Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6decc9ec231ae7cd490e3fc5e8670cf1c25196d4.roa
File:                     6decc9ec231ae7cd490e3fc5e8670cf1c25196d4.roa (raw, json)
Hash identifier:          MWWfwwDUPTeuXxm1JekKKsx/nPojgStAL9IP3ne7KKA=
Subject key identifier:   77:A5:27:EC:5D:20:60:C4:55:70:9A:26:C6:7B:3F:B5:8E:89:FE:FF
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0CF4F9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6decc9ec231ae7cd490e3fc5e8670cf1c25196d4.roa
Signing time:             Tue 01 Nov 2022 00:12:36 +0000
ROA not before:           Mon 31 Oct 2022 03:00:00 +0000
ROA not after:            Wed 01 Nov 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849145 (0xcf4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 31 03:00:00 2022 GMT
            Not After : Nov  1 03:00:00 2023 GMT
        Subject: CN=6decc9ec231ae7cd490e3fc5e8670cf1c25196d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:1c:fa:b3:12:d1:14:8f:d8:cf:6f:19:39:
                    5f:48:31:21:6a:db:61:24:0c:4c:4c:25:4d:b2:d9:
                    49:34:4e:82:47:4e:74:09:52:d6:40:50:54:4c:4e:
                    12:50:ee:76:de:6c:59:82:a4:be:46:9f:09:06:bf:
                    3b:fb:e7:03:6b:fc:3b:2d:b0:da:09:8f:f8:5d:1b:
                    9f:93:1b:0f:a2:25:d7:3e:66:61:64:7a:96:47:24:
                    95:ff:77:23:0d:e8:a2:5c:9b:ec:63:e7:a3:53:53:
                    26:6c:b3:bb:32:66:41:8e:c0:1a:1f:f7:bf:cc:11:
                    e8:d7:f3:94:ef:1e:dd:9b:2c:00:86:ea:17:81:b0:
                    84:47:c4:89:ce:3a:0c:12:9e:ca:c7:89:da:1e:f3:
                    96:1e:2c:ba:47:63:26:48:ff:fc:71:90:a6:5a:98:
                    49:a7:86:7c:e5:81:c6:59:8d:34:b9:66:a2:04:40:
                    5a:53:4d:f6:b5:35:4b:aa:0d:84:7b:ea:7f:e4:af:
                    3d:d6:66:69:31:b8:9d:8d:c5:a5:4f:4b:09:ad:f7:
                    84:a4:3a:bf:c9:76:f2:b6:bb:f3:42:74:5e:b7:e3:
                    b9:10:d3:5c:b9:f3:fb:71:c7:c0:6b:2c:66:4f:21:
                    5f:0d:4a:d4:0a:b3:bf:f4:a4:45:49:ab:3e:ac:15:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:27:EC:5D:20:60:C4:55:70:9A:26:C6:7B:3F:B5:8E:89:FE:FF
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6decc9ec231ae7cd490e3fc5e8670cf1c25196d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:3c:9e:02:98:c1:4a:da:4e:b9:c8:06:87:f8:b6:73:65:
         10:f8:61:b1:15:b5:57:bf:fe:6d:2c:ce:70:e6:13:e2:a4:6f:
         c4:ac:59:1b:a6:8e:08:af:65:0c:70:a9:75:aa:c4:a1:fc:f3:
         bb:74:cb:53:80:00:17:d4:0b:f4:06:9b:2b:cf:ec:ee:6f:9a:
         f7:b2:18:c3:cf:12:72:1a:f5:34:f4:4e:11:da:e5:55:3a:15:
         89:ee:0b:56:b0:12:fd:78:8a:37:0a:e6:f6:22:bd:6b:bb:39:
         0a:52:04:7c:ab:33:54:cb:de:dd:f4:3b:a2:5c:dd:3a:67:33:
         bc:01:45:2b:66:1e:c9:dd:72:e4:f4:2f:af:ba:3a:c7:0c:46:
         45:06:5b:72:bd:f3:b3:2e:f4:02:91:39:20:c9:66:3a:05:1d:
         cc:c4:44:91:dc:25:6b:45:ca:1e:c0:a1:51:65:4e:cd:49:b6:
         e4:9a:d1:c2:c1:1e:28:1b:b7:d6:f6:32:1f:b0:0f:6b:35:5a:
         9c:d5:98:5b:ef:37:12:f9:53:e4:cf:e2:4d:59:97:1c:8a:a1:
         17:34:ac:85:a0:80:50:8b:5a:23:92:fc:2d:fb:73:70:2f:b0:
         44:de:3a:73:f4:e7:34:c9:08:e6:c4:3e:35:49:71:96:23:db:
         85:bf:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org