Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7c53ef6bc8dc865d216ba10520842d0e6afdb9f0.roa
File:                     7c53ef6bc8dc865d216ba10520842d0e6afdb9f0.roa (raw, json)
Hash identifier:          22UJYdN6E11ZtGmmi7urc9uM8UZaqy6eCCG/Wud3vAQ=
Subject key identifier:   95:53:00:BB:A8:F0:7D:1F:B4:C1:1E:92:6B:D4:25:F0:55:AE:FC:DF
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       056BBF
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7c53ef6bc8dc865d216ba10520842d0e6afdb9f0.roa
Signing time:             Sun 22 May 2022 05:42:24 +0000
ROA not before:           Sun 22 May 2022 03:00:00 +0000
ROA not after:            Mon 22 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355263 (0x56bbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 22 03:00:00 2022 GMT
            Not After : May 22 03:00:00 2023 GMT
        Subject: CN=7c53ef6bc8dc865d216ba10520842d0e6afdb9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:e8:17:94:a2:ef:46:1e:27:28:8d:8e:57:
                    cd:d6:ee:01:4b:35:9d:d2:bd:d8:4f:21:99:20:50:
                    c6:af:24:c0:03:28:b6:b6:b6:59:d5:12:5f:aa:c3:
                    4b:cb:fb:f6:33:18:d3:fc:fa:28:68:9f:81:e4:43:
                    1f:86:6e:e1:b4:db:54:10:79:6d:3a:ea:ea:4c:2e:
                    0b:5f:97:fd:f7:e2:dd:c1:b7:19:b2:46:82:fa:d5:
                    a2:0f:63:02:f3:0b:34:8f:d8:b3:83:75:33:1f:47:
                    c5:da:91:3d:97:8f:85:36:41:63:22:cb:d3:aa:eb:
                    8d:3d:22:c0:1b:4a:5a:b4:11:c4:8a:8c:ab:31:ac:
                    dc:f1:fe:ca:fb:3f:8a:16:18:26:3b:c3:42:cb:f9:
                    19:ea:a1:2f:3a:33:19:14:08:89:57:fb:20:4f:22:
                    dc:11:74:32:8b:33:12:f4:e1:34:2a:75:64:1e:b3:
                    5e:25:8c:3d:c8:27:ea:60:b5:4f:bb:39:cc:6b:3e:
                    98:8e:5b:36:92:9d:f2:67:0b:aa:cf:45:3a:7c:8d:
                    4e:1a:4e:28:12:d8:34:56:53:21:49:56:34:7d:38:
                    ae:d6:6b:51:50:ed:d7:c3:6a:20:e4:bc:15:24:3f:
                    a5:ea:0e:dc:32:df:f0:ba:b2:d9:29:38:76:d4:22:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:53:00:BB:A8:F0:7D:1F:B4:C1:1E:92:6B:D4:25:F0:55:AE:FC:DF
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7c53ef6bc8dc865d216ba10520842d0e6afdb9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:c0:b8:5c:df:48:a9:61:fb:f8:5c:e1:53:62:46:60:0f:
         e2:e1:1a:9d:b9:6a:75:8f:4d:d6:8c:b7:71:59:7a:25:27:a2:
         53:19:2a:23:88:13:be:a6:90:ec:ec:cf:e6:ac:26:ef:24:62:
         45:5f:67:95:ac:65:b1:a0:45:6f:72:cb:c2:f7:49:d9:87:22:
         b1:e9:76:92:d8:7d:64:3a:e3:9b:9f:de:85:9f:91:8a:98:74:
         1d:1f:89:d2:30:a3:e1:9d:cd:e9:c3:d1:cd:bf:c1:28:d3:18:
         5c:4b:83:5e:5f:5e:3d:e7:ab:c9:cc:83:53:74:bf:92:ac:39:
         10:de:84:de:58:83:74:e7:9c:1d:5d:3c:85:e9:39:95:39:22:
         59:8f:73:67:85:0b:82:fe:b7:72:0e:9c:20:13:85:77:61:2a:
         93:b1:03:22:5c:cc:07:a7:22:3a:0a:76:8c:74:b4:43:8b:ad:
         56:9e:8f:18:cd:aa:78:99:0b:47:c7:84:ef:f4:38:cc:5c:ba:
         91:e1:a8:d5:2e:3d:92:61:80:8e:37:09:06:98:ea:4b:e6:d6:
         7b:05:1e:a2:6d:ae:b4:73:cf:a1:86:49:bb:59:a2:2d:5c:35:
         ea:f2:73:fe:cf:4b:dd:95:03:54:c1:3d:01:7e:7c:48:43:70:
         de:ef:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org