Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f3add13e9ce4728de2c662a2fd9b5561927a8374.roa
File:                     f3add13e9ce4728de2c662a2fd9b5561927a8374.roa (raw, json)
Hash identifier:          OHLuWAVmiqZG+PsO6iarONM8/yplLhNXF2D6GvP4te0=
Subject key identifier:   32:69:4F:26:DF:D2:F7:65:C5:BF:8B:BF:44:C4:CD:1B:2A:00:C8:A2
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C8A8E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f3add13e9ce4728de2c662a2fd9b5561927a8374.roa
Signing time:             Sun 23 Oct 2022 03:56:49 +0000
ROA not before:           Sat 22 Oct 2022 03:00:00 +0000
ROA not after:            Mon 23 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821902 (0xc8a8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 22 03:00:00 2022 GMT
            Not After : Oct 23 03:00:00 2023 GMT
        Subject: CN=f3add13e9ce4728de2c662a2fd9b5561927a8374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:fb:52:07:94:fb:fb:a2:aa:6f:04:91:e1:
                    13:62:f5:c1:91:e2:14:c5:96:21:a1:fa:8b:1f:88:
                    42:c3:ba:70:90:5a:c0:6e:f9:d9:48:49:5b:66:6e:
                    88:92:54:8d:60:71:ed:e2:fa:51:1a:37:0a:c3:0d:
                    49:01:18:6d:21:e4:dc:64:89:22:82:99:ce:8a:d8:
                    98:71:ff:e9:7c:4f:6b:54:d6:a5:65:b6:b4:1b:0c:
                    59:74:c5:12:38:19:75:de:de:6b:7f:9b:6e:28:68:
                    2d:8f:85:87:49:cb:e3:a4:8f:80:f3:18:8b:e2:7c:
                    77:26:1f:84:1b:31:26:b8:40:b5:56:9a:73:86:8d:
                    48:38:e1:da:d0:d3:68:95:68:aa:1b:ab:e9:ce:38:
                    cf:8c:14:2c:17:b5:5b:12:04:83:57:3e:b8:2f:14:
                    c4:39:53:4f:f8:8d:69:5e:68:4a:6b:52:29:b1:88:
                    90:bf:0c:59:f8:de:69:44:7a:4f:96:40:48:44:1f:
                    f5:e8:f4:ba:dc:1d:88:5c:00:9d:b2:50:4f:3e:b5:
                    5a:ef:62:20:98:6e:1f:16:8e:dd:48:00:ad:94:0a:
                    00:31:1b:10:ed:c8:5e:e1:33:77:65:d5:5f:c5:ee:
                    d4:3e:c9:e8:c1:68:cf:8f:7c:fd:9d:21:3b:4e:21:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:4F:26:DF:D2:F7:65:C5:BF:8B:BF:44:C4:CD:1B:2A:00:C8:A2
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f3add13e9ce4728de2c662a2fd9b5561927a8374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:92:49:67:6d:1f:9f:d3:70:d6:d0:52:25:28:f4:38:5f:
         47:47:e9:b8:6a:38:8a:a9:75:54:9c:b8:8f:fe:fd:8d:6e:86:
         cc:6b:43:24:2b:9f:5f:66:c1:25:e6:1c:5e:24:cd:70:94:37:
         e0:f8:4e:42:8e:a4:a9:4c:97:f1:f3:ba:5d:de:98:89:a8:88:
         e5:ae:57:48:00:a7:35:d9:e0:91:0f:8e:fd:73:63:99:f6:31:
         92:37:bc:59:2f:24:81:cd:5c:4a:01:7a:65:c8:88:fe:d3:e7:
         66:65:71:be:9c:41:eb:bc:c1:9f:98:bf:b4:f2:58:cf:ed:21:
         68:fe:42:1e:36:e6:ac:e6:b8:e0:11:29:df:1f:03:8d:4e:1b:
         48:1c:68:0b:59:3c:94:cb:3f:7a:89:1d:ad:d7:ca:cf:97:21:
         57:e5:0b:f4:0a:26:25:ed:24:4e:0f:a4:74:2b:95:8c:57:79:
         ac:00:65:db:bd:f4:19:bb:c5:da:bb:2b:d1:5b:44:d2:15:99:
         7f:35:08:1b:16:f0:af:42:ba:fb:29:18:19:1f:12:ae:25:14:
         a0:7c:c6:96:7b:ef:fa:64:0d:9f:68:c5:6d:e8:ce:37:b2:25:
         71:b7:e5:4f:14:1b:8d:34:59:22:ab:40:e0:89:18:03:99:87:
         f3:5d:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----