Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa
File:                     0bbc661196376f4fac490e20f04bfcc9b575aafd.roa (raw, json)
Hash identifier:          BCInO7dxqRXKossbfBqAw1zVxS+BqkFYuuVOjjWwkQc=
Subject key identifier:   7C:AC:79:2B:68:26:54:AD:28:7A:65:CB:55:3C:3C:E5:2B:E4:E6:A4
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01A9D8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa
Signing time:             Fri 25 Feb 2022 01:55:01 +0000
ROA not before:           Fri 25 Feb 2022 03:00:00 +0000
ROA not after:            Sat 25 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109016 (0x1a9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 25 03:00:00 2022 GMT
            Not After : Feb 25 03:00:00 2023 GMT
        Subject: CN=0bbc661196376f4fac490e20f04bfcc9b575aafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:a9:93:63:31:3c:a6:69:e1:cb:9c:63:3b:
                    37:ab:26:1a:9a:4d:c1:8a:9f:c4:e3:e3:b3:ce:2e:
                    10:62:fa:48:b2:15:7f:d5:07:35:d7:a1:4e:f1:b9:
                    f3:e7:7a:74:81:bf:f2:b9:d8:7d:5e:53:39:bd:ac:
                    a9:cd:d0:a2:3f:a8:3d:71:d2:06:95:4a:ed:12:5e:
                    d5:0a:57:60:e9:5a:17:b8:9f:ba:4c:40:42:7f:4f:
                    49:2d:b0:41:4d:0b:00:78:32:85:98:cd:3b:e1:15:
                    f7:5f:eb:67:c5:9c:88:78:10:05:c0:08:c5:63:7b:
                    0e:61:c2:67:a7:2f:e4:1e:c2:1f:07:d0:bf:7c:54:
                    eb:c0:25:51:a1:e9:68:b4:5e:5c:10:11:62:e4:d3:
                    27:64:e4:c3:0f:51:74:0c:73:21:0a:d0:a1:fd:38:
                    e1:9a:02:8c:c9:6e:cd:3e:13:b6:5c:93:6c:f6:0b:
                    f7:99:db:df:1d:12:0c:96:82:b6:8e:c7:0f:e8:e7:
                    49:52:c1:0b:6a:db:32:70:88:b8:ab:43:ed:b4:2e:
                    95:5e:ca:51:08:77:62:fc:a5:91:fb:98:9a:89:9a:
                    c8:0d:d5:3a:3f:17:cf:f8:b0:a0:08:9f:de:96:a5:
                    80:f7:1f:bc:f5:dc:b1:ff:94:d6:d5:5c:d6:c6:30:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:79:2B:68:26:54:AD:28:7A:65:CB:55:3C:3C:E5:2B:E4:E6:A4
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0bbc661196376f4fac490e20f04bfcc9b575aafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:db:bf:37:d4:a7:21:a8:94:ff:b8:93:b3:26:cf:06:d1:90:
         6f:46:73:c8:b5:b7:21:b0:25:42:e6:53:83:f0:51:b7:14:93:
         a9:bc:e1:7a:df:93:be:ff:32:a3:b1:9f:9c:b8:2d:d9:42:3b:
         1a:d9:e6:26:16:b9:96:e8:88:50:ab:4e:fb:93:63:b9:af:0c:
         df:99:16:6d:52:5f:15:5e:ae:6d:25:ab:b2:30:17:91:c8:6d:
         bd:d4:29:37:07:12:5c:f1:a9:20:44:19:3e:ba:c0:76:9b:5f:
         9c:d4:1e:af:7e:f9:bd:fa:d0:de:c2:11:a1:3a:5c:c1:a0:14:
         1b:db:04:f1:06:61:73:b7:80:95:ad:0b:31:1c:d0:a3:c5:10:
         5e:5b:ba:ed:be:08:83:78:2c:07:8b:14:75:1c:2b:75:0a:03:
         4f:bd:83:cb:56:f9:b4:d2:20:ef:81:63:1f:a5:3c:92:bb:38:
         ad:d0:cb:b9:f4:8a:c8:81:eb:2a:7f:b1:e2:d4:05:62:62:98:
         50:9a:6b:0e:1d:7f:0f:f1:c9:ce:14:36:cb:22:55:d0:4e:e9:
         29:e7:17:a8:30:7d:72:a0:c4:d8:ef:f3:67:82:65:58:59:00:
         0c:0d:54:20:fe:39:07:70:77:fa:23:a4:8e:e7:1a:ed:e4:77:
         3d:f5:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org