Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/85fab7c7c42c3a371501712a134bb58bff81387a.roa
File:                     85fab7c7c42c3a371501712a134bb58bff81387a.roa (raw, json)
Hash identifier:          cAHOqeiFPJxr6iBf5UkpI0r3xq8Yz3SZbk1BgkT1ytI=
Subject key identifier:   16:02:01:C6:3A:F4:12:E4:C0:1F:B4:9A:3D:4E:95:49:6F:33:51:58
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       014D99
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/85fab7c7c42c3a371501712a134bb58bff81387a.roa
Signing time:             Fri 18 Feb 2022 00:17:33 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sat 18 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85401 (0x14d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2023 GMT
        Subject: CN=85fab7c7c42c3a371501712a134bb58bff81387a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:60:79:b4:85:57:56:99:15:64:ee:e7:87:
                    f8:0e:0e:c1:4f:13:00:28:fb:b6:ec:90:d8:a9:77:
                    55:4b:1f:04:ed:64:1d:7e:3e:32:ee:c5:de:65:69:
                    bb:80:d5:17:3c:b9:b7:72:a9:d6:68:e0:76:cd:3a:
                    d3:c0:a1:14:cd:19:d1:0d:c0:ff:22:f2:3f:d3:53:
                    91:42:f7:df:d5:8e:3f:4d:61:32:1f:72:e7:5f:90:
                    eb:0c:43:de:e9:c5:91:a8:9b:dd:b4:e3:34:d6:01:
                    a6:f0:c9:af:14:93:13:9e:0d:3c:cd:31:87:a8:f5:
                    67:1e:f0:8d:f6:39:9b:c1:99:26:31:53:2a:d5:2c:
                    63:86:8e:50:98:ea:26:9a:1b:d7:ed:fe:50:ed:9c:
                    67:ca:02:83:f5:ae:13:2f:73:e0:56:b7:e1:5a:ff:
                    6f:43:f5:5e:e5:eb:73:b0:36:42:97:e9:b1:8e:00:
                    4f:70:70:f3:15:f8:cb:d8:66:cf:61:93:07:1c:f0:
                    f4:23:20:b5:9a:38:55:34:b9:6d:d8:34:7b:04:9f:
                    4a:ff:99:eb:69:bb:49:6a:49:ad:fb:1a:8c:ad:0e:
                    c2:26:8c:37:73:20:44:a6:7c:56:dc:18:e4:96:f7:
                    c5:7c:8d:59:b6:a6:64:0e:af:ce:c9:93:68:52:b2:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:01:C6:3A:F4:12:E4:C0:1F:B4:9A:3D:4E:95:49:6F:33:51:58
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/85fab7c7c42c3a371501712a134bb58bff81387a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:e1:19:38:fb:d3:8e:ab:5d:f3:44:6e:46:f8:af:2f:5b:
         34:cc:e4:6d:82:21:78:16:75:40:ad:ec:18:01:96:82:02:9a:
         2c:ac:33:fd:fe:23:a2:7e:e9:bd:21:48:d1:e0:82:a9:d7:df:
         25:3d:f7:5d:4e:a9:92:07:03:c2:01:f5:34:00:8c:6b:e2:e7:
         78:26:3b:b2:59:dd:d1:90:5c:ed:c2:83:a9:81:13:3e:28:8f:
         e5:ae:e4:ed:8a:52:42:4a:1f:a3:e0:36:e5:b9:88:88:b7:5c:
         b9:bc:b4:bd:6a:2f:cf:4e:88:3b:6f:8d:87:63:05:51:be:1b:
         50:ca:c4:dc:44:31:53:f1:0e:4d:8d:bf:a2:6e:03:24:6a:b0:
         e5:e2:2a:1b:67:2f:fd:4f:05:40:64:0d:de:86:ec:e5:f2:8a:
         fb:5e:5e:42:22:ff:af:48:cc:41:21:18:79:ac:50:9c:ef:3c:
         ad:82:c7:d6:3e:7a:28:ab:ee:33:f3:22:3d:c0:89:60:3a:dd:
         56:4c:82:39:69:ef:36:d8:3e:6b:1d:ed:e1:67:dc:29:68:f8:
         3a:03:90:11:8a:b8:2b:33:5a:96:1b:88:5d:5b:34:49:6a:14:
         86:00:46:6f:b4:16:45:97:d5:59:f5:2e:db:b2:2e:1b:27:72:
         be:5f:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org