Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0b908a41c5541011ed86c4e99327c7cbf9c1ea15.roa
File:                     0b908a41c5541011ed86c4e99327c7cbf9c1ea15.roa (raw, json)
Hash identifier:          xR6hVRsTErTxBAkiuw9J1uY+IONhjbxbXFM9E74cr0g=
Subject key identifier:   4B:54:F6:B8:BE:50:1E:3F:68:8E:1C:3F:99:1A:18:DC:BA:69:A6:D4
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0185BD
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0b908a41c5541011ed86c4e99327c7cbf9c1ea15.roa
Signing time:             Tue 22 Feb 2022 04:06:47 +0000
ROA not before:           Tue 22 Feb 2022 03:00:00 +0000
ROA not after:            Wed 22 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99773 (0x185bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 22 03:00:00 2022 GMT
            Not After : Feb 22 03:00:00 2023 GMT
        Subject: CN=0b908a41c5541011ed86c4e99327c7cbf9c1ea15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:91:79:5d:05:df:a3:cb:83:55:fc:09:89:
                    55:82:ff:8b:3b:76:5f:7c:77:13:05:34:c1:c2:e7:
                    50:9a:67:7d:15:fc:e5:83:fe:67:6f:a8:f4:18:9a:
                    cb:fb:67:76:7b:49:66:00:c5:b7:2c:59:5f:f6:8f:
                    92:33:70:b1:7e:6e:46:62:a1:b2:7a:f0:31:bc:f4:
                    68:f3:c2:6a:da:d2:6f:a6:74:9b:f5:5a:ba:14:eb:
                    12:cf:27:de:04:35:28:55:90:b2:93:8f:0b:24:be:
                    21:bd:07:48:53:28:d9:c2:68:a2:eb:79:59:f6:5c:
                    c3:63:27:a3:9a:e2:6e:57:9f:a3:8e:84:c5:2d:6a:
                    3b:73:b6:f4:e9:8a:ed:cb:aa:23:8b:c0:ff:34:9d:
                    53:7b:6e:dd:eb:87:83:7a:18:90:c1:e8:a1:6a:af:
                    84:ac:c8:cd:73:40:fd:ce:a6:5a:14:28:1b:39:42:
                    9a:66:9a:5d:82:1b:04:d1:32:cc:aa:75:c1:91:b5:
                    37:f3:6a:01:6a:14:dc:91:48:cf:ec:87:b9:23:a7:
                    74:14:1a:bd:b6:ab:2a:7c:aa:28:08:41:ab:eb:be:
                    70:49:bf:5b:6d:86:e3:e4:ad:42:5e:5e:0d:d6:b5:
                    20:04:32:02:92:b8:f1:ed:4b:ea:6a:5e:4b:5f:b4:
                    87:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:54:F6:B8:BE:50:1E:3F:68:8E:1C:3F:99:1A:18:DC:BA:69:A6:D4
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0b908a41c5541011ed86c4e99327c7cbf9c1ea15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:e9:3c:eb:fa:00:89:6c:0b:44:7f:63:41:df:77:be:50:
         05:c0:cc:51:8b:26:fa:8e:56:f2:13:fd:e7:3a:c4:ac:c3:ac:
         52:46:c5:8d:46:19:20:e9:87:97:d1:e9:d1:33:72:02:a2:5c:
         18:72:cf:45:82:f4:d0:94:c2:4a:7b:6c:45:09:95:b4:5a:4a:
         a2:32:0c:9a:46:9d:5c:a8:ce:76:c6:91:c1:f4:ce:70:06:9d:
         5e:a8:6f:33:e8:4b:fe:a7:3a:84:df:18:4a:0f:30:8f:98:f1:
         c7:5e:29:df:51:e6:cc:04:74:37:d5:96:39:b6:fc:ca:23:36:
         65:0c:d4:e4:84:02:56:bb:41:7c:16:8d:63:f9:f8:cd:13:71:
         ca:93:ac:8f:df:ab:7b:14:47:47:6f:88:2a:5a:4d:ef:0d:a8:
         57:01:2c:6f:28:99:77:cc:63:93:ea:64:b8:31:29:2c:1c:60:
         3d:af:83:ba:a0:0d:b4:33:37:1d:5c:84:d6:e4:06:51:4c:d2:
         af:68:06:f8:f8:6b:40:31:1a:34:49:d5:5c:78:7b:68:ea:26:
         90:14:c9:30:52:9a:9f:54:16:a4:b7:37:fc:78:52:ce:6e:ca:
         70:99:94:5b:76:b2:3d:a7:bd:e8:2e:eb:1c:35:de:11:42:f7:
         94:81:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org