Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/67ea5cfcf2fc2a37bafa2c29c2aa5a45d379fe60.roa
File:                     67ea5cfcf2fc2a37bafa2c29c2aa5a45d379fe60.roa (raw, json)
Hash identifier:          MoeX11ueLUdJNs81GTM7ECU0cHW8qapkfBZ3ltdhh8Q=
Subject key identifier:   66:AC:F7:D6:5C:6E:56:F1:E2:02:95:1F:9C:B9:E6:1C:10:E8:0E:87
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08633D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/67ea5cfcf2fc2a37bafa2c29c2aa5a45d379fe60.roa
Signing time:             Tue 26 Jul 2022 01:51:00 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Wed 26 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549693 (0x8633d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2023 GMT
        Subject: CN=67ea5cfcf2fc2a37bafa2c29c2aa5a45d379fe60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:75:fd:0a:1b:1a:95:e8:a5:0e:e7:b0:be:
                    cd:7a:23:d4:71:f1:9b:60:c5:d5:34:0d:65:b6:0c:
                    7f:0f:4c:f1:95:ff:0f:6e:ed:66:6e:3d:68:f3:ac:
                    c5:3e:bb:b9:a7:93:be:c0:17:66:ba:30:a5:02:a7:
                    fa:00:4a:10:f5:5c:74:76:19:57:0a:4f:4f:93:2a:
                    1a:7c:52:ad:a3:c3:33:27:10:f8:8c:5c:ad:24:23:
                    03:90:5a:20:cf:43:a8:89:bb:76:4f:77:49:0b:fc:
                    23:4e:e5:de:a2:73:a5:86:9a:e7:64:eb:d4:d6:fc:
                    33:dc:22:b8:b5:ec:29:c3:9c:38:3c:1f:06:c0:29:
                    bc:8b:9a:52:84:43:68:16:6b:d2:5d:6a:f3:16:6f:
                    4e:07:d4:34:e0:66:18:9a:8b:69:8f:14:39:e3:c2:
                    2f:9d:3c:eb:60:f0:4b:95:a7:40:a6:5e:ae:3e:8c:
                    0c:55:f6:ad:46:48:7a:f3:90:bd:f4:9b:f1:37:31:
                    1d:4e:4f:a0:31:91:98:e8:50:4b:65:8d:f8:f2:6d:
                    a1:25:71:a1:0f:e8:cd:3c:58:6b:51:f3:99:ef:6c:
                    83:20:fd:76:48:ee:c5:70:c6:52:16:a3:09:4c:66:
                    cb:9f:44:39:10:c6:8f:54:ac:4f:03:3b:1c:b1:cb:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:F7:D6:5C:6E:56:F1:E2:02:95:1F:9C:B9:E6:1C:10:E8:0E:87
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/67ea5cfcf2fc2a37bafa2c29c2aa5a45d379fe60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:02:5c:24:2f:1c:5e:d5:46:29:81:37:ad:d1:af:10:24:
         1c:18:2f:64:92:f0:ed:20:a4:83:ca:dd:6f:8d:ed:2a:9e:2e:
         25:0f:85:d3:4b:38:6a:af:0a:02:b0:8d:54:b9:de:16:4b:c0:
         a8:85:c9:b7:53:d1:b9:38:0f:d3:25:4a:78:f5:c6:79:3f:94:
         b9:b8:d0:90:1b:b6:35:63:b3:8c:5b:55:01:26:52:c7:bb:4a:
         05:39:c5:9d:25:ca:f2:31:07:6a:a2:3e:89:19:59:1a:a1:1e:
         f0:03:c8:68:ea:41:db:80:6d:72:44:d4:e7:d6:45:6f:ac:7c:
         41:e1:a3:92:82:35:c4:3a:4b:85:92:09:1e:86:33:f0:e1:5b:
         d2:4e:71:93:f6:e1:a0:cc:1b:70:66:cc:73:12:ea:38:54:62:
         d1:d8:0d:60:5f:81:4c:4a:a8:32:d5:d7:37:ab:a5:98:c9:34:
         92:14:c1:99:84:34:36:73:ea:b4:ea:e2:d1:17:17:20:ad:93:
         68:1f:30:4e:bf:20:b9:85:fb:fb:83:a1:8c:c8:ec:ca:a8:d5:
         79:64:1e:e5:f0:28:0c:a8:d0:19:1a:12:e3:f0:b5:39:7a:2d:
         5f:0b:2a:92:d2:de:4f:4e:22:12:3e:6b:3c:c3:37:28:83:28:
         a1:74:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org