Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2147de64b38a3aa448314718e91436d5da8c78fe.roa
File:                     2147de64b38a3aa448314718e91436d5da8c78fe.roa (raw, json)
Hash identifier:          +gHgmB/T961rHSiFQG9EeQlaHAvCZwWxFFGPCYs7JWQ=
Subject key identifier:   78:A6:BF:75:7B:6D:82:9C:AA:AB:B3:81:8A:03:B8:DE:7E:B9:63:0D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       033C26
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2147de64b38a3aa448314718e91436d5da8c78fe.roa
Signing time:             Fri 01 Apr 2022 00:03:22 +0000
ROA not before:           Fri 01 Apr 2022 03:00:00 +0000
ROA not after:            Sat 01 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212006 (0x33c26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  1 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2023 GMT
        Subject: CN=2147de64b38a3aa448314718e91436d5da8c78fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:7f:62:f9:d4:10:80:6b:cd:b6:f7:0d:f4:
                    d8:b2:de:d2:9b:ff:09:fb:18:71:68:71:25:83:e4:
                    bc:b2:6d:b1:98:93:93:f3:d7:50:89:b0:31:83:e6:
                    0f:27:b1:a6:b2:b3:62:f2:3b:45:c6:e8:6e:8e:41:
                    40:b9:0c:26:1d:2d:ed:3f:07:21:bf:3c:c2:48:4d:
                    92:a2:57:71:ea:04:9e:47:dd:5d:7f:2e:57:b7:a5:
                    1d:8f:f9:73:e7:ac:b2:3b:e5:10:85:bb:eb:c2:0a:
                    11:c9:89:5e:a8:1b:b8:33:7b:47:da:4a:c2:20:67:
                    3d:a5:01:7f:23:10:27:89:04:0a:8e:c3:8b:8b:85:
                    71:e3:92:cc:27:a1:ac:64:2c:e8:5d:7b:a6:09:75:
                    37:ed:de:c4:11:2b:89:53:9f:89:33:3a:80:62:9d:
                    c9:20:d8:fe:87:3b:0a:09:a7:5b:e1:56:17:fd:ed:
                    2c:85:23:0e:8b:63:bd:88:89:f0:38:94:71:1b:33:
                    89:17:2d:73:27:e6:da:a6:05:9e:ba:af:d5:1e:e5:
                    96:57:6d:ed:25:bb:6b:8a:9f:96:4a:f9:b0:2a:e5:
                    a9:d5:4a:67:02:89:50:e3:94:80:3b:08:36:b9:5b:
                    2a:a7:81:ca:55:1e:76:09:df:4c:b7:6d:db:7b:ef:
                    4b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:BF:75:7B:6D:82:9C:AA:AB:B3:81:8A:03:B8:DE:7E:B9:63:0D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2147de64b38a3aa448314718e91436d5da8c78fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:04:b8:12:24:3b:cc:15:96:08:fc:92:d0:86:1e:00:f9:
         e6:72:5d:df:df:50:3b:76:d3:91:fd:c0:05:b1:c4:f0:e1:3b:
         69:08:d3:5c:90:dd:e0:8d:e6:9b:1b:8b:61:04:22:98:a9:a1:
         ac:59:03:10:63:6e:d7:ed:e9:0c:de:cb:45:15:ac:f3:74:df:
         d7:8a:c2:45:45:58:f4:82:97:f3:5e:d5:60:5f:43:63:c6:3d:
         95:f6:1a:3b:87:65:14:98:47:96:91:cc:dc:46:c5:be:20:58:
         9d:0f:34:63:9a:60:cc:28:f9:24:69:09:41:ae:cf:2d:18:90:
         d2:c5:43:e6:51:a5:25:3a:5f:dc:5e:3e:ca:04:91:29:2f:49:
         86:60:c7:d6:57:78:7b:5d:9f:c6:75:f1:d2:6c:ba:fb:31:04:
         8e:e6:a9:1a:d6:f2:36:41:21:a3:15:7c:3d:82:6b:9b:8d:0b:
         6b:a3:1f:cc:21:a2:c4:4e:9b:6c:06:2a:5f:47:e0:7c:b5:aa:
         5c:cd:20:cb:5e:85:75:e5:c8:37:a0:2d:78:5d:f9:89:c6:27:
         ce:bf:c4:a6:12:3b:cc:26:18:9d:ff:a1:90:26:e4:45:65:d6:
         40:84:de:c7:96:cc:f5:ba:85:70:b0:9f:45:8c:81:e3:16:7e:
         a6:40:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org