Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0fb8113e9abc7c971957dd334b8edfd62be2cd2c.roa
File:                     0fb8113e9abc7c971957dd334b8edfd62be2cd2c.roa (raw, json)
Hash identifier:          DyCcgCCMzOlELuirh49DlpBE7cYGITuYhNaKunBcRlg=
Subject key identifier:   E5:BC:E1:A1:69:7A:AB:D9:B6:88:61:70:0F:98:0E:A3:B4:D8:88:B6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06F671
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0fb8113e9abc7c971957dd334b8edfd62be2cd2c.roa
Signing time:             Fri 24 Jun 2022 02:46:42 +0000
ROA not before:           Fri 24 Jun 2022 03:00:00 +0000
ROA not after:            Sat 24 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456305 (0x6f671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 24 03:00:00 2022 GMT
            Not After : Jun 24 03:00:00 2023 GMT
        Subject: CN=0fb8113e9abc7c971957dd334b8edfd62be2cd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:1b:f3:0f:7c:1b:eb:5c:ab:b2:38:a8:14:
                    f3:f5:26:22:d4:3d:ff:23:1d:30:4c:e9:93:80:d2:
                    0a:c5:7e:f0:53:fb:96:a4:7e:2b:b7:ba:90:bb:9d:
                    dd:17:7e:bc:ef:d7:07:98:96:ea:ae:74:af:98:f1:
                    a6:21:ff:30:60:43:5e:ac:e9:ff:2a:d1:ee:3d:39:
                    1a:0b:b9:3f:25:52:5c:85:f0:10:7d:77:e7:14:6e:
                    f4:69:20:5b:69:b1:94:a4:f0:c5:af:30:fb:2b:8e:
                    7c:7e:a7:8d:b4:a7:7f:0d:a4:c6:2e:82:b9:41:f5:
                    e0:8b:ef:42:8d:43:c3:31:b0:7d:7a:4e:d2:7e:cb:
                    89:1e:71:91:e1:8c:b8:af:bf:93:36:98:c3:a7:dd:
                    ad:ec:1a:bc:2e:83:7f:89:31:47:c6:95:6a:99:25:
                    e0:f1:da:0d:4f:23:2d:a0:bb:11:b8:39:7f:31:76:
                    d9:75:29:8e:bf:84:a5:9b:df:83:e6:b9:c9:2f:aa:
                    91:04:3a:1a:66:8e:d0:21:bd:9e:a7:18:dc:a4:bf:
                    70:68:68:65:61:53:f7:d4:93:1f:52:ff:a7:f1:9b:
                    75:4f:c8:e5:cb:5c:93:5e:24:41:f9:ee:f4:29:03:
                    e2:88:e1:ac:62:65:01:aa:15:16:c9:90:39:40:63:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BC:E1:A1:69:7A:AB:D9:B6:88:61:70:0F:98:0E:A3:B4:D8:88:B6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0fb8113e9abc7c971957dd334b8edfd62be2cd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:8b:6b:d1:30:87:9b:46:c5:9e:69:87:8a:fb:67:cd:c4:
         b6:60:3c:e5:a3:a0:bd:ef:e8:75:61:cf:b2:44:d5:b8:b8:d0:
         7f:33:1f:0e:9a:98:c3:5a:0a:3f:ce:d6:fe:eb:f9:9f:d2:df:
         f6:e9:21:41:00:45:7b:37:1a:a3:a9:78:60:64:8d:56:81:0e:
         f5:2c:99:d2:26:ac:35:da:04:f2:0b:b9:ad:86:d6:e3:0b:27:
         ec:ab:af:3a:f9:4f:5f:0b:6d:b4:8f:58:a3:75:39:7c:20:c8:
         2e:50:e2:ec:69:4f:54:08:b0:55:68:f7:a8:56:c4:e8:1a:52:
         77:21:63:fb:98:d6:8a:61:f1:36:96:8a:bf:be:f9:03:32:26:
         81:a2:b7:b9:26:33:4d:c5:a6:51:29:28:9d:8c:c8:9b:96:ab:
         b5:91:2c:e0:1d:dc:a5:d1:9b:51:a7:b7:15:c9:88:52:d3:61:
         f3:09:cd:70:af:9b:c8:5b:b4:68:6c:c3:f6:fa:c3:e0:28:06:
         bd:73:a0:19:e5:2f:6a:af:75:da:7e:41:e3:3f:31:5b:3a:f5:
         fa:ca:59:64:99:45:c9:38:ce:af:f4:44:f9:ff:7f:5b:90:b1:
         0d:2a:43:f8:49:f8:3d:ca:04:4e:3f:4b:fc:a9:c1:ca:8f:5c:
         4f:64:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org