Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19a89397f32eaf893ede30afeabeea622561e05b.roa
File:                     19a89397f32eaf893ede30afeabeea622561e05b.roa (raw, json)
Hash identifier:          jp1OqCFe56MdJenT7R2IRABup04QzpnvXVwvqPD+yPo=
Subject key identifier:   41:6C:B7:44:3A:2E:9C:20:5D:52:54:3D:14:EB:90:96:5C:AB:B5:1B
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08AD39
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19a89397f32eaf893ede30afeabeea622561e05b.roa
Signing time:             Tue 02 Aug 2022 00:37:32 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Wed 02 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568633 (0x8ad39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2023 GMT
        Subject: CN=19a89397f32eaf893ede30afeabeea622561e05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:af:d4:6e:8d:34:22:7a:78:9a:52:6d:6a:
                    83:76:bb:b3:46:dc:6f:10:14:66:74:d4:d9:ce:26:
                    6a:51:d2:4a:dd:e5:20:64:de:47:a0:63:f9:57:fa:
                    9c:90:e6:37:c9:11:84:6f:55:a4:ff:1e:41:94:4c:
                    5f:f1:b4:0e:3b:56:b8:32:72:3c:db:d4:f0:81:83:
                    d3:f7:c8:15:e8:8c:b6:44:fb:f7:4a:be:11:04:93:
                    e8:69:ec:2b:13:37:be:d4:2c:b9:2b:2a:7c:24:c1:
                    25:43:36:8b:23:26:ee:c1:70:83:87:c5:0d:25:a2:
                    2d:11:15:71:8f:6b:01:9f:a4:8b:ff:c2:d5:95:38:
                    c2:16:b7:52:e5:a8:0f:75:23:23:d9:30:d2:5c:b3:
                    0c:02:b4:06:7e:0e:64:da:68:af:e8:3c:cd:ab:74:
                    ab:1f:ee:d1:21:b5:b1:40:47:87:ca:cc:72:77:ff:
                    fa:53:10:3a:6d:72:64:16:dd:1c:43:55:e7:e6:87:
                    8c:55:5c:07:ad:ba:93:5d:e2:30:e1:30:6e:72:1d:
                    14:56:29:56:2d:17:19:ff:1c:a0:e9:f5:3c:ca:e4:
                    b4:53:05:14:48:a2:54:ec:8a:24:8c:68:85:0d:ab:
                    9d:6a:b8:64:97:98:c3:06:d4:38:57:fc:d0:17:ac:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:B7:44:3A:2E:9C:20:5D:52:54:3D:14:EB:90:96:5C:AB:B5:1B
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19a89397f32eaf893ede30afeabeea622561e05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:9c:4c:e8:41:b3:5d:27:52:13:95:45:a5:86:19:14:c5:
         82:35:dc:6c:5a:4e:eb:cd:18:46:39:9f:d4:4d:47:d0:d1:db:
         e7:f6:95:99:c3:23:da:6f:90:00:22:81:56:50:e8:9e:64:15:
         79:18:e5:97:4d:48:b7:45:10:a2:d8:fa:16:30:c2:3e:0c:cf:
         7f:5a:69:22:fb:7d:f1:42:40:34:65:51:c2:f9:99:cd:c0:48:
         bb:dd:d4:6f:66:af:16:83:fd:d8:f6:df:e4:50:04:1b:1e:15:
         44:2f:eb:5a:ba:f4:df:92:3b:e6:91:15:53:99:c8:85:2a:86:
         39:50:4e:2c:6f:ec:6c:89:bf:85:8a:32:01:c1:5b:12:2a:f5:
         bb:ea:7c:1a:63:54:ac:a8:7a:7d:44:c7:c0:00:d9:5d:cb:22:
         a0:f9:d0:ff:6b:e1:cf:b6:ed:74:61:6b:b0:34:c0:a1:69:5a:
         b4:d9:0d:42:fa:df:12:59:d1:51:0e:5f:16:be:c7:c7:08:53:
         a6:14:71:cd:7a:5f:3b:18:3f:8b:9c:5e:5f:6c:17:bb:59:38:
         8a:d4:25:43:da:3d:01:05:b5:11:86:16:4e:1c:06:ba:a6:9e:
         f4:ca:13:13:15:ec:ed:90:b7:d7:c4:92:01:91:21:39:c4:65:
         e4:71:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org