Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa
File:                     c4639da878f3fe140aa9ea1366a64cf4a900de87.roa (raw, json)
Hash identifier:          sXxspb8qGtXzuKVHpHdNOm71BoKpPUKApbOrTVIbOF0=
Subject key identifier:   CA:20:71:81:E7:AF:59:C0:DA:70:D0:9E:A7:7A:EF:AE:13:AF:E8:B8
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       072190
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa
Signing time:             Mon 27 Jun 2022 03:12:08 +0000
ROA not before:           Mon 27 Jun 2022 03:00:00 +0000
ROA not after:            Tue 27 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467344 (0x72190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 27 03:00:00 2022 GMT
            Not After : Jun 27 03:00:00 2023 GMT
        Subject: CN=c4639da878f3fe140aa9ea1366a64cf4a900de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:58:59:d6:2d:21:95:87:15:ae:6f:bf:68:
                    63:60:5d:5d:c8:76:1f:bd:68:d2:27:98:ea:bd:42:
                    d3:61:ef:e5:ca:f6:f8:18:43:2c:09:3a:1f:91:ea:
                    e7:62:98:4c:4d:c1:bb:d9:2f:75:bb:68:70:75:af:
                    b3:31:0a:64:58:eb:e3:c5:6c:f9:da:d7:07:53:b4:
                    4e:88:c2:36:c4:d3:ad:d3:10:ae:23:fe:b7:5f:5a:
                    3e:06:9c:3f:d5:86:e6:10:ae:f8:c1:2e:29:1f:15:
                    76:cd:1e:d0:65:2e:00:d0:b0:0e:0c:39:11:ec:98:
                    da:54:a0:07:aa:e9:5c:ea:c7:a0:81:d4:bb:71:3c:
                    d9:35:59:50:67:98:ae:8f:cc:34:16:f5:5d:08:c5:
                    27:12:34:d7:43:10:e5:fa:e6:56:d4:55:5a:66:fe:
                    2c:b8:ae:5e:e5:c2:81:52:05:a4:31:a7:6f:ea:02:
                    76:2e:9c:6c:6a:ae:1f:68:14:5c:9a:46:87:b3:28:
                    45:24:ab:68:93:5d:83:aa:dd:b6:c1:93:93:35:9d:
                    e3:89:a9:0e:21:79:50:9b:3d:57:eb:5c:f8:38:25:
                    25:f4:97:aa:73:ba:59:9b:3d:14:cc:2a:7d:76:81:
                    db:18:ef:e1:16:00:10:b0:4b:0b:fa:b6:6b:1b:1b:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:20:71:81:E7:AF:59:C0:DA:70:D0:9E:A7:7A:EF:AE:13:AF:E8:B8
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c4639da878f3fe140aa9ea1366a64cf4a900de87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:a4:b9:24:86:b1:cd:33:13:14:c5:8a:91:bd:22:0c:83:
         ab:36:1e:a8:18:24:c2:dc:55:a0:58:4d:3d:7c:76:60:cb:24:
         03:b3:b6:9d:47:a9:94:8c:74:a9:70:ab:fd:92:a8:03:e0:58:
         03:93:e7:6a:e5:2c:8b:fb:56:4a:ac:76:72:77:b8:4d:38:74:
         40:5e:42:31:a8:0e:b9:a3:0f:d9:38:c8:b0:19:ef:aa:10:5e:
         e1:8e:2d:a4:dc:0b:36:3d:63:47:d5:bf:30:dc:68:41:11:22:
         e0:91:21:58:ad:3b:14:65:02:0f:e1:f7:5e:f8:5b:11:5b:d6:
         d8:64:1f:f8:a1:3d:50:5b:47:5f:f6:42:fe:f8:29:5a:ed:9e:
         16:38:ec:eb:a7:24:02:c6:7f:77:72:05:6d:bb:0d:9d:b7:41:
         a5:1e:ff:a7:49:ed:09:35:5f:72:e8:0f:1f:d5:0f:6d:1a:7e:
         e5:2c:77:d3:91:cd:b9:38:29:6c:5e:aa:bb:2d:fd:9a:43:64:
         fa:2e:9e:5b:5a:42:5f:46:68:23:8d:eb:da:0a:2e:02:ad:62:
         e5:b5:69:e6:da:04:15:51:96:c4:c2:7d:4a:46:ed:aa:cd:85:
         c1:1d:e7:09:05:38:f5:7a:6c:6f:8c:ef:8f:70:d8:54:79:e2:
         c2:9a:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----