Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/915bd35ee6735b8d8c1d3589f3f74d5cc2d603ff.roa
File:                     915bd35ee6735b8d8c1d3589f3f74d5cc2d603ff.roa (raw, json)
Hash identifier:          YSkoNcA+qohHL9PPHJCO7nbXTJWUE1NONutwjHQDoiM=
Subject key identifier:   BB:01:A6:4A:76:29:44:A6:68:7A:27:6E:1B:85:85:BA:46:CD:6B:BA
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       07B41B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/915bd35ee6735b8d8c1d3589f3f74d5cc2d603ff.roa
Signing time:             Sat 09 Jul 2022 02:39:21 +0000
ROA not before:           Sat 09 Jul 2022 03:00:00 +0000
ROA not after:            Sun 09 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504859 (0x7b41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  9 03:00:00 2022 GMT
            Not After : Jul  9 03:00:00 2023 GMT
        Subject: CN=915bd35ee6735b8d8c1d3589f3f74d5cc2d603ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:71:7d:a3:8c:b4:35:75:97:80:18:8c:1e:
                    56:ed:5f:4a:40:73:78:23:00:63:b8:b6:08:c5:24:
                    0f:14:b8:9b:bd:02:84:34:e3:ca:ad:53:73:49:c9:
                    bd:1a:e2:8f:ef:85:2d:1b:af:fc:2c:bd:2e:31:e9:
                    53:0d:90:c6:49:6a:f0:6a:13:e4:66:1a:f9:20:26:
                    29:2c:d4:09:c3:1e:34:f6:b7:c0:11:f5:0d:ee:b6:
                    06:e1:08:17:13:df:2c:75:6f:d1:86:f0:31:22:4a:
                    cd:e0:98:4a:5b:3d:e0:ed:b7:9d:7c:9b:1c:8b:20:
                    fc:e0:4e:04:b2:71:d8:8a:8c:15:6e:8d:a0:79:50:
                    bf:7b:dc:41:3a:49:3f:f7:75:df:9b:50:e6:ae:18:
                    19:69:fb:ad:ad:ff:ad:8b:45:ce:52:d7:2a:25:23:
                    45:d5:71:7d:40:99:0c:ef:e2:8d:ca:11:06:de:12:
                    5a:f8:00:d1:47:51:37:98:3e:30:15:47:25:ab:3a:
                    07:43:34:43:76:9a:ae:b9:2a:07:be:91:17:fc:94:
                    ac:3c:3d:49:9c:c2:7b:89:3d:74:a0:c6:11:2f:fc:
                    4b:6a:7b:5d:c3:a7:7b:94:70:47:6a:6e:a5:fd:1f:
                    21:86:b9:8a:b9:eb:11:71:d1:79:2e:2a:06:9a:d2:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:A6:4A:76:29:44:A6:68:7A:27:6E:1B:85:85:BA:46:CD:6B:BA
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/915bd35ee6735b8d8c1d3589f3f74d5cc2d603ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:22:59:10:f6:3d:fd:f9:f5:7c:6e:3f:81:db:f8:53:2a:
         8b:97:51:67:64:af:90:f3:b3:8a:e6:2d:89:47:e3:7a:cc:75:
         ef:e2:fb:22:41:71:13:b8:9d:3b:1c:e3:b0:d0:4b:ec:82:e4:
         67:c8:e2:04:b2:c4:58:2f:c6:09:6c:ca:6f:8d:d3:2b:46:7b:
         a7:52:7c:28:27:3b:f5:69:e1:ff:8b:c0:f6:12:6b:03:ef:2d:
         d5:1b:46:94:f9:ff:3f:16:75:c4:a2:ef:bb:20:17:a4:17:d6:
         26:82:9b:9e:f1:2e:57:18:13:d5:82:da:1b:bf:17:54:dd:d7:
         2c:94:d2:fb:eb:1a:d4:94:06:fd:de:b2:ef:b4:04:c1:19:c0:
         36:87:ea:b5:5a:e1:09:50:45:3b:d0:7f:53:7c:b7:81:99:4d:
         b2:ba:07:36:23:e2:56:68:79:82:0b:0e:2b:e0:ea:2e:ab:b8:
         6a:79:12:4f:32:31:dd:00:a7:80:03:78:ce:31:47:df:df:7d:
         4b:e1:37:88:f2:50:2c:a9:51:23:1e:f0:e5:46:69:96:7d:de:
         05:01:3c:15:4f:87:06:8c:ea:82:1b:45:2a:32:e2:c7:3a:2d:
         3e:eb:fb:cd:22:f1:34:9c:a9:0f:bf:52:15:1a:95:95:45:c0:
         60:6c:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org