Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8f1855a8003810457d354fd30d5499cca49e61a6.roa
File:                     8f1855a8003810457d354fd30d5499cca49e61a6.roa (raw, json)
Hash identifier:          tJeCjw6MjtfdBG1esAeyWFvfeGS5z/E+lcG88Au19pw=
Subject key identifier:   ED:51:C8:7C:E5:1A:15:7E:F4:E6:C0:49:68:E5:5A:77:C9:5A:58:DD
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01E6B8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8f1855a8003810457d354fd30d5499cca49e61a6.roa
Signing time:             Thu 03 Mar 2022 05:20:03 +0000
ROA not before:           Thu 03 Mar 2022 03:00:00 +0000
ROA not after:            Fri 03 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124600 (0x1e6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar  3 03:00:00 2022 GMT
            Not After : Mar  3 03:00:00 2023 GMT
        Subject: CN=8f1855a8003810457d354fd30d5499cca49e61a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:2a:92:ee:b0:55:33:ff:49:71:b0:c6:de:
                    b2:e5:9c:bd:d6:5c:2e:76:f9:92:34:79:46:26:cb:
                    e8:64:bf:10:58:52:89:15:c7:1b:7b:f5:88:65:44:
                    a6:d5:6a:1f:db:2b:14:93:05:cb:fc:86:f3:6b:a3:
                    4b:5c:2b:c9:61:f4:71:a4:53:3f:3a:cd:c8:a1:bc:
                    ee:59:58:3d:33:0c:29:aa:99:d7:83:c7:b0:cc:52:
                    db:fb:57:0e:53:b7:33:ad:ec:63:fd:4c:68:8e:71:
                    8b:c3:76:c7:11:86:9e:1e:35:0c:c5:4a:f1:bf:81:
                    9a:5b:50:d1:af:ac:ab:f1:0d:48:d0:f6:47:5a:ed:
                    f9:a4:2c:83:f5:a0:22:44:3f:b6:71:82:92:f0:f2:
                    4e:b2:34:0a:d2:16:8c:bd:f1:27:7c:3f:34:be:bf:
                    17:8a:46:90:a4:38:0e:68:8a:8a:df:f0:8a:01:e2:
                    6d:44:53:7c:4c:ec:c4:86:86:0a:f4:8b:25:48:25:
                    4b:b6:d7:65:5a:51:f4:91:f8:5d:49:13:99:1d:30:
                    31:6e:6a:39:7d:63:65:00:d5:90:bf:90:55:dc:1f:
                    c8:05:31:6c:01:0b:ea:a8:57:e5:d7:c9:51:53:58:
                    ac:b0:8a:25:53:92:f2:51:03:ec:89:27:ae:0d:c7:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:C8:7C:E5:1A:15:7E:F4:E6:C0:49:68:E5:5A:77:C9:5A:58:DD
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8f1855a8003810457d354fd30d5499cca49e61a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a4:f0:86:e7:69:ac:f4:f2:99:05:cb:4b:dd:91:7c:4e:83:
         72:34:99:17:3b:0f:1e:21:b2:60:59:23:a8:26:25:51:84:17:
         e4:2d:37:f4:3c:41:e4:2a:e7:ca:ed:c5:35:d8:f1:90:eb:47:
         6a:5f:48:ab:7f:92:c0:ea:00:8f:30:52:58:aa:02:ba:ec:a9:
         25:40:0a:e8:a5:c2:1a:7c:7a:6c:03:33:dd:ad:e6:8c:27:f7:
         52:89:3b:f2:af:4a:b7:f3:fd:27:8b:af:78:c4:38:c5:2e:be:
         3d:22:1d:8c:5d:e6:c1:c9:fd:81:fa:24:09:9b:cb:38:c2:6f:
         13:51:19:02:60:9a:6b:07:f5:54:fe:82:90:c0:78:9e:76:96:
         cc:9c:fa:e2:ee:25:f2:bd:bb:48:2c:15:c0:7c:f2:76:40:7e:
         30:d3:cd:63:79:33:c7:42:6b:dd:3f:b5:98:03:f1:a8:f7:64:
         ef:4e:79:6e:1a:c6:e7:b5:1f:08:23:ae:a5:e8:59:bb:44:43:
         8d:e2:16:6a:3b:58:d7:97:f5:3e:d4:0b:5e:f4:07:f7:cb:66:
         e7:13:92:a0:6d:44:ee:9c:09:6f:b8:dd:0a:42:5d:25:c3:5f:
         61:f9:f3:02:29:6f:ab:ff:65:7e:b4:93:08:c2:b8:57:80:dd:
         91:cd:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org