Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/441447d24226b5f14891e1c231ccd53cefc78104.roa
File:                     441447d24226b5f14891e1c231ccd53cefc78104.roa (raw, json)
Hash identifier:          /rvQrB49N+70U73pSFdACRHFEuS4OmIZliEP58wjx/I=
Subject key identifier:   88:27:25:0C:30:BC:2B:23:FA:3A:DE:91:30:02:A8:70:CC:23:C9:E0
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0BB911
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/441447d24226b5f14891e1c231ccd53cefc78104.roa
Signing time:             Wed 05 Oct 2022 04:04:22 +0000
ROA not before:           Wed 05 Oct 2022 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768273 (0xbb911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct  5 03:00:00 2022 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=441447d24226b5f14891e1c231ccd53cefc78104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:5f:94:00:31:49:56:8d:66:b6:4f:f6:49:
                    45:ba:eb:1f:f8:4c:6f:bc:a5:a2:c0:a8:4b:14:25:
                    38:e1:78:92:14:f1:1d:7c:21:ac:5c:79:96:4d:9a:
                    44:67:51:88:f5:6c:07:33:cd:fb:be:7a:f2:a9:84:
                    a3:b6:9a:fd:6f:f2:12:23:49:f5:d6:23:f4:32:73:
                    bd:79:89:ef:36:f4:b6:a4:ca:ac:91:25:1e:17:29:
                    58:0f:3e:a4:3f:27:27:7f:dc:86:98:56:4b:27:ba:
                    5f:0e:e0:e6:05:26:60:7d:f9:1e:63:6f:06:69:bf:
                    d0:c6:db:b3:0f:53:22:38:a8:16:eb:90:e1:05:1b:
                    09:14:9b:7a:72:d8:0d:0f:30:d8:f3:6d:3f:25:bf:
                    60:25:d9:4d:54:16:0d:c5:9d:3d:43:26:b5:13:23:
                    b8:d3:2d:05:d0:15:22:b4:40:c8:cf:d6:ea:82:fc:
                    dc:31:17:05:a9:ca:3e:b1:66:dd:43:c9:b0:b2:17:
                    39:e8:00:d7:bf:e6:3a:b5:b9:b2:d3:cd:65:2f:fa:
                    8d:c7:ba:e7:5e:ed:74:f5:23:aa:57:39:5b:ff:90:
                    1d:dd:e5:f7:7b:a2:2f:81:1b:7b:6b:d5:1f:dc:7e:
                    33:11:eb:c9:0a:7f:95:41:8b:2b:f0:bd:e2:bf:f9:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:25:0C:30:BC:2B:23:FA:3A:DE:91:30:02:A8:70:CC:23:C9:E0
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/441447d24226b5f14891e1c231ccd53cefc78104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:24:90:01:95:c6:f1:8c:9f:19:70:a4:f8:f1:25:77:ae:
         12:b1:b1:4e:29:11:4e:59:9c:41:d6:28:60:7a:22:a0:52:30:
         db:f1:35:d0:ba:7b:f2:de:12:3e:cc:3f:62:68:6d:39:bf:52:
         6d:12:91:e1:57:d4:fe:0c:8f:1d:f5:05:96:48:61:20:e5:70:
         36:a3:3e:28:9d:e8:61:7c:f8:38:ef:66:1b:0e:7a:6b:a3:45:
         1c:4d:83:48:9a:55:b6:a7:18:93:07:b8:2b:24:e7:bd:14:0c:
         82:d5:3b:78:97:8a:60:13:70:de:e2:7b:6f:45:c9:69:52:97:
         e4:3e:94:7f:4c:bc:e6:0c:3f:12:c1:6b:81:1f:28:43:eb:fb:
         bf:be:2c:f0:14:7a:20:7f:9a:b3:ef:a7:b4:f1:f9:43:76:79:
         fb:d3:3a:02:26:f7:c0:22:26:f4:0c:34:8d:4e:c8:c4:cc:98:
         89:bf:5b:ab:d9:e2:09:be:66:05:9b:8c:14:ea:14:c9:a8:d8:
         9b:77:5f:bd:ad:60:81:27:49:62:46:65:9c:7a:d4:87:b1:f0:
         92:9b:d4:d4:b3:75:26:a4:91:cd:0c:25:43:29:b1:10:5b:71:
         01:14:a6:06:b4:f4:0c:22:a6:02:65:e6:ff:dc:d4:41:da:c1:
         ac:a8:f3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org