Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9240af1a08888437243a180ed155c32508b073e8.roa
File:                     9240af1a08888437243a180ed155c32508b073e8.roa (raw, json)
Hash identifier:          2wlUIgZuG/WROulHvalTssJ0H2Qh/SgcYPkIH5AhU7E=
Subject key identifier:   84:6B:50:9E:84:60:49:B4:C1:7B:67:82:70:28:AC:BA:D1:9A:11:F7
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C5164
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9240af1a08888437243a180ed155c32508b073e8.roa
Signing time:             Tue 18 Oct 2022 04:57:40 +0000
ROA not before:           Mon 17 Oct 2022 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807268 (0xc5164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 17 03:00:00 2022 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=9240af1a08888437243a180ed155c32508b073e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:20:f9:40:34:bf:d7:ff:07:f9:43:e2:d8:
                    61:fe:63:71:3b:15:74:0f:52:af:de:33:55:cd:5a:
                    e6:06:6c:94:f4:89:ac:f8:f4:f8:6d:e9:54:89:3a:
                    1d:d3:51:33:76:7a:71:3d:0c:f9:63:cc:ba:ca:d1:
                    c0:fa:5d:33:2c:e9:aa:4f:a8:e5:51:0a:e8:1a:9b:
                    3c:9f:8c:40:f7:45:29:c3:c5:f1:c5:ed:6f:ac:50:
                    1f:c3:89:90:79:83:93:aa:a6:c3:1a:f0:d5:78:e4:
                    88:6a:4a:43:61:f1:ec:51:8e:c4:c6:1a:92:09:12:
                    d8:b9:e1:ca:4f:49:40:f1:e2:33:e5:21:ce:da:6b:
                    7d:be:35:01:38:86:c6:9c:8f:21:d0:f8:cf:b9:00:
                    6f:92:35:29:b8:a1:e1:1f:e4:ee:71:f2:07:17:07:
                    80:17:41:b0:b4:b8:1e:49:84:cf:29:4d:f0:8a:53:
                    b9:9e:1d:b4:67:91:3d:8c:33:a0:92:62:66:bb:cd:
                    d3:96:71:8d:f1:88:76:bd:63:b2:99:78:8d:01:65:
                    f6:5c:38:d9:b8:ea:78:3e:a2:8a:62:c8:63:90:d4:
                    d7:6f:02:c1:7a:35:2b:ca:f8:ae:80:f3:91:fb:4a:
                    80:9a:ac:ac:1b:39:7a:42:35:5e:a3:48:70:09:73:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:50:9E:84:60:49:B4:C1:7B:67:82:70:28:AC:BA:D1:9A:11:F7
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9240af1a08888437243a180ed155c32508b073e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:16:d4:e7:10:42:fe:87:f0:d5:10:3c:5c:48:b6:be:72:
         07:18:e7:71:59:f1:d3:41:a5:46:d9:2d:92:fa:61:b1:88:3e:
         4e:71:3c:72:42:fe:87:e5:eb:28:72:46:5f:cd:76:be:92:4c:
         cd:b1:33:7e:3f:b1:4f:78:e2:2d:98:40:ab:b4:77:c1:85:2a:
         83:d9:e5:e6:e6:c3:b0:de:9e:aa:20:ad:04:86:64:2d:16:49:
         27:0d:82:15:29:be:ba:34:44:77:82:f5:52:49:ee:81:50:1e:
         94:64:46:3a:a0:69:87:73:06:f9:50:07:30:24:10:ae:6d:49:
         fd:d9:f5:8f:67:46:c4:85:62:c1:18:9c:64:fc:e3:e3:27:a5:
         21:b8:60:59:bc:15:ff:15:f9:e6:67:3a:8a:75:9b:95:75:b4:
         fa:7c:42:07:25:3e:e9:75:37:03:dc:7d:c1:1a:2e:39:5e:61:
         f8:c9:91:34:ef:5f:84:f0:d0:ff:ac:2d:04:5f:a4:f5:88:e1:
         1a:3e:b3:68:b9:70:3c:91:b4:cb:30:96:32:39:e6:9d:d7:7f:
         a9:2e:d5:ed:b6:c8:bc:ca:96:fa:47:5f:97:9f:6e:13:40:d1:
         41:3b:79:08:1c:2c:d3:63:37:a9:2d:3c:c7:18:e8:98:77:41:
         53:1e:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org