Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5dfd3f72d168dec571e9a6b7d7551bd51068f7d5.roa
File:                     5dfd3f72d168dec571e9a6b7d7551bd51068f7d5.roa (raw, json)
Hash identifier:          rJcvaZYshgE9CKPhES5NeAzrxnLs+9r59AaQq9UlsoM=
Subject key identifier:   54:F2:DD:4C:D0:82:24:4A:04:F8:58:8E:CA:A0:97:E8:46:5E:A3:CB
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       07AB00
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5dfd3f72d168dec571e9a6b7d7551bd51068f7d5.roa
Signing time:             Fri 08 Jul 2022 05:42:08 +0000
ROA not before:           Fri 08 Jul 2022 03:00:00 +0000
ROA not after:            Sat 08 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502528 (0x7ab00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  8 03:00:00 2022 GMT
            Not After : Jul  8 03:00:00 2023 GMT
        Subject: CN=5dfd3f72d168dec571e9a6b7d7551bd51068f7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:74:00:03:59:ae:55:58:07:66:6b:d1:94:
                    24:d5:ac:00:01:41:90:4b:01:e8:c5:2a:aa:4b:a1:
                    ff:5e:18:bb:5b:f1:40:c5:d2:18:0d:c0:9d:df:98:
                    70:61:7d:dc:29:95:7c:ab:0b:93:e2:92:d2:80:64:
                    f3:c9:c9:e0:78:91:66:aa:91:d6:32:51:4a:2c:57:
                    12:97:d1:00:d8:4a:5d:cc:43:aa:e2:69:ac:86:25:
                    7a:8d:d1:32:80:f8:3e:52:a6:18:12:0e:c4:9b:77:
                    6d:ee:8f:24:2f:7c:ae:29:04:f5:93:9d:25:d8:fa:
                    b9:6e:d2:f8:84:43:05:30:1d:7e:80:3d:2e:57:51:
                    85:a1:97:89:54:1c:69:7d:2a:82:e8:db:04:77:c3:
                    4e:2c:c0:5e:2e:82:c7:15:1b:76:ba:60:a5:e8:70:
                    8b:51:7c:d4:e1:5e:f6:ab:e3:1c:63:4b:73:91:f1:
                    5f:ad:3d:3c:8b:91:fa:65:a1:83:39:ed:cf:9c:76:
                    13:cc:9d:f2:c5:91:cb:fc:b8:d3:e2:a9:c1:78:00:
                    0d:8e:34:85:c0:e9:e6:45:56:1c:a3:85:af:34:17:
                    69:10:58:5c:65:b7:77:f8:f1:a4:fb:3f:87:a9:76:
                    4a:34:c5:a6:a3:1b:5d:13:e3:64:c9:16:e1:10:53:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F2:DD:4C:D0:82:24:4A:04:F8:58:8E:CA:A0:97:E8:46:5E:A3:CB
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5dfd3f72d168dec571e9a6b7d7551bd51068f7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ce:c6:db:0b:01:14:cf:ab:08:1b:c6:d1:be:fb:15:2c:0a:
         ca:cc:b5:42:4c:3f:b1:3a:07:00:46:a8:72:2f:41:36:7a:d8:
         d8:1a:00:d0:ae:16:b1:66:cf:91:7d:47:b4:29:79:0b:68:f9:
         c9:6a:20:4a:2f:08:de:91:94:d0:90:cd:19:cb:f6:20:fa:b3:
         3c:a3:bd:26:7f:ad:53:51:bc:98:ab:8d:e9:8b:f9:2c:18:b5:
         ec:89:72:cf:31:89:e1:f1:16:34:a3:bc:1a:14:be:e1:00:f0:
         7b:ca:df:c7:22:71:58:2a:58:18:fd:4f:9e:44:48:18:04:ca:
         c7:e0:1a:4b:4e:6e:a4:c7:5a:2c:b3:7c:b6:4d:24:9a:e9:f1:
         35:f2:9e:28:b9:34:e4:96:81:e6:e9:7d:28:f8:a8:8f:a7:cb:
         21:49:8a:99:23:a5:48:28:62:11:41:86:30:44:57:9e:a9:de:
         b5:26:71:a9:96:bc:d5:21:ff:31:76:e3:1f:05:f0:37:c5:09:
         54:e1:86:8b:ef:58:ce:1c:7d:75:b8:27:21:7e:42:5e:19:3b:
         63:38:ef:c4:60:06:fb:e3:f7:02:1f:2f:03:52:92:b3:33:86:
         c6:22:6f:c5:8d:56:6e:5d:14:94:db:79:41:f2:ff:54:61:79:
         89:77:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org