Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4a1b14c09c18aaeb774cdd13393d331aec4f3514.roa
File:                     4a1b14c09c18aaeb774cdd13393d331aec4f3514.roa (raw, json)
Hash identifier:          CRZRjlmAyiM7mSPBUekv6FG0D+2fbK26446sOb2zWqg=
Subject key identifier:   80:47:A5:8D:E3:E4:74:A8:C7:F3:C5:4E:C2:F4:6D:F6:60:99:B7:81
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0B56C1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4a1b14c09c18aaeb774cdd13393d331aec4f3514.roa
Signing time:             Tue 27 Sep 2022 01:29:55 +0000
ROA not before:           Tue 27 Sep 2022 03:00:00 +0000
ROA not after:            Wed 27 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743105 (0xb56c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep 27 03:00:00 2022 GMT
            Not After : Sep 27 03:00:00 2023 GMT
        Subject: CN=4a1b14c09c18aaeb774cdd13393d331aec4f3514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:07:a3:94:1e:43:a3:1b:8d:62:dd:8b:9a:
                    ef:5c:20:4e:9b:d1:ba:eb:fb:df:58:fa:53:6a:01:
                    c8:75:72:d9:78:ab:b2:73:62:ea:1e:7f:67:e5:02:
                    c7:33:cb:9b:89:1f:fd:2e:ff:00:3e:ca:37:ec:2a:
                    9f:3f:04:95:cd:a0:d9:1b:c7:0f:ca:ff:cb:b1:f6:
                    58:c4:8d:75:90:c7:72:39:7d:e8:a2:07:85:aa:c6:
                    50:a4:72:68:2d:a4:88:4b:26:70:f0:15:59:13:7c:
                    c2:b5:fb:e4:31:f4:51:cd:93:2a:14:b9:72:9e:1a:
                    ed:12:e8:80:79:a1:b9:11:4c:4c:91:67:c7:fd:2f:
                    b8:d4:37:6c:87:77:d7:25:83:ae:a2:90:d1:46:d3:
                    c0:0f:6c:d6:aa:0f:73:a3:5b:09:05:84:20:89:2d:
                    ea:9c:e3:df:e5:42:c4:dd:0f:d9:0f:f0:02:35:39:
                    53:0a:d1:ae:a5:42:be:b3:c7:ea:20:2e:c6:0a:40:
                    db:3c:04:b8:d5:a4:f6:b2:3d:73:e6:75:12:97:fb:
                    27:6b:69:87:da:2d:b2:0a:cb:7b:e3:01:e1:1e:20:
                    2a:b0:a8:f1:96:fa:f4:d1:72:9c:95:3d:fb:33:06:
                    3c:06:10:ee:6f:7a:f0:6e:8b:f4:d4:d4:0b:b5:7c:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:47:A5:8D:E3:E4:74:A8:C7:F3:C5:4E:C2:F4:6D:F6:60:99:B7:81
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4a1b14c09c18aaeb774cdd13393d331aec4f3514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:ea:c4:27:43:dc:a5:ba:a3:cc:c5:68:58:25:87:0b:81:
         9e:50:8c:5a:4d:88:32:20:dc:79:de:ee:88:92:c3:39:c0:6c:
         9e:9d:63:f0:9f:f8:3e:f2:65:8d:bd:08:77:c1:c2:ff:1a:4f:
         4d:e8:5d:a6:90:fa:bd:63:af:0c:16:27:67:55:16:a1:3d:5e:
         81:d7:77:a8:ff:2a:04:09:70:33:de:a1:fd:1e:b0:39:c2:76:
         1e:b1:56:c1:be:cf:5f:01:4f:bc:4a:25:54:cf:2c:78:cc:82:
         83:bd:9d:e8:2f:51:88:0a:be:9f:97:8d:a0:30:01:f5:47:10:
         14:d3:99:96:b6:c5:fe:3a:3f:c5:e1:cf:95:dd:30:85:5c:e1:
         2c:ec:3b:a6:c2:32:c8:d4:42:1c:2b:39:14:43:83:4a:f9:24:
         7f:9d:16:13:da:7b:85:01:16:08:ee:78:99:a4:d7:a3:47:db:
         44:92:52:50:10:72:22:0c:8d:e5:5f:4b:4e:f5:3b:b9:9e:97:
         71:37:21:0c:50:e8:9e:4e:10:62:ef:8c:d5:e5:3e:cf:29:c3:
         db:34:36:6f:dc:6f:a5:59:bf:33:60:eb:5d:be:af:25:47:e3:
         92:3c:6f:21:af:7b:f5:04:9c:2c:8f:ea:5d:26:29:20:41:b0:
         db:33:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org