Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1bc5b02115fa22dc477279ee6e1e9d0c66b9bcf0.roa
File:                     1bc5b02115fa22dc477279ee6e1e9d0c66b9bcf0.roa (raw, json)
Hash identifier:          wIgKeIFsTKMUQVMtgXoEK8HjjhbYG+9oztJHGXT9RPc=
Subject key identifier:   88:08:7D:B7:6A:D3:90:9C:43:FE:3A:1D:33:F9:4C:A5:D6:DD:B8:CA
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       060817
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1bc5b02115fa22dc477279ee6e1e9d0c66b9bcf0.roa
Signing time:             Sat 04 Jun 2022 01:03:19 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Sun 04 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395287 (0x60817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2023 GMT
        Subject: CN=1bc5b02115fa22dc477279ee6e1e9d0c66b9bcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:b8:3c:50:4d:c8:f8:9d:9b:eb:b6:52:09:
                    27:02:02:89:ab:c2:2d:fa:8f:cc:d5:ca:4b:d3:4b:
                    9b:da:80:2c:b7:52:52:7a:47:df:ce:c8:14:b8:83:
                    12:1c:11:dd:5c:8b:bd:62:56:ce:06:df:03:52:07:
                    d4:ca:9f:e9:4c:e3:cb:ff:4b:92:67:3a:1e:e2:ac:
                    e8:f9:c6:c5:86:59:76:d8:3d:af:e2:ff:f2:b4:eb:
                    d7:e6:04:44:31:9e:af:ed:17:37:af:a1:71:87:cc:
                    82:63:d4:d5:39:8a:2d:ab:48:46:c6:86:29:21:32:
                    05:b8:33:78:cc:18:d2:22:99:79:d5:8d:1a:04:f2:
                    91:27:94:a8:34:24:ca:d7:f8:6f:e3:e3:4c:1f:3f:
                    c8:ca:5a:df:43:4b:dc:26:ca:c7:ac:19:16:85:47:
                    f5:a1:61:3c:4b:43:a8:b9:3c:6c:c2:b6:58:f2:07:
                    0c:29:c2:b1:2a:6a:65:23:3d:7d:26:40:34:e7:23:
                    08:4b:21:d0:80:00:0f:55:7d:7b:90:1e:9a:f5:ae:
                    46:b0:24:9a:02:75:b7:f5:ac:73:5f:74:0b:c6:09:
                    59:a0:21:d5:25:c1:8a:b2:8b:fe:a5:c7:44:85:62:
                    76:3c:9e:4d:61:7d:07:5e:8d:7e:9d:8d:6c:0a:ff:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:7D:B7:6A:D3:90:9C:43:FE:3A:1D:33:F9:4C:A5:D6:DD:B8:CA
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1bc5b02115fa22dc477279ee6e1e9d0c66b9bcf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:36:4c:a0:1f:c3:71:f2:e0:6f:38:cc:cf:00:b1:a3:02:
         e1:fd:6a:5c:a7:6f:e1:b0:33:7a:dc:ca:61:10:07:29:cd:8d:
         bb:8f:58:76:d0:2d:77:d2:87:cc:ca:47:6d:56:c8:be:49:20:
         9f:e8:ec:04:be:82:71:ba:52:23:e0:6b:be:0c:99:31:3d:87:
         e1:e9:26:4a:08:be:ba:65:7e:c6:4b:09:7b:9f:9e:6a:91:56:
         1d:e9:45:48:68:fe:c0:0a:02:88:c3:24:5f:d9:47:07:4b:26:
         c0:e7:3c:f5:be:31:3c:bc:3c:d5:3b:e4:38:ba:3c:63:94:70:
         92:76:f3:36:6b:40:ed:33:c4:df:84:63:e7:ef:55:4c:75:f6:
         b9:58:65:b2:0c:a8:4f:04:21:f5:65:6a:a5:47:ae:10:3c:6f:
         c8:c2:64:e0:42:4a:22:0d:1e:e6:77:76:6e:52:ac:9e:cf:0d:
         4b:b5:35:bf:6e:db:d5:8c:79:4e:81:5d:1a:10:07:93:2f:0c:
         ab:c9:94:cd:35:ac:e5:93:82:02:b8:de:df:a2:8f:c6:77:31:
         d5:04:c1:d5:c5:a8:e4:ce:99:20:4f:95:38:12:f5:14:31:39:
         d5:d7:0b:99:6c:37:7e:e0:ee:96:8e:c4:ea:3f:e0:6f:38:97:
         51:98:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org