Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/678ae1647354c193c30cc0ec96bbb02eca7c7c53.roa
File:                     678ae1647354c193c30cc0ec96bbb02eca7c7c53.roa (raw, json)
Hash identifier:          7JB6DBBKq5HyRv4+Yv2ge9H/dfJEKJuAKYYo9HMnm1w=
Subject key identifier:   27:AB:BA:FF:B2:BD:0C:98:0D:75:EA:33:2B:D5:51:49:68:DA:D2:31
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       014786
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/678ae1647354c193c30cc0ec96bbb02eca7c7c53.roa
Signing time:             Thu 17 Feb 2022 03:51:48 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Fri 17 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83846 (0x14786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2023 GMT
        Subject: CN=678ae1647354c193c30cc0ec96bbb02eca7c7c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:a6:2d:84:68:cf:6f:2f:0b:07:e7:b7:b2:
                    28:5a:cd:4c:90:88:8c:58:75:86:63:0e:3a:31:49:
                    a6:3a:dd:75:c5:9d:6b:cf:b4:23:07:1f:06:45:91:
                    05:08:a1:33:ca:f3:69:e8:92:c6:1b:09:88:17:fa:
                    2b:cd:5d:04:9b:eb:68:ef:64:2d:df:a9:61:e8:b3:
                    b7:dc:0e:7d:88:d2:89:6a:4c:af:97:a5:60:c4:df:
                    a4:76:df:6e:d4:7c:38:63:89:2f:7f:1b:83:7b:5d:
                    43:fc:a4:24:51:ec:26:68:69:ed:95:f4:84:db:42:
                    0c:8f:f0:1b:a9:73:ca:24:32:14:cd:34:2e:89:73:
                    ad:c0:b9:2a:a8:bc:7d:55:5f:4e:01:85:72:ef:99:
                    25:b5:aa:ee:cd:c4:43:d0:a3:f8:7c:a8:12:f9:cd:
                    54:c1:fe:f7:41:9a:ce:94:24:3c:2b:1f:d4:02:3d:
                    71:53:63:ea:cd:d5:48:f3:d8:98:3e:47:86:66:aa:
                    98:cb:fc:71:5a:3f:b5:70:4e:85:3e:c6:6e:0d:11:
                    14:73:3f:a4:b5:49:0e:05:fd:52:89:27:c4:ac:5e:
                    ef:5e:c4:0a:99:36:c2:bf:48:99:8c:73:18:99:72:
                    a9:71:fb:78:6b:5d:f0:d4:d0:3d:af:b0:c7:c9:02:
                    15:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AB:BA:FF:B2:BD:0C:98:0D:75:EA:33:2B:D5:51:49:68:DA:D2:31
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/678ae1647354c193c30cc0ec96bbb02eca7c7c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:2c:2b:9b:81:b8:c8:6b:f6:65:07:9f:51:5e:ca:36:68:
         73:12:58:cf:e9:f7:4b:62:4e:01:5c:df:20:f6:e0:a5:3a:18:
         11:ff:bf:96:c8:62:50:6f:9a:70:22:b5:90:02:c7:49:1d:13:
         1a:a0:a8:2d:ae:b3:8b:ec:c1:11:b9:6b:ab:ba:3f:37:a5:d7:
         fc:a1:c3:35:d7:1c:d5:b8:70:bd:bf:0e:2b:41:6b:1c:a5:f1:
         c7:aa:33:58:f1:fb:32:d5:d0:91:dc:b8:f1:d4:e2:66:28:2e:
         1c:9d:36:9a:1a:5f:0a:47:50:95:27:49:6e:ec:87:d1:8f:ff:
         11:cb:4e:be:88:4e:03:42:02:c7:21:36:ac:78:6f:04:0c:74:
         ba:cd:36:c2:55:cf:9a:bc:06:a5:f4:1b:fe:45:14:57:6b:75:
         46:36:ba:16:5d:d1:72:1d:e6:9b:1e:e3:96:82:94:98:2d:7e:
         78:86:80:45:da:4f:8c:b9:f1:0e:9e:65:e3:97:4e:94:e9:02:
         12:8d:c4:23:dc:0c:36:40:53:f6:cc:05:5a:a1:71:fd:27:18:
         34:6f:6f:e4:d2:a2:27:7f:88:f1:d3:8e:0c:08:75:06:44:4b:
         d8:8d:1b:d5:ff:3d:b1:d6:52:f5:80:79:ce:ec:f3:d5:2b:18:
         b9:96:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org