Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/15b91b31434a374599320ee31d1de423e0d0d6d9.roa
File:                     15b91b31434a374599320ee31d1de423e0d0d6d9.roa (raw, json)
Hash identifier:          m06ofGoCUF2B7g8zZn3o96U5IqQlubg59md2t75f9cg=
Subject key identifier:   DD:F8:E5:E5:84:4A:46:D7:FB:59:5D:07:30:D8:31:04:73:40:19:E2
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0A7D91
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/15b91b31434a374599320ee31d1de423e0d0d6d9.roa
Signing time:             Fri 09 Sep 2022 04:07:29 +0000
ROA not before:           Fri 09 Sep 2022 03:00:00 +0000
ROA not after:            Sat 09 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687505 (0xa7d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep  9 03:00:00 2022 GMT
            Not After : Sep  9 03:00:00 2023 GMT
        Subject: CN=15b91b31434a374599320ee31d1de423e0d0d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:ca:cf:ae:37:fd:9a:82:73:c4:3a:f8:b2:
                    58:a9:76:78:83:86:4a:d7:61:96:71:9c:73:bf:8a:
                    34:2e:cb:a7:a1:96:28:f2:de:f0:01:74:74:79:eb:
                    bf:f4:04:89:fa:4f:cf:41:b1:77:9b:ea:dc:cf:d8:
                    b7:19:81:19:13:49:27:d3:f4:94:2d:af:67:f0:c2:
                    c7:10:35:d3:1b:75:95:66:7f:59:49:db:93:e6:6a:
                    8c:57:86:83:d4:0c:4a:06:ee:4f:8e:a6:a8:b5:b9:
                    18:bc:19:8a:f0:cb:d6:bc:85:2c:4e:9a:88:41:11:
                    b4:0a:34:1b:da:5c:e8:2c:48:f9:1f:8e:3a:33:61:
                    9c:5b:7c:cf:83:8b:81:32:a0:a6:a1:3d:39:f8:b0:
                    cb:38:d2:b0:3a:74:b4:de:36:3c:a1:2f:43:f5:76:
                    6d:3f:63:5c:ae:29:95:7c:bb:c6:5f:8d:d5:3b:61:
                    17:86:f5:5e:47:1c:bb:1c:78:10:da:31:cb:b3:2d:
                    cb:f6:92:00:19:7a:28:83:1f:bf:21:da:f3:13:e5:
                    94:0d:33:44:2d:f2:8f:6b:70:7c:5e:57:d3:0c:61:
                    af:c6:9f:40:6d:79:5f:57:27:08:00:ca:e6:93:9d:
                    53:bb:55:6e:c7:f8:d7:0b:4a:57:33:4b:94:ce:9a:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F8:E5:E5:84:4A:46:D7:FB:59:5D:07:30:D8:31:04:73:40:19:E2
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/15b91b31434a374599320ee31d1de423e0d0d6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:2d:c5:d3:fc:e6:fa:1b:5b:20:54:e1:9a:ef:23:bf:63:
         0d:57:25:f7:49:d5:98:68:85:60:ae:d0:41:0f:3f:68:77:27:
         9a:78:42:67:15:91:12:9a:9a:c9:c6:2f:36:60:26:72:7f:ea:
         f7:b9:91:f2:2a:ce:5d:8a:3b:ed:0c:cb:02:f6:7e:1a:b8:5a:
         25:3a:1f:c2:4b:e3:05:48:79:18:38:a6:13:b0:bc:64:5b:09:
         db:b7:96:bd:32:5a:a7:49:53:b3:f4:85:c3:be:62:31:5e:52:
         3a:7b:c0:81:ed:de:05:62:a6:0b:ec:9e:f4:7c:50:ca:ad:c9:
         91:19:03:51:45:6f:a1:99:8a:c9:1b:dc:6e:85:39:95:85:de:
         3f:b0:3e:68:bc:b2:06:fd:6c:16:95:22:d1:d3:30:92:70:b1:
         47:8d:b2:c4:aa:d1:ce:a4:1f:a4:54:20:81:6f:48:8b:3a:2f:
         aa:af:6c:63:17:e1:6d:2a:41:a5:4f:6e:bc:07:69:f4:3a:75:
         86:ff:f8:b8:d9:11:c5:d4:02:63:d6:29:c3:20:7d:2f:67:2e:
         cb:35:7a:34:71:53:21:d9:a6:20:2e:e7:24:75:b0:02:f7:b4:
         9c:f0:f4:87:18:85:62:e0:79:f4:62:0f:ef:10:bd:dc:e5:46:
         d1:d9:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org