Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/726e474f377dd71902791162d9f7364529219ee7.roa
File:                     726e474f377dd71902791162d9f7364529219ee7.roa (raw, json)
Hash identifier:          wb9Vsxv8QyRbGFvkFSRuH/oDgxYdgGU13EBUiSr1lAM=
Subject key identifier:   97:EC:BD:5A:0A:D3:8D:8D:F3:CB:6D:36:6B:5B:00:6C:B6:3C:66:3F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       067DF0
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/726e474f377dd71902791162d9f7364529219ee7.roa
Signing time:             Tue 14 Jun 2022 04:59:17 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Wed 14 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425456 (0x67df0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2023 GMT
        Subject: CN=726e474f377dd71902791162d9f7364529219ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:ad:87:e8:3a:e7:80:c4:3d:b0:e4:ed:37:
                    76:e4:dc:40:4e:b5:25:88:53:b4:b1:2f:9f:f0:12:
                    07:41:6f:74:ce:61:dc:ce:00:29:76:11:8a:e8:fe:
                    2e:e5:a7:05:9c:8f:93:02:ca:66:2c:50:1b:a8:a9:
                    59:00:20:98:74:ba:e9:61:0f:cf:41:25:44:df:2d:
                    9e:50:53:75:53:ff:0b:a2:89:f1:a1:37:91:d1:c8:
                    9e:e2:76:bc:59:d5:66:74:3e:d7:4e:88:90:12:a3:
                    02:ae:3d:1a:46:54:d8:4e:6d:a7:2d:41:5c:9b:fc:
                    51:0f:75:94:03:08:46:d6:18:92:2a:04:b6:05:ef:
                    d0:e9:f6:6d:eb:08:0a:62:c4:b8:ea:3d:64:a3:55:
                    15:4a:90:98:23:87:e7:29:4d:5d:bb:71:94:d9:1a:
                    ca:10:fa:92:63:80:1a:05:bc:22:79:6a:6b:02:d2:
                    77:c3:b4:aa:83:ec:d9:4f:ec:c0:09:9a:b4:a1:e9:
                    a1:18:f3:f9:ab:33:ef:ec:ad:65:34:26:7d:5a:52:
                    10:f6:81:37:de:17:2c:fe:20:02:36:fb:f6:83:a3:
                    86:ea:d4:d2:6a:83:35:27:e2:3e:41:e9:bb:26:9e:
                    1f:0e:c7:7d:e5:dd:bd:a0:e7:96:03:ae:23:23:a2:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:BD:5A:0A:D3:8D:8D:F3:CB:6D:36:6B:5B:00:6C:B6:3C:66:3F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/726e474f377dd71902791162d9f7364529219ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:93:c6:82:b1:cf:14:c2:f6:d5:7e:c1:3a:c1:f5:ff:57:
         11:d9:00:fd:c7:94:7a:75:6b:88:7f:31:46:ea:02:ed:4e:72:
         1b:5b:29:21:e1:c9:fc:76:7b:60:dc:ae:87:64:d1:da:92:64:
         1c:3f:43:81:97:b0:ab:58:8a:d3:69:d0:98:60:15:66:4d:4f:
         1a:86:0b:d4:e0:25:20:d6:c4:2f:08:62:53:46:ce:8b:8b:8c:
         c7:db:f5:b9:f9:fb:0c:13:73:94:d4:de:c6:a3:9c:b6:34:75:
         ff:e1:ba:d5:d6:d0:e0:c2:64:ab:91:41:89:2f:82:87:1d:16:
         ad:97:f3:d0:4e:ac:be:2f:0c:28:8a:ab:30:de:24:c1:7f:69:
         1c:82:05:e7:e0:4b:af:59:24:87:63:14:1b:f9:d8:c8:4f:f6:
         52:82:e4:90:8f:9b:8e:a9:df:b0:2b:c1:1d:74:69:1f:8a:a2:
         d7:97:81:ea:d3:a4:bc:f1:55:b1:63:f4:c0:ec:3a:c0:b5:2f:
         db:c9:12:81:56:93:bf:28:9a:9b:f2:b3:07:c2:1f:d1:6e:ab:
         17:ba:39:ad:0c:66:f5:2a:81:0b:2b:88:e4:98:a1:24:55:4e:
         0c:0b:7b:dd:06:3c:73:60:ba:55:9c:5e:66:c3:aa:83:14:51:
         44:05:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org