Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dd695ce3f0e74cf4b42ed7564d868cc074689aca.roa
File:                     dd695ce3f0e74cf4b42ed7564d868cc074689aca.roa (raw, json)
Hash identifier:          jw1VlxcyqMmP54uyLBYv3XJIw7+9YvNuRb2KaZPVJgs=
Subject key identifier:   07:A4:63:D9:92:22:D9:39:E9:2D:3B:E9:DA:8E:45:39:DC:A2:E1:60
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06C53D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dd695ce3f0e74cf4b42ed7564d868cc074689aca.roa
Signing time:             Sun 19 Jun 2022 03:27:33 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Mon 19 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443709 (0x6c53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 19 03:00:00 2023 GMT
        Subject: CN=dd695ce3f0e74cf4b42ed7564d868cc074689aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:64:4a:c2:0f:6d:9c:8e:cf:aa:96:d7:d8:
                    d2:2b:9b:e5:08:3f:16:6f:dd:05:88:5e:6b:e2:86:
                    24:b7:ed:46:43:55:75:82:52:7c:18:fa:21:f7:1c:
                    8b:98:59:1a:65:b1:9f:ba:32:a7:51:15:4d:ee:52:
                    ba:e5:33:d4:1f:80:b7:db:03:43:23:32:85:e9:37:
                    f0:2b:cd:12:0e:e4:e6:f8:f7:25:5b:4d:d6:e6:b2:
                    d8:61:2e:04:f1:27:23:0f:18:02:b4:cb:42:d2:50:
                    d5:81:28:5b:dd:d7:1b:4f:04:1f:06:32:04:f3:2c:
                    eb:7d:5a:0b:2c:71:34:15:8d:11:ee:6e:1f:e8:d1:
                    de:f6:94:91:b4:f1:5e:a3:40:0f:cc:83:e6:96:50:
                    6d:0d:54:3b:db:9c:f2:54:63:2a:95:91:7f:8e:0f:
                    85:64:dd:2d:89:ca:ae:fe:7a:0c:7f:3d:b1:76:af:
                    66:95:3e:37:92:1d:c7:60:bc:62:b8:c0:36:15:6a:
                    8d:66:c9:0b:1e:a0:5b:e9:65:78:db:de:4e:34:36:
                    51:0c:aa:7b:41:4b:88:e2:d5:cc:0c:07:7b:af:8d:
                    54:6e:02:a8:1a:99:4a:28:d7:51:d4:81:19:b9:dc:
                    f4:f2:ec:fb:bf:45:c3:8d:da:d0:5d:cb:8d:84:e4:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A4:63:D9:92:22:D9:39:E9:2D:3B:E9:DA:8E:45:39:DC:A2:E1:60
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dd695ce3f0e74cf4b42ed7564d868cc074689aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:39:17:2d:cc:96:2f:dd:c8:19:c0:d3:a3:7c:eb:84:de:92:
         4c:7b:6c:e6:27:b3:2b:7c:9e:f2:64:15:c0:65:fa:6b:1a:ae:
         15:9d:99:8c:d0:a9:0e:4e:fd:90:e2:ab:ed:95:4d:a9:53:de:
         2a:c0:2b:3e:fd:2a:2c:38:fc:b6:44:88:6e:67:43:86:12:62:
         3e:5f:b3:78:d6:b9:fc:02:48:f2:a9:69:46:f6:43:7d:ff:88:
         5c:79:bd:66:dc:b1:cc:cf:d1:36:d8:a1:b6:d5:3b:d5:51:a9:
         4d:b0:8c:83:b1:78:8e:02:cc:81:81:35:c6:08:28:3c:1a:44:
         c6:a7:c4:6a:3d:a6:6e:b6:bc:ca:6d:52:eb:06:2c:25:70:ed:
         36:4e:68:cb:20:41:fc:95:ce:21:c8:a2:dd:7b:87:4a:9a:9d:
         f9:24:42:90:77:aa:34:c0:67:0e:d2:93:83:54:f7:d0:30:08:
         e6:14:83:2c:de:f6:09:ea:04:17:9b:6e:56:ab:14:8a:e2:f2:
         b8:7c:1e:f7:7c:5a:8a:a9:32:64:97:56:12:0f:33:2f:48:c6:
         0f:7e:7a:9a:59:1d:9d:34:79:6e:63:3b:1f:11:b8:ef:93:d5:
         e6:a7:f7:c8:1f:7b:07:f6:9a:6c:e0:1a:59:88:47:21:d3:0a:
         c7:e3:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----