Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e9192b6f07c7763b9165a74ff693df1e2333393.roa
File:                     3e9192b6f07c7763b9165a74ff693df1e2333393.roa (raw, json)
Hash identifier:          DdRmDJY8enc8JW5dkVAf2KmdyJomJn/z7qq+o0ze2JE=
Subject key identifier:   D3:18:49:64:F5:4D:42:98:71:8B:29:38:FD:B0:5D:3D:8D:67:F0:C0
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0894B3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e9192b6f07c7763b9165a74ff693df1e2333393.roa
Signing time:             Sun 31 Jul 2022 05:51:17 +0000
ROA not before:           Sun 31 Jul 2022 03:00:00 +0000
ROA not after:            Mon 31 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562355 (0x894b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 31 03:00:00 2022 GMT
            Not After : Jul 31 03:00:00 2023 GMT
        Subject: CN=3e9192b6f07c7763b9165a74ff693df1e2333393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:5b:fc:5e:57:ff:81:67:39:c7:a1:b8:77:
                    71:5a:83:6b:6b:86:4b:fb:67:df:a9:49:23:40:a6:
                    81:2e:ae:6f:1a:2d:76:db:ab:7d:6a:5b:5c:55:57:
                    f7:d3:35:e3:cd:81:66:c3:e5:1f:8e:05:38:08:d6:
                    c5:c6:d3:42:33:c8:72:65:bf:fa:7c:27:c1:1b:39:
                    3d:ea:9c:c0:07:ad:6a:51:32:97:29:77:26:45:a7:
                    d7:02:e2:63:f6:46:3b:16:24:68:6f:9d:6b:ac:66:
                    03:1d:29:c2:cb:dc:d0:26:c9:74:d1:b3:9d:9b:96:
                    6e:6d:9a:97:47:bc:79:28:f6:00:81:b2:65:a9:58:
                    a8:a5:31:14:d2:f8:95:3b:9d:9b:ba:2a:c5:fb:4e:
                    4c:3c:db:b8:9f:c8:a6:1a:26:92:2d:6d:00:59:d2:
                    01:92:4c:0e:36:c7:05:07:18:85:0e:d3:44:00:e0:
                    44:9d:20:c3:85:b9:72:1d:65:66:99:4f:56:86:f3:
                    93:86:c1:ff:51:3e:ce:18:3c:70:4a:68:4e:a3:ca:
                    e1:0d:e5:27:23:37:a6:53:75:48:d6:62:92:c6:1b:
                    25:88:da:64:98:7c:63:63:8e:95:58:df:6c:5a:3e:
                    a0:cf:ff:b3:fe:d2:37:d3:57:d1:f7:67:3f:01:8c:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:18:49:64:F5:4D:42:98:71:8B:29:38:FD:B0:5D:3D:8D:67:F0:C0
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e9192b6f07c7763b9165a74ff693df1e2333393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:ce:b6:82:1e:fb:28:9b:f2:a4:af:60:dd:6e:5b:0d:71:
         43:25:ca:e6:f7:29:33:3f:cf:35:45:3e:32:05:c0:d6:6a:b7:
         08:70:ca:e8:1f:71:0f:90:b3:4e:af:b2:63:be:43:2b:23:ec:
         e2:39:8d:4f:40:9a:ee:95:01:43:4d:65:5a:a2:2d:cc:56:85:
         71:9f:33:76:6b:a4:4a:71:ca:65:58:f8:be:b5:ab:9a:24:cd:
         0a:bf:b0:57:42:75:a1:02:7b:e4:61:1f:66:30:ac:3f:b3:24:
         91:69:13:ca:20:18:bb:ac:3c:a3:7b:08:41:65:93:35:8e:93:
         ae:65:44:da:7e:99:1f:e4:ef:20:c4:c3:fb:ca:8f:32:47:80:
         2f:4e:fc:95:df:39:1e:fe:77:5a:40:1b:fd:61:76:8b:29:06:
         6c:9a:21:23:3e:db:44:4e:07:63:ba:f6:f1:af:bf:bb:15:6d:
         9e:4f:07:f8:10:36:1b:61:b5:6e:62:25:50:b7:d9:5d:9b:e9:
         d4:be:11:49:ea:82:b0:73:ec:1b:fb:8e:d1:ae:e7:c1:32:f6:
         94:6b:10:84:cd:8e:d9:2f:c7:ec:67:d8:56:24:78:85:9b:42:
         da:8c:80:0a:a6:e4:e2:ef:dc:88:0d:20:8e:4c:41:2f:07:4d:
         42:a4:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org