Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79801db9f3e14f8680ae7d8206527e451d514895.roa
File:                     79801db9f3e14f8680ae7d8206527e451d514895.roa (raw, json)
Hash identifier:          98JIrSq4EAUwkEJjGatuDWTYhGxMivsWp/f73R8Fa6o=
Subject key identifier:   84:B1:BC:4D:DB:6E:F8:80:95:45:8F:AB:1F:25:78:B9:02:CF:2C:79
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       046C47
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79801db9f3e14f8680ae7d8206527e451d514895.roa
Signing time:             Fri 29 Apr 2022 03:51:43 +0000
ROA not before:           Fri 29 Apr 2022 03:00:00 +0000
ROA not after:            Sat 29 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289863 (0x46c47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 29 03:00:00 2022 GMT
            Not After : Apr 29 03:00:00 2023 GMT
        Subject: CN=79801db9f3e14f8680ae7d8206527e451d514895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:e8:7f:d8:f1:95:8d:03:77:a9:15:87:17:
                    22:1b:f0:66:f8:0f:0e:ed:8f:14:e5:1a:4c:fa:cf:
                    e9:b5:e2:58:ef:03:7c:ad:5e:22:ba:a2:91:d9:97:
                    9f:7e:bf:d1:a2:9a:e4:da:a2:d2:95:cb:76:22:47:
                    59:8e:fe:21:a5:4b:b3:bf:35:d3:c0:43:7f:2c:75:
                    92:ee:ce:05:e4:32:30:7f:d8:1e:00:41:33:39:c5:
                    9f:17:ef:44:ea:33:01:4d:d5:0c:69:94:81:ab:4c:
                    a5:06:72:44:fe:6b:da:a4:ec:b2:6c:04:d5:11:6d:
                    b9:a3:b3:9a:ec:0d:69:cb:48:5c:4b:a9:36:c3:dd:
                    87:e6:2f:88:f7:3e:40:01:90:05:09:b0:d4:8d:9d:
                    9a:00:7b:43:a1:d6:58:54:02:f1:44:b2:31:7d:d1:
                    04:a9:c2:ef:14:48:42:45:b2:d3:b7:5b:6b:4e:ce:
                    9c:01:87:d2:22:cc:a4:38:ab:49:ad:d1:3c:36:0f:
                    a3:47:a4:2c:d7:ff:e6:f8:d7:61:43:7b:ec:a5:9d:
                    7e:8b:d3:ca:f8:01:cf:47:03:68:21:bd:ce:9b:5e:
                    c2:2c:c0:7e:c6:94:81:e0:99:4c:07:b8:b8:7f:7a:
                    05:a7:83:62:da:14:44:ee:b6:16:07:99:9b:75:6b:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:BC:4D:DB:6E:F8:80:95:45:8F:AB:1F:25:78:B9:02:CF:2C:79
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/79801db9f3e14f8680ae7d8206527e451d514895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:14:c3:d4:23:48:b4:f8:87:33:9e:7a:fa:36:cc:75:bc:
         47:e6:4d:86:65:98:44:01:61:bf:62:24:ce:64:8b:c0:77:d3:
         d9:cf:2d:8d:86:fb:28:62:0e:5c:78:e7:d5:b3:4a:6b:07:17:
         69:7e:19:fd:f8:e1:81:34:f5:af:df:9c:ad:fa:52:96:b6:1d:
         02:34:b2:78:35:d0:0b:8b:4b:70:68:00:f9:8d:71:a7:7e:e7:
         3f:be:43:8f:f5:6a:e5:fb:a2:45:3b:03:99:a9:8e:a6:20:5c:
         df:7a:57:35:e2:ac:6a:c6:2a:34:18:63:9f:20:7d:ea:fe:66:
         bd:23:fc:b4:c1:35:df:c8:80:1d:ec:99:95:d0:6c:b9:7d:c7:
         9e:6d:e5:2e:a9:09:36:4e:b0:c8:ef:c1:8c:04:f7:bd:db:16:
         46:7a:ad:38:0f:d7:55:40:56:4e:57:8c:08:0a:19:20:0c:79:
         16:53:77:17:48:9d:cf:c0:a8:84:8a:0d:e7:49:a6:aa:86:db:
         da:a3:5f:e9:76:3c:0b:ff:dd:ba:04:42:b0:10:0b:d8:b6:f4:
         86:46:ff:73:de:2c:f8:3d:56:d7:13:b2:46:f2:a0:46:47:e8:
         dd:98:9d:18:62:e0:30:a5:44:dd:cd:5b:6c:d2:38:21:d2:3c:
         90:3d:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org