Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2dae7a2a6591ff8e917f731c7a89cd00eea26668.roa
File:                     2dae7a2a6591ff8e917f731c7a89cd00eea26668.roa (raw, json)
Hash identifier:          q9iIR2nD9S8wfQLY6bU2RkSWDNn0dfb99yhuVBi3nRw=
Subject key identifier:   68:97:1F:A5:C6:71:4F:F8:93:B8:0A:28:11:46:3A:F7:28:FE:A6:A5
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       043805
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2dae7a2a6591ff8e917f731c7a89cd00eea26668.roa
Signing time:             Mon 25 Apr 2022 06:57:38 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Tue 25 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276485 (0x43805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : Apr 25 03:00:00 2023 GMT
        Subject: CN=2dae7a2a6591ff8e917f731c7a89cd00eea26668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:73:77:6e:34:01:11:da:34:e5:82:d3:ab:
                    7c:d0:ec:3c:11:78:54:2e:a4:27:01:b8:41:19:cc:
                    50:15:96:39:36:86:a6:82:76:63:39:55:cd:60:99:
                    6f:d7:c6:c5:99:50:f4:bb:3c:61:82:83:a7:23:aa:
                    c4:5e:dd:f8:7d:d8:df:5d:55:95:81:af:21:a9:fb:
                    0a:75:ee:14:f2:93:88:59:86:02:72:db:2c:c6:18:
                    9a:ac:f2:4e:ba:68:f6:50:2b:51:62:d5:c0:f7:37:
                    7a:cc:c1:d2:b1:88:ec:2c:b8:44:52:dd:35:eb:e8:
                    8b:c8:69:86:e3:3f:40:ba:8b:99:39:5f:37:5e:b3:
                    37:46:22:07:57:d3:4e:53:65:c1:c0:b8:8c:00:0a:
                    7c:5d:04:bb:12:7b:7e:ad:53:bc:f5:36:6b:0b:75:
                    46:1d:13:50:f9:8e:b0:a0:38:0c:81:0e:6e:69:4d:
                    6c:d5:07:e4:67:fc:4f:4e:5f:75:c4:fc:20:85:dd:
                    7b:3d:95:f5:19:b3:ca:03:c9:5c:ea:14:a7:00:19:
                    f2:88:3e:84:7f:7e:28:62:cc:2b:d9:1e:27:5c:05:
                    22:6d:9d:ff:0b:23:16:36:0a:fe:6e:7b:fa:f2:69:
                    8d:ea:a2:de:ea:52:26:03:ea:1f:17:0b:bf:9c:42:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:1F:A5:C6:71:4F:F8:93:B8:0A:28:11:46:3A:F7:28:FE:A6:A5
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2dae7a2a6591ff8e917f731c7a89cd00eea26668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:12:88:2a:43:69:ad:73:60:34:dd:83:4c:f4:64:9e:9c:
         93:c4:a1:fc:4b:51:a0:bb:e9:db:0b:4c:82:a8:ec:f2:aa:b4:
         e4:48:35:dc:00:b5:40:88:18:b0:0d:fe:41:21:47:9c:1a:6a:
         0a:6e:0a:1f:81:29:4c:27:a8:61:bd:4f:f0:75:c8:28:75:aa:
         92:e6:4b:21:37:38:5a:83:75:d0:ba:84:2f:b9:90:4f:74:d4:
         bc:a1:d2:ef:fe:6c:48:78:4c:d2:45:f0:b1:7f:c9:b6:85:3e:
         b1:5c:68:76:be:20:58:34:7c:97:3b:57:fb:5b:52:e8:d9:5a:
         84:1b:5e:20:1d:4f:0e:2f:35:d6:5b:57:c3:fd:ad:1d:18:8d:
         49:19:6e:c9:b7:5d:d6:3b:d1:23:1a:ee:59:d3:e0:11:d3:35:
         1b:77:bc:af:c6:1f:22:48:cd:2b:42:89:25:d7:5a:0e:b0:bc:
         a8:8b:55:4b:75:9b:7b:c6:52:ea:d6:9a:73:22:bb:f3:92:22:
         a2:14:12:be:e6:cd:49:d6:1c:c8:83:d1:87:a3:fe:5c:b6:d3:
         35:14:d3:23:3b:6f:d5:ab:4d:12:dc:38:55:18:3d:1d:d4:06:
         bd:83:5a:07:f8:94:da:59:1e:5b:11:dd:45:cb:bc:bb:cf:a9:
         80:5b:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org