69:
                    5f:64:fb:cb:c1:68:e1:fb:8b:88:2a:39:fd:b0:a1:
                    fb:7f:d1:f3:c1:1f:0b:3c:95:28:02:bc:d2:f6:c3:
                    db:8e:9d:6a:f0:db:ab:da:78:53:81:06:c8:07:a8:
                    c6:30:77:37:17:0a:ba:87:32:d1:63:9d:e6:f7:17:
                    06:ba:80:94:83:c4:70:92:30:9c:dd:2a:18:e8:9f:
                    41:ef:5a:9e:52:d2:de:e5:5c:c3:56:ae:ee:b1:c7:
                    b5:b9:ee:e6:d8:8a:02:1e:70:73:43:80:ce:26:65:
                    db:99:bb:d6:43:77:83:13:7f:5d:88:9a:9b:24:01:
                    c8:5b:c7:8a:68:5f:5f:4b:1d:ea:47:7d:aa:14:f7:
                    6d:66:50:07:2b:5e:de:83:f6:39:58:db:b4:d3:53:
                    7b:e1:75:16:61:94:32:ba:7c:53:dd:91:f9:4d:fa:
                    79:9b:d6:de:ae:42:26:8b:8c:d4:d2:b4:04:10:cc:
                    4c:4c:90:7c:25:91:fa:7c:2b:70:0c:bf:49:d7:4a:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:42:93:D3:48:5C:D8:8B:72:AC:66:35:D7:65:D7:AB:DD:0A:52:BA
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a1e00b1530bbc8908d7cf95673e2206dda8ffa9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:32:1e:ba:0a:4c:b7:19:02:2e:81:4b:25:09:e4:1f:93:
         5c:41:35:a1:50:b4:55:e8:55:04:a8:1d:51:c1:fe:27:9d:76:
         4c:72:cc:ec:e6:19:fd:11:85:91:2a:f0:be:c9:d3:b3:66:f8:
         01:8c:c8:6f:0b:bd:1c:20:ff:7c:11:d9:24:2d:71:e8:8e:80:
         d0:02:91:66:4a:c8:c9:77:f8:64:14:1f:91:7b:c1:04:22:51:
         8e:d0:80:74:48:aa:6f:f3:c9:be:c6:df:09:24:44:02:31:65:
         8b:21:02:42:e0:b5:e9:77:27:5b:b6:f9:9f:d0:95:7c:28:92:
         bc:a8:61:bd:b3:b1:f5:79:8d:35:c1:13:40:5a:c3:1e:e1:d9:
         44:1b:f6:dd:ac:7d:8b:4b:4a:d2:fc:35:90:66:ad:4b:e0:ae:
         a5:46:5c:4d:89:b0:95:72:6c:c2:d2:43:16:49:a5:40:01:31:
         48:e5:e6:b7:71:3a:0a:9e:9d:21:28:d3:e8:f1:4b:a8:78:e9:
         e4:77:6d:72:e2:2b:9d:8f:b4:5a:1f:6f:d7:c5:ba:fc:ef:c8:
         43:81:86:30:4b:37:f2:da:17:1c:6f:06:0b:8b:09:3b:0e:17:
         e7:3b:52:5e:3c:40:a6:6e:0e:c7:3e:85:8b:bf:fb:23:d7:6f:
         ff:63:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----