Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa
File:                     04c8a3619e1304a7e31a3200828d0fa1d861614b.roa (raw, json)
Hash identifier:          53C8eHTN4To6Xg2LnC1ptJMPQbe1hvGxhTMkdUMxp5g=
Subject key identifier:   FA:1F:EC:84:B4:CD:87:BC:B1:CC:F7:9B:29:F2:3D:F4:1E:4C:1F:51
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       070168
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa
Signing time:             Sat 25 Jun 2022 02:03:08 +0000
ROA not before:           Sat 25 Jun 2022 03:00:00 +0000
ROA not after:            Sun 25 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459112 (0x70168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 25 03:00:00 2022 GMT
            Not After : Jun 25 03:00:00 2023 GMT
        Subject: CN=04c8a3619e1304a7e31a3200828d0fa1d861614b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:bc:8f:fd:a1:d6:c5:9c:e7:45:1e:14:33:
                    7a:8c:df:46:77:a8:ec:86:d9:f7:eb:5f:f9:53:01:
                    e5:3b:15:27:ad:c4:26:25:19:c6:f5:51:3a:79:1b:
                    97:9e:a5:bc:b3:c8:d4:db:ec:fb:d8:46:1a:01:cc:
                    79:b1:01:b8:1d:65:30:1c:5d:a8:c2:b4:bf:ca:3d:
                    4d:a0:97:a8:47:4f:68:41:a7:e3:c0:a2:49:34:70:
                    8b:4c:41:04:9f:69:96:ca:16:fe:05:31:e2:a1:20:
                    7a:00:47:b1:ce:b1:71:48:a8:5e:74:64:8b:5b:e0:
                    25:44:16:a3:89:14:78:8a:96:c0:99:f3:37:70:0f:
                    3b:81:89:e4:72:bf:2c:5d:eb:3f:ed:7e:2e:b8:3c:
                    32:87:70:6f:2a:ee:59:90:8c:0e:91:b4:7e:2f:14:
                    6e:1c:1d:8a:6c:46:26:0d:e6:13:57:13:7e:2e:bf:
                    84:6e:f4:9f:36:e1:6d:e5:b7:50:73:0b:c9:82:46:
                    e4:f8:95:5d:8e:95:d3:7d:ed:96:be:91:a8:d5:56:
                    84:ee:63:14:22:a2:7d:14:c0:1a:9d:d9:f3:8b:3d:
                    61:82:4a:95:1f:80:67:b2:e9:a1:0b:21:67:cc:59:
                    d2:27:13:82:ee:4d:7b:1e:66:e4:25:bf:16:b8:8d:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1F:EC:84:B4:CD:87:BC:B1:CC:F7:9B:29:F2:3D:F4:1E:4C:1F:51
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/04c8a3619e1304a7e31a3200828d0fa1d861614b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:7b:e0:8b:4c:5a:5d:52:1e:0c:e5:35:98:f1:6c:e3:a1:
         a7:b3:a9:cf:da:31:fa:6c:55:94:90:a0:2b:1a:8b:6c:86:8f:
         a0:82:a3:d0:69:75:2b:ef:22:e1:de:a5:03:53:ab:f2:25:99:
         e8:7f:8c:a3:ca:d2:03:aa:88:0d:40:9e:9e:8e:d5:dd:42:5c:
         83:ca:f9:7a:a6:53:6c:7f:e3:ca:ab:92:a5:12:7b:03:bd:75:
         fd:69:31:7a:f3:55:15:a6:93:dc:35:dd:21:2d:40:aa:ad:68:
         fb:15:9f:ab:b9:c1:d2:d6:c7:b6:5c:3d:2b:15:63:63:5e:5a:
         7a:cd:38:82:bc:3e:28:92:ba:b2:65:c7:e3:be:02:f4:c0:a4:
         58:c0:43:e1:af:ea:81:e1:45:4e:16:d9:f2:c9:8d:5f:7c:32:
         80:6b:ae:65:b7:d1:4c:29:e2:e0:46:3d:4f:26:b4:8d:63:a6:
         89:c6:79:21:d6:89:cc:0c:16:5d:2d:f3:3c:78:1a:d0:59:5c:
         b2:e7:d7:f8:c6:48:1c:51:52:c1:22:5f:94:95:ca:3c:26:34:
         ac:68:c7:9b:df:15:80:e7:72:14:f9:4f:31:8a:c4:a3:36:fb:
         f6:9d:ad:59:cd:51:86:cf:b2:76:3b:d2:2f:fa:ce:cf:91:45:
         09:60:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org