Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/266745770f474e68e94020ce9eaa893562a231d8.roa
File:                     266745770f474e68e94020ce9eaa893562a231d8.roa (raw, json)
Hash identifier:          uKQ/l2sVwRPJS18wYDiRZHtySN4GRsDOYmXuMWXkneI=
Subject key identifier:   DD:1C:7D:3E:C8:B0:12:B3:F2:22:ED:0F:10:E3:0A:B5:DC:4F:26:06
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08CC17
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/266745770f474e68e94020ce9eaa893562a231d8.roa
Signing time:             Fri 05 Aug 2022 04:12:33 +0000
ROA not before:           Fri 05 Aug 2022 03:00:00 +0000
ROA not after:            Sat 05 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576535 (0x8cc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug  5 03:00:00 2022 GMT
            Not After : Aug  5 03:00:00 2023 GMT
        Subject: CN=266745770f474e68e94020ce9eaa893562a231d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:d6:c6:3e:35:d4:46:29:ca:dd:b0:99:28:
                    d1:a1:50:d2:6c:c6:ef:14:5d:8e:e5:66:95:27:07:
                    c5:1d:b1:f0:54:cf:04:03:70:99:f0:d4:0c:67:42:
                    90:25:03:69:50:05:a3:08:f7:da:b8:ea:a4:d4:90:
                    64:0f:d2:4c:3f:c6:c5:f5:04:fd:71:08:be:29:f1:
                    5e:45:24:83:2d:6b:ef:a0:bb:ba:15:3f:8d:90:c2:
                    44:a8:b2:e5:72:7c:03:6b:d1:6a:dd:cc:68:01:34:
                    4c:ed:82:60:52:d3:7f:48:91:9c:9a:c2:21:e9:4a:
                    8b:24:2b:8e:4b:ae:e8:65:b5:44:82:ec:4c:01:1b:
                    b1:84:47:f9:23:61:3f:69:ae:d3:c3:7d:3a:b3:4e:
                    93:c7:6b:be:86:1d:b7:b1:30:05:0c:ff:fb:fb:98:
                    c0:fb:ab:a1:96:1b:e6:13:d4:b0:62:db:25:ff:ee:
                    71:7d:ca:fa:31:a7:48:af:47:87:c6:9f:46:8c:ba:
                    63:14:93:e4:66:f4:a8:33:26:51:f5:0b:0a:7c:7f:
                    b1:d6:01:8e:0a:48:05:36:e7:f4:29:3a:4f:c8:99:
                    9a:8e:ed:06:7e:f3:96:bf:72:c5:16:2d:f1:c6:72:
                    50:9d:8e:43:c3:7b:22:fc:ec:6c:71:59:bf:2c:be:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1C:7D:3E:C8:B0:12:B3:F2:22:ED:0F:10:E3:0A:B5:DC:4F:26:06
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/266745770f474e68e94020ce9eaa893562a231d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:0e:fa:66:89:d2:06:53:fc:14:a2:48:20:17:d6:74:60:73:
         31:b5:10:d4:33:cd:af:c8:4e:11:d5:fc:56:fa:b6:31:72:ad:
         d8:db:df:08:40:2f:85:68:82:ad:70:41:ee:68:a6:9a:07:3f:
         4b:77:40:4f:2f:e0:90:0f:d1:d1:12:3c:ed:f5:ed:56:0b:90:
         bd:91:a8:d0:b0:0a:79:5c:f3:97:1d:fe:1f:35:cd:4e:3a:2e:
         ab:04:38:ea:15:8a:c6:44:05:51:f9:e7:bf:a3:3b:c1:47:6f:
         00:d4:e4:20:01:cb:02:99:0e:c4:26:65:9a:bb:c5:22:d7:72:
         94:1b:9d:59:0d:2c:82:81:ab:9b:aa:79:56:c7:c0:8b:7c:e4:
         93:ad:0a:81:17:66:ed:ad:4a:b8:ab:8e:bb:fe:45:23:b0:9c:
         f5:63:e5:0c:e2:ce:81:75:0d:24:5c:ee:25:bc:0b:bc:b7:cd:
         96:74:2f:ca:a1:ec:39:b0:38:29:d6:2d:2a:29:a2:70:76:12:
         a1:e8:6a:cc:b1:02:63:f7:b8:2d:07:ab:3f:01:3e:32:8b:40:
         66:da:53:c5:fa:96:9c:90:11:bf:46:e4:9b:56:3c:09:49:75:
         0e:72:92:5c:32:bf:35:c0:46:6a:28:03:1a:20:e5:82:c8:37:
         32:dc:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org