Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/add7a10459d3c7bb0248c6e93a1630ff8b67a90a.roa
File:                     add7a10459d3c7bb0248c6e93a1630ff8b67a90a.roa (raw, json)
Hash identifier:          voE3yW213Oajwb8D837eY4ZNsWoPIe/2rHmjfwd7fsA=
Subject key identifier:   8A:A3:AE:DD:63:94:46:D0:27:A7:DC:EF:81:DA:1D:DD:E2:4D:77:CC
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08393C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/add7a10459d3c7bb0248c6e93a1630ff8b67a90a.roa
Signing time:             Fri 22 Jul 2022 02:07:29 +0000
ROA not before:           Fri 22 Jul 2022 03:00:00 +0000
ROA not after:            Sat 22 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538940 (0x8393c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 22 03:00:00 2022 GMT
            Not After : Jul 22 03:00:00 2023 GMT
        Subject: CN=add7a10459d3c7bb0248c6e93a1630ff8b67a90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:45:b7:15:0c:d7:a3:b6:58:22:af:7f:6e:
                    7e:4e:73:ae:d2:a5:54:c0:2c:3d:1e:46:6c:28:fa:
                    54:e4:f7:0c:74:fa:8e:d7:49:18:19:2d:83:1e:f5:
                    a7:3a:51:3d:a3:b0:40:4b:74:82:e8:65:6a:07:93:
                    98:bf:e0:7b:bf:0a:97:d8:ed:a3:e4:fe:36:47:76:
                    50:d1:7e:98:b0:dc:62:20:e7:f1:a9:b5:e1:ad:e4:
                    ac:17:a9:87:53:47:4e:f0:15:3a:b5:f6:5b:ef:ec:
                    45:cb:0d:e7:85:f2:09:b1:50:dd:11:11:f3:10:a2:
                    7a:b5:e9:c8:49:92:14:3e:6f:6e:93:ad:dc:7a:73:
                    95:12:ea:5f:b0:12:69:04:35:ab:c9:fd:e9:a2:0b:
                    8b:b8:4d:d8:d8:d9:e4:98:e3:5f:93:ce:31:a9:e0:
                    8f:a2:c5:90:52:d6:79:0c:aa:c9:a5:8c:e7:7a:40:
                    d5:49:42:2f:15:e9:73:08:28:ad:4b:88:67:dd:f6:
                    eb:27:59:1c:b0:b6:68:e7:21:6d:8a:67:f3:df:e3:
                    57:c8:df:f0:12:6a:ad:92:80:f1:e0:60:07:dd:37:
                    4f:6d:7f:29:98:4c:d5:00:a2:4e:91:8b:ee:86:53:
                    75:75:d9:a1:e9:37:28:8c:3a:47:1e:4b:bf:e9:75:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A3:AE:DD:63:94:46:D0:27:A7:DC:EF:81:DA:1D:DD:E2:4D:77:CC
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/add7a10459d3c7bb0248c6e93a1630ff8b67a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:27:03:a2:37:e7:b2:12:c0:71:68:e2:a3:a7:bc:ca:94:f5:
         77:5a:4f:d3:d9:8f:32:46:76:be:1d:92:9a:f2:42:5a:d7:d0:
         91:df:f2:f8:3d:1d:61:2b:6e:74:9b:60:92:af:b5:81:fa:38:
         65:e2:d5:10:7a:ca:63:51:00:08:80:57:ba:63:83:b9:d6:55:
         36:ee:9f:2d:5d:6c:4a:36:57:cf:2b:1d:84:5c:fc:e1:ad:3b:
         d1:96:70:52:fb:e5:d3:18:63:2b:84:40:07:dc:ff:1d:79:67:
         fa:5b:89:64:9d:32:36:0d:31:bd:0b:e1:82:0f:40:58:b2:56:
         98:28:e1:89:f0:4e:af:49:40:30:3a:12:88:63:97:47:97:35:
         47:18:cd:db:1d:2c:ae:c5:ec:4c:65:79:29:19:0d:8e:a4:23:
         35:c8:26:fe:f7:8c:57:74:85:d0:09:68:78:3d:c3:8d:74:77:
         8d:39:b3:e4:93:5f:30:2f:07:33:ff:4b:6b:f6:1d:e9:8f:3e:
         6b:cc:3d:5d:55:22:d1:e4:b3:34:ef:4f:12:d1:c7:7c:a2:22:
         7b:22:68:10:1e:c8:31:ca:fb:4a:3f:cd:21:6c:11:8a:68:66:
         17:4f:21:5e:d2:25:eb:a8:55:b3:6a:8d:84:4d:c0:ba:f7:f7:
         3c:15:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----