Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4c82891c8cbcb23d31d9d9b7fa2af4bb7b1eb128.roa
File:                     4c82891c8cbcb23d31d9d9b7fa2af4bb7b1eb128.roa (raw, json)
Hash identifier:          9GFyl1duQDfADInYYpfnVssNSxZfXMrw9Piwf+HHalo=
Subject key identifier:   F8:3C:3E:00:B9:9C:9D:91:30:89:C6:F3:97:64:6B:DC:9C:11:1F:72
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0BF3E4
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4c82891c8cbcb23d31d9d9b7fa2af4bb7b1eb128.roa
Signing time:             Mon 10 Oct 2022 05:23:07 +0000
ROA not before:           Mon 10 Oct 2022 03:00:00 +0000
ROA not after:            Tue 10 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783332 (0xbf3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 10 03:00:00 2022 GMT
            Not After : Oct 10 03:00:00 2023 GMT
        Subject: CN=4c82891c8cbcb23d31d9d9b7fa2af4bb7b1eb128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:b1:01:b2:8c:53:71:4b:93:ab:d9:a2:c1:
                    6a:ad:ef:0e:d1:8b:dc:da:14:56:18:7d:ef:78:48:
                    d9:f2:03:c4:c4:87:d6:6b:f9:94:6d:39:2e:fa:34:
                    42:3e:e6:24:b3:19:0c:1d:9c:c8:6c:37:99:9d:82:
                    04:bd:3a:26:53:4a:08:c5:86:bb:ca:9f:cc:87:78:
                    14:4f:49:de:86:44:00:b5:ac:e5:84:93:92:54:b3:
                    35:56:cd:b5:3d:ae:17:11:b0:f1:0c:ce:89:19:f4:
                    c3:1c:dc:2a:72:f6:5a:d8:ac:db:bf:af:f6:14:52:
                    fc:c9:e4:a3:ce:fe:51:50:e0:8f:46:62:7a:26:f1:
                    74:65:f6:57:74:f2:d1:11:27:c6:e7:f6:26:06:84:
                    17:2f:d4:60:74:fb:8d:3b:64:87:58:68:09:33:fb:
                    0e:08:e0:0b:0b:69:1a:51:a0:aa:ff:41:5d:51:52:
                    4f:0e:91:01:9c:30:eb:64:6a:03:92:3a:20:c1:14:
                    37:f6:e7:a5:9d:cb:4e:aa:fa:a1:10:d0:44:16:d7:
                    65:66:12:ff:d4:e9:29:d2:10:1a:92:1d:b4:91:eb:
                    ed:b1:7e:5c:8b:56:9e:1b:e1:01:31:2d:32:47:48:
                    43:b3:dc:93:aa:2d:3c:bf:66:de:f1:4d:d3:64:a7:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:3E:00:B9:9C:9D:91:30:89:C6:F3:97:64:6B:DC:9C:11:1F:72
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4c82891c8cbcb23d31d9d9b7fa2af4bb7b1eb128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:3f:88:65:c9:8c:9e:22:59:a1:12:5c:10:6d:5f:75:dd:
         73:97:50:f0:30:2d:ce:99:8e:6c:b6:6b:2e:b3:9c:a1:d6:89:
         0c:a2:a6:cb:8f:8b:8a:1f:f1:e2:b8:4d:7d:17:be:d2:72:9d:
         30:64:79:b3:9e:dd:12:40:a7:3b:f4:10:ea:05:eb:25:1e:8f:
         b5:e4:d4:09:70:49:74:be:46:eb:0d:02:f2:79:3b:36:1f:c5:
         44:ff:70:9f:ff:58:23:38:fa:4a:32:bc:52:f1:ba:81:dc:03:
         79:36:8c:88:5c:4f:47:f4:1a:75:60:ca:02:2b:cd:e7:7b:7c:
         d8:d1:9b:67:02:5b:62:2c:6a:65:41:02:a4:df:95:5e:33:c0:
         4a:57:83:23:f8:0b:e4:f5:61:75:2a:7a:38:4a:61:43:fe:38:
         9c:7f:e8:0d:6b:11:ab:8b:e9:98:24:44:ec:07:63:98:5a:60:
         0c:40:8c:e1:70:0f:46:bf:ef:a4:d6:45:70:f2:60:02:03:15:
         b3:37:58:81:93:9b:d7:3b:4b:12:62:05:c1:ba:70:bc:23:98:
         6e:07:83:c9:c9:a5:eb:20:31:d6:b7:a4:32:b7:09:71:1d:7d:
         47:71:cd:03:75:4f:f5:a7:ea:db:32:20:bc:ed:eb:bb:c2:56:
         6d:c6:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org