Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1feb5dfd7f5a7f7b994e092f87285eb6d324d8a0.roa
File:                     1feb5dfd7f5a7f7b994e092f87285eb6d324d8a0.roa (raw, json)
Hash identifier:          WSi2+dJ9KvUI7tYKMIpU+jLcf/LCCCy2DbA4SmQeqhU=
Subject key identifier:   57:AE:37:9E:73:F0:4D:15:D6:DB:A0:CC:0D:83:74:AC:B0:2E:5F:75
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0B31CE
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1feb5dfd7f5a7f7b994e092f87285eb6d324d8a0.roa
Signing time:             Sat 24 Sep 2022 00:19:57 +0000
ROA not before:           Sat 24 Sep 2022 03:00:00 +0000
ROA not after:            Sun 24 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733646 (0xb31ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep 24 03:00:00 2022 GMT
            Not After : Sep 24 03:00:00 2023 GMT
        Subject: CN=1feb5dfd7f5a7f7b994e092f87285eb6d324d8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:28:5a:bd:84:40:7a:be:29:36:90:00:33:
                    37:3a:19:ec:0f:c6:de:66:fb:b6:e1:da:2c:22:a7:
                    c3:60:77:7a:f5:b2:a8:ca:a6:bc:e9:8b:b8:0d:ee:
                    91:29:3e:dd:c3:07:dd:d5:f3:b0:60:55:36:dd:13:
                    e9:f5:a0:c7:03:15:6a:4b:50:5f:b2:2c:30:f6:25:
                    1f:f8:4e:71:73:f2:8d:b2:c3:4f:b3:09:40:bb:09:
                    55:98:04:27:ca:f5:e3:a6:04:73:f8:c8:b1:21:c4:
                    63:a6:d6:81:2d:72:98:2f:0d:75:de:a1:6e:43:89:
                    4f:d3:48:dd:43:bb:db:c3:7e:29:a8:54:4d:59:f0:
                    87:29:68:94:06:c7:53:7a:ea:2a:9d:f6:70:9c:e6:
                    0d:3f:72:ed:4b:e3:e7:b2:54:19:df:43:f5:d5:ae:
                    71:46:a5:10:ca:11:8e:f9:7e:e4:85:68:67:69:63:
                    57:71:59:4a:27:2e:75:ef:1e:19:a9:9f:e2:8b:72:
                    57:3b:94:cf:ed:fb:3a:a5:2f:52:b5:f6:0f:92:4d:
                    f1:3d:09:1a:34:00:5d:9f:92:21:59:95:83:24:a0:
                    22:03:21:78:37:80:b8:84:53:cd:12:46:d0:06:93:
                    9d:40:06:4a:27:cf:23:45:eb:1b:8c:05:73:97:81:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:37:9E:73:F0:4D:15:D6:DB:A0:CC:0D:83:74:AC:B0:2E:5F:75
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1feb5dfd7f5a7f7b994e092f87285eb6d324d8a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:be:7a:fa:4c:3b:ca:ae:0c:d0:10:f2:c0:13:68:4f:f7:
         98:12:09:3c:e4:09:4e:6b:9f:d0:3d:7d:96:4d:d3:fb:88:8b:
         a1:0f:88:27:16:82:82:bc:50:25:b9:47:c3:df:05:05:f0:7d:
         71:ed:a0:1a:7c:5a:41:72:a7:cd:9d:1d:88:94:42:5f:87:40:
         73:73:38:c8:00:26:bf:06:07:76:33:ed:54:0b:00:9a:3c:13:
         35:cb:98:95:ff:ed:eb:dd:b8:f3:39:8b:96:dd:06:ef:da:ca:
         db:60:59:4a:b2:a4:dd:1b:d9:5f:94:60:66:84:d6:62:19:60:
         93:b2:a7:5b:e6:4f:f3:02:c8:f3:b0:67:25:97:d2:3d:87:1e:
         fd:c4:14:61:99:46:97:25:1b:83:9e:dd:c7:f3:17:20:cd:03:
         b5:61:0d:21:b7:72:03:b6:38:ef:01:dc:82:02:a1:ce:7d:56:
         c3:55:83:af:55:98:b5:ba:a8:c6:2a:aa:4c:cf:f5:cb:fc:2e:
         69:39:63:86:f9:80:8d:62:94:cf:8a:a7:87:d3:ea:d2:e0:08:
         be:9b:0a:55:a5:16:0b:a4:2a:17:89:16:4d:0b:09:aa:f5:0a:
         73:fc:34:0b:26:47:6f:88:e7:22:58:d5:6b:05:32:a6:52:ff:
         cc:75:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org