Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f122e6cc74ab194e61f4ae8724f7e715b903909f.roa
File:                     f122e6cc74ab194e61f4ae8724f7e715b903909f.roa (raw, json)
Hash identifier:          AJgwhgKXas/mBsDcpUIjykx8QQqfE3V+IpZQzY5sl4c=
Subject key identifier:   8B:2A:DE:FC:10:32:97:54:FB:46:50:A4:4E:96:35:E2:8E:13:D8:69
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04DC86
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f122e6cc74ab194e61f4ae8724f7e715b903909f.roa
Signing time:             Tue 10 May 2022 01:33:18 +0000
ROA not before:           Tue 10 May 2022 03:00:00 +0000
ROA not after:            Wed 10 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318598 (0x4dc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 10 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2023 GMT
        Subject: CN=f122e6cc74ab194e61f4ae8724f7e715b903909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:01:4f:6d:5c:bd:1b:a8:d3:f7:27:d7:1d:
                    ff:6f:16:18:21:47:16:33:8c:f5:dc:3a:74:b6:0c:
                    b7:8b:82:71:1c:6e:5b:fe:47:28:76:df:b9:57:ac:
                    8b:1b:f8:e3:c2:7a:bf:ab:6b:d7:da:c7:b0:a6:66:
                    5a:9b:09:bf:9b:2c:b6:14:69:a4:28:c4:75:98:fe:
                    c2:6c:44:14:44:25:80:ae:0c:64:fa:69:85:39:62:
                    ab:e7:3e:59:16:57:1e:2e:cf:e1:8c:8d:44:7f:b0:
                    f5:07:01:94:dc:6b:8d:ed:48:c2:c4:fa:6b:22:96:
                    f9:56:39:64:60:d6:1a:9a:80:dc:31:74:77:69:89:
                    dd:b2:27:cb:51:6f:b3:0d:ff:ca:e2:c2:5f:78:33:
                    13:af:98:99:bc:3d:8b:57:71:15:bf:e2:58:69:e1:
                    19:94:35:41:23:54:cf:56:35:94:a4:7b:5b:fb:72:
                    c6:22:ef:c8:a3:c1:4d:14:06:fc:c6:58:5d:98:0b:
                    2c:64:4e:ae:70:da:5c:d9:9a:cf:f2:3e:b4:95:ef:
                    bd:27:55:55:c1:0e:f9:c1:28:8b:ee:42:ea:53:5e:
                    a9:9e:c2:03:d1:3b:0c:c5:60:f9:c3:56:91:ee:b2:
                    d0:c7:f9:8c:01:77:3c:fb:1d:31:7b:cb:dd:89:37:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:DE:FC:10:32:97:54:FB:46:50:A4:4E:96:35:E2:8E:13:D8:69
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f122e6cc74ab194e61f4ae8724f7e715b903909f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:f4:78:71:a3:96:60:fd:12:0a:62:a0:17:42:5e:e0:bb:
         39:13:15:65:83:d0:0a:f1:96:81:ee:cd:e6:d5:c0:66:c4:52:
         39:d6:c6:ce:55:7f:56:9b:fa:d3:b4:7e:db:c7:ce:ce:32:00:
         04:4c:af:c8:e3:14:8c:76:53:d6:8d:c5:66:58:73:af:82:ce:
         ef:df:31:90:1c:ea:98:7a:b3:6a:66:0d:7f:c0:7b:eb:b3:cf:
         92:3d:03:e6:43:6f:fa:3c:96:56:c2:89:fc:f7:97:33:4f:9b:
         3e:9e:14:5d:7a:c5:4c:c8:e5:5c:8c:43:53:41:4e:c2:b5:fc:
         5b:19:b9:22:ee:c5:b1:57:b6:67:6e:ca:fe:bd:71:6d:05:95:
         ac:68:e4:71:f3:38:58:f5:49:7c:00:17:6f:d8:b7:7a:12:25:
         4b:c4:62:b9:2b:3f:f3:19:71:52:66:63:fe:e2:fe:6e:e4:28:
         3c:db:a4:c9:93:94:74:c8:39:8d:b2:4d:5a:b6:61:14:d0:3a:
         bd:f9:56:13:33:b7:cf:84:a2:90:18:3e:ec:b4:02:f4:e4:03:
         3c:d3:d1:d3:12:2e:1a:48:12:e8:84:3b:4c:1d:42:7d:1d:3a:
         1a:10:89:c5:78:a5:0e:08:75:0e:73:3a:7b:84:d1:a8:fe:0c:
         07:47:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----