Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/702a3465154328ea96f377c410a0245c5b348c91.roa
File:                     702a3465154328ea96f377c410a0245c5b348c91.roa (raw, json)
Hash identifier:          /b8S3yRcFrJf6gE/WTDGNpN2sAQoe3FbNDNgleJIVnU=
Subject key identifier:   3B:4C:9A:CB:C5:5F:8B:13:A7:E1:E9:E7:44:8C:9B:AD:29:FE:CA:1F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09FFDC
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/702a3465154328ea96f377c410a0245c5b348c91.roa
Signing time:             Wed 31 Aug 2022 04:33:57 +0000
ROA not before:           Wed 31 Aug 2022 03:00:00 +0000
ROA not after:            Thu 31 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655324 (0x9ffdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 31 03:00:00 2022 GMT
            Not After : Aug 31 03:00:00 2023 GMT
        Subject: CN=702a3465154328ea96f377c410a0245c5b348c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:65:06:76:63:31:97:57:e7:97:ad:c1:96:
                    0d:38:f1:87:56:81:1a:c2:a1:68:be:68:fd:e4:4a:
                    7a:5d:61:ed:62:83:60:7f:8f:26:84:c6:50:8d:51:
                    0e:96:a9:2f:dc:a1:6a:6f:54:a7:da:a3:82:24:fd:
                    4c:a3:7f:c5:54:98:1a:ea:02:77:7c:40:53:4b:88:
                    36:00:9e:5d:f8:b0:c9:47:c4:8d:18:73:a9:54:ff:
                    db:b8:50:86:d9:5e:89:ab:be:67:e1:a5:e1:35:75:
                    ff:40:a1:c2:a5:c2:5f:2d:78:08:3b:28:7f:65:65:
                    56:27:83:df:33:12:3c:de:b2:a3:14:15:89:f3:eb:
                    ee:6e:02:1a:8f:a3:d3:fd:90:fe:ae:6d:85:11:6d:
                    95:dd:96:d1:c7:47:41:f1:2a:73:ba:e2:3d:42:5d:
                    73:6a:b9:34:e3:9b:4d:92:fc:16:f7:f7:da:77:fe:
                    0f:c8:0f:15:31:da:21:d5:0d:84:48:fb:3a:ad:57:
                    b3:f8:4e:fa:c6:2d:e2:d4:55:fc:7c:08:f3:b2:c6:
                    a0:e7:a0:cb:eb:4f:54:22:96:57:18:dc:2c:3b:6d:
                    8f:54:62:c7:81:73:02:28:92:3b:fd:37:f9:a0:c9:
                    ee:e2:32:2a:26:8f:21:d7:ea:bd:5e:07:b0:a7:cd:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:9A:CB:C5:5F:8B:13:A7:E1:E9:E7:44:8C:9B:AD:29:FE:CA:1F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/702a3465154328ea96f377c410a0245c5b348c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:4c:dd:82:b0:b5:ce:61:00:f9:5b:73:26:0c:f0:b0:ee:
         dc:05:57:6c:55:c2:09:b8:51:d4:95:d3:dd:5c:ea:f5:20:a7:
         db:6b:fc:48:0c:9a:b1:d4:91:7f:fb:e8:55:80:07:7c:b0:a5:
         ec:94:38:5a:9f:9d:d4:6b:d1:c5:ae:ad:55:d9:d9:bd:b0:de:
         b8:8b:4a:e8:76:06:18:e7:06:8e:95:c9:7c:ff:d7:88:c1:19:
         c5:b3:2f:ae:0e:ef:bf:00:8c:bd:c4:80:ed:22:4b:60:67:fb:
         1f:ec:4b:50:cb:9a:1b:4a:57:13:2f:1f:70:2f:f0:dc:1a:9d:
         b5:b4:4c:0a:ec:95:22:f6:18:e4:f3:35:33:64:68:44:65:f6:
         bd:55:8e:14:03:6b:42:50:28:2e:f9:75:71:b4:c4:07:9d:5d:
         a6:08:43:53:6a:a0:8c:03:67:4c:f1:9c:3a:0d:53:b3:c2:71:
         b4:a0:79:54:87:8b:10:2c:31:ea:af:56:d1:9b:4a:0e:ed:65:
         f1:22:b7:67:64:de:67:c9:47:e0:4c:23:15:11:93:da:24:f4:
         58:25:90:c1:94:fe:05:db:f7:14:5c:c7:a0:b0:ca:2b:9e:24:
         70:fe:db:e7:50:39:8e:a8:45:61:4e:fd:1e:c0:cb:50:7b:a7:
         56:10:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org