Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/601c76d3c00c1ef86a2f8ec9543595221980fbee.roa
File:                     601c76d3c00c1ef86a2f8ec9543595221980fbee.roa (raw, json)
Hash identifier:          k+HX+Nkn8Ln+TsDisqyQA2mvmEb7cKVivaCRTKiZb2c=
Subject key identifier:   C6:0F:4C:36:63:5A:50:46:91:59:41:2A:30:54:6D:C0:15:F9:AD:5B
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06E5A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/601c76d3c00c1ef86a2f8ec9543595221980fbee.roa
Signing time:             Wed 22 Jun 2022 03:13:44 +0000
ROA not before:           Wed 22 Jun 2022 03:00:00 +0000
ROA not after:            Thu 22 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452009 (0x6e5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 22 03:00:00 2022 GMT
            Not After : Jun 22 03:00:00 2023 GMT
        Subject: CN=601c76d3c00c1ef86a2f8ec9543595221980fbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:c6:43:be:cf:69:8a:fe:6a:7d:24:05:c5:
                    29:12:50:e2:17:71:30:40:79:30:90:0f:b5:af:27:
                    10:42:d3:d6:6f:cc:4b:e9:6c:57:77:72:a8:16:9a:
                    02:b2:ab:84:37:40:a4:07:59:87:2f:d8:ca:0b:88:
                    5f:92:22:f1:03:cd:98:00:b5:f5:04:2e:60:a7:93:
                    4d:b7:1d:c5:86:5f:4f:54:5c:b5:1a:4e:eb:d7:a7:
                    89:d0:68:e0:eb:1f:37:05:d4:8f:63:8d:c0:0d:dd:
                    ca:20:c9:1e:36:91:17:c6:2a:03:f2:d6:5f:0d:01:
                    e7:5c:11:36:33:03:e4:24:c6:64:41:24:7b:0e:5a:
                    e5:cd:93:aa:9c:5e:d8:d5:a1:6a:93:30:5b:39:60:
                    2f:74:72:0e:9b:37:bb:ff:86:8a:81:d0:97:f9:5c:
                    87:8f:a8:68:f8:6c:f1:b6:f2:66:0d:80:13:43:95:
                    dd:99:cc:09:d5:bf:61:03:93:4e:9f:fb:cb:5f:95:
                    91:dc:0e:95:f4:f9:dd:24:6c:18:d0:47:f1:23:f0:
                    5c:ba:0b:17:ba:3d:91:be:ed:cb:b2:c3:51:04:da:
                    f0:07:6d:7b:e3:18:6b:a9:48:6c:da:ec:d0:60:27:
                    68:cb:7d:92:4d:ae:55:11:ec:a4:41:0b:47:21:99:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:4C:36:63:5A:50:46:91:59:41:2A:30:54:6D:C0:15:F9:AD:5B
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/601c76d3c00c1ef86a2f8ec9543595221980fbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:79:7b:6c:bb:60:57:fb:5b:4d:8e:87:f8:09:fe:87:88:af:
         6b:66:b0:ce:2d:23:f6:65:88:9a:c7:93:79:69:73:0f:df:ed:
         19:3c:a6:b6:55:22:33:df:4d:a9:db:01:1a:61:50:12:df:fb:
         c6:43:b3:cf:3e:f0:22:a4:02:5f:7f:4c:30:37:69:f6:89:dd:
         8d:31:b8:5e:8d:9c:48:30:2a:f9:85:ee:2b:f4:63:dc:6d:e2:
         29:f8:dc:6a:01:99:6c:81:b7:61:0a:c0:86:89:e3:89:14:2d:
         dc:03:25:5a:40:27:45:12:22:1a:68:7f:d9:0b:f6:70:89:92:
         2f:4e:28:aa:ac:0b:c2:d7:e9:94:e9:08:41:63:d1:22:91:aa:
         67:70:a3:c0:8b:77:60:6a:b6:10:7c:16:4b:73:59:bf:5a:af:
         e5:ce:ac:c2:84:31:ca:de:1d:1f:34:8a:19:bd:43:2c:1f:6c:
         0c:4b:94:58:e2:34:b7:1d:60:73:fe:ec:5c:e7:4e:30:89:3f:
         87:d2:96:1c:db:88:d5:c0:04:3e:45:8e:be:4b:73:0c:92:e5:
         7d:9b:f1:a2:70:d6:6a:8f:e9:3b:0a:8d:eb:ec:ff:79:9d:fa:
         21:7d:d6:4c:12:7b:8f:f2:0f:8c:58:fa:5b:be:c8:f8:8e:06:
         8a:dc:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org