Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19288bbe15c5a16b554824d65634b3023f8e3157.roa
File:                     19288bbe15c5a16b554824d65634b3023f8e3157.roa (raw, json)
Hash identifier:          OBsXiY+AAmk4qq51NgIK6uASBUcv/61ItPDDnEKgcyA=
Subject key identifier:   5D:7D:2A:5A:B6:5C:91:4A:BE:08:93:D9:16:9F:A3:7F:2D:EF:F4:51
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0363B3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19288bbe15c5a16b554824d65634b3023f8e3157.roa
Signing time:             Tue 05 Apr 2022 01:04:06 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Wed 05 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222131 (0x363b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2023 GMT
        Subject: CN=19288bbe15c5a16b554824d65634b3023f8e3157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:e6:d2:a5:6d:97:4e:8a:ca:51:d9:bd:35:
                    27:61:49:98:34:6a:61:42:03:4d:07:6b:a5:f1:de:
                    2d:5f:3b:39:68:11:3f:be:79:bc:52:6f:30:c6:33:
                    06:20:5e:cd:5a:9a:9f:df:bb:92:25:8b:db:d5:ad:
                    8f:16:30:d2:73:d0:d1:cd:b0:02:43:c8:59:70:1e:
                    90:08:98:1a:f2:f5:a3:32:0c:ea:f1:59:1b:f9:af:
                    63:f8:96:80:35:be:0b:e4:53:b5:96:7e:57:d9:9d:
                    36:b6:4a:90:32:fa:35:2c:60:68:ca:f0:be:30:5b:
                    aa:f1:b2:36:2d:87:ba:91:d5:a9:3c:bf:e2:67:1c:
                    25:c1:5b:b6:d3:af:c7:4a:e6:c3:8f:bc:1d:19:27:
                    fc:bb:fb:53:38:9f:40:dc:79:98:2c:3e:08:7a:7c:
                    e1:ea:3c:75:49:e0:ab:a4:3c:19:38:69:d5:0a:b6:
                    83:ad:a2:21:6f:0e:d7:ec:4f:59:64:f9:4e:5b:cc:
                    68:81:b1:6d:13:40:fa:41:5b:d2:0c:d3:ea:87:5d:
                    59:4a:78:16:84:7b:dc:83:dc:a7:d4:15:57:f9:ee:
                    d4:a6:22:17:e0:67:59:63:a3:43:04:0f:22:38:2a:
                    99:60:fb:66:9a:05:bf:a6:be:a7:8a:3f:a0:a0:09:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7D:2A:5A:B6:5C:91:4A:BE:08:93:D9:16:9F:A3:7F:2D:EF:F4:51
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19288bbe15c5a16b554824d65634b3023f8e3157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:13:95:c5:cd:51:48:95:05:e9:62:ef:da:5d:65:b1:da:
         84:48:de:21:1e:38:12:ce:47:74:38:2e:2f:24:a8:1e:69:a9:
         00:4d:20:58:cd:86:fb:48:49:51:45:79:92:be:a1:6e:1c:32:
         82:5e:82:66:90:35:58:f7:3c:f8:60:0f:c7:dd:11:ba:86:a1:
         87:5e:c2:02:c8:5d:80:14:93:e4:16:72:9b:86:fb:dc:1d:a1:
         b1:98:19:dd:c3:41:4b:2a:44:cd:09:a6:8b:0e:c9:9a:63:d5:
         7b:c1:07:b9:3a:e5:9f:2a:6e:ef:2b:14:bc:64:cf:f8:87:6a:
         ce:f0:5a:dd:f9:d3:dd:da:2e:42:1c:8f:8a:65:af:f1:6c:3e:
         0d:75:5c:b2:ff:8e:89:f2:06:3f:47:ea:93:9a:84:47:77:05:
         73:cd:d7:06:6f:62:da:57:f9:6e:3a:37:49:4a:19:41:74:30:
         f0:fc:04:52:3e:36:10:03:e2:00:c0:6f:88:70:5f:9a:09:ba:
         88:c8:f5:1e:b3:1a:d1:3d:5f:38:bd:41:7f:b4:fd:c2:df:ec:
         7e:5e:f3:97:a0:07:96:5f:63:00:99:4b:57:b6:f1:89:a8:2c:
         e4:03:4b:c7:3c:e7:6e:f4:f6:05:ce:4f:94:e6:1e:c6:fe:7a:
         59:32:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org