Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/08f6c19bb5716e47b926406879d1c0d10ed358c7.roa
File:                     08f6c19bb5716e47b926406879d1c0d10ed358c7.roa (raw, json)
Hash identifier:          5lwcfPxGH0xFXvyvXqqcTPV2onChsRYFPxct9PzT+n0=
Subject key identifier:   56:28:16:4D:D7:88:00:26:31:56:07:31:13:EE:3E:24:68:35:64:89
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0411B7
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/08f6c19bb5716e47b926406879d1c0d10ed358c7.roa
Signing time:             Thu 21 Apr 2022 07:16:06 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Fri 21 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266679 (0x411b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2023 GMT
        Subject: CN=08f6c19bb5716e47b926406879d1c0d10ed358c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:12:2b:df:9c:e0:4c:12:c4:39:5e:c8:a8:
                    23:9e:3d:d0:cb:63:57:0f:69:6b:e4:a6:b8:b3:42:
                    02:48:bb:c0:f6:6d:b9:42:1d:2e:38:b2:ac:81:07:
                    ba:70:e3:7d:a0:16:ef:87:79:d9:20:6e:b2:17:f0:
                    2a:a4:44:98:87:db:47:fa:55:b8:a7:f9:69:99:b4:
                    07:3b:7a:cc:57:43:53:11:d8:8d:ca:4f:f0:94:b3:
                    b4:0e:39:64:4c:bb:44:e5:76:64:b0:4c:89:ff:de:
                    fc:1d:8a:14:13:29:dc:c4:86:06:4f:ba:1d:8d:af:
                    dd:e1:d6:b2:60:7c:03:fd:08:4c:4b:d7:2b:cd:f3:
                    40:38:4f:62:ef:c6:10:d6:e7:e6:59:4a:e7:e2:a8:
                    0e:53:2c:b6:be:4b:6c:f3:31:9b:20:b2:0d:36:c1:
                    25:30:8c:b9:1d:1f:69:80:1c:bf:58:12:e5:ae:d5:
                    33:e2:9d:3c:80:69:d5:54:35:4d:be:7b:2b:ef:82:
                    bc:50:af:48:ce:5f:eb:d2:15:7d:60:f5:86:bf:3f:
                    6b:02:72:75:8c:a6:e8:0b:a6:aa:a0:8c:37:1e:bd:
                    1a:7a:db:5d:97:10:53:d1:b1:75:27:5b:e9:5f:d1:
                    63:df:da:20:1e:30:3c:f6:bc:ab:74:47:72:52:15:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:28:16:4D:D7:88:00:26:31:56:07:31:13:EE:3E:24:68:35:64:89
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/08f6c19bb5716e47b926406879d1c0d10ed358c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:9f:5a:a3:3a:b0:cb:a5:00:7a:c6:b1:07:06:4d:76:91:
         ee:1d:93:93:d7:3e:63:75:fb:67:84:eb:6a:08:15:2b:66:86:
         9c:fb:71:78:0f:be:d2:81:a5:38:7b:ac:ca:58:13:66:46:b9:
         83:2e:08:2f:d3:b5:f8:c0:62:8d:16:77:6d:a9:6f:4f:91:51:
         68:0c:ca:0f:5f:d3:45:b3:2a:d1:b0:d1:99:d7:d5:fe:f9:1a:
         f7:b8:b1:69:fb:ba:cd:8c:de:e5:45:49:b5:a5:4d:a5:e2:ce:
         b1:ab:99:3c:aa:89:02:09:60:be:87:42:0d:a7:af:63:76:99:
         7c:66:3b:4f:d0:2a:af:63:df:1b:8d:ff:4a:55:20:c0:d9:4f:
         20:d6:74:41:1b:67:c9:53:14:54:66:a8:38:08:9f:1a:2d:53:
         d0:77:54:03:59:d6:1d:04:c6:bc:af:ec:ab:4f:b8:7c:02:a7:
         7d:4c:cc:20:5a:b1:fa:91:36:99:46:42:83:13:07:ac:63:68:
         f1:b4:1c:37:2b:38:9e:76:8d:97:32:10:1d:10:5c:39:cf:50:
         2e:6d:0f:53:47:10:6c:25:e7:c8:62:7c:10:03:42:83:f2:d7:
         b3:f4:4e:de:c5:14:a9:b3:3e:0c:a1:10:7d:93:f2:14:db:2a:
         02:95:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org