Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a0287cbe62815e25c105fdd2c507bfd283f80baf.roa
File:                     a0287cbe62815e25c105fdd2c507bfd283f80baf.roa (raw, json)
Hash identifier:          sJ/Uj2R66lyqy/bHhwLHuhQRbGTpR/gOOyh34AMPW8E=
Subject key identifier:   2B:28:8E:E8:26:20:06:5A:22:3E:B5:DB:CC:35:31:FD:14:03:87:DE
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       07E211
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a0287cbe62815e25c105fdd2c507bfd283f80baf.roa
Signing time:             Thu 14 Jul 2022 03:55:29 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516625 (0x7e211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=a0287cbe62815e25c105fdd2c507bfd283f80baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:e1:0a:3f:18:fc:e7:5a:58:57:aa:a5:e0:
                    82:e8:b7:18:10:c1:aa:ea:56:c9:25:36:c4:dd:54:
                    67:f4:94:65:35:30:10:d3:15:3f:a9:dc:2a:80:31:
                    1e:7b:86:51:1a:5a:48:8a:de:e7:1c:9f:50:5b:7f:
                    6e:dc:e9:66:d0:67:ec:11:56:6e:72:5f:1c:72:80:
                    cd:82:b4:50:bf:82:78:9c:0e:c6:a7:94:be:36:b3:
                    b4:2a:89:e2:71:3a:16:fe:af:d6:5b:e3:4c:af:01:
                    4b:25:ae:87:1d:f1:82:1c:96:12:b0:27:6f:8f:46:
                    b9:e0:f4:93:26:74:d9:44:4a:1e:c7:f6:a8:83:2d:
                    9c:ba:d7:cb:6c:92:13:cd:e6:ce:8c:2e:7a:0c:49:
                    0e:cf:24:e1:20:9a:38:59:30:55:2d:12:fc:63:15:
                    c6:42:32:07:48:30:e0:b5:76:12:65:56:33:c1:5d:
                    74:78:8c:1e:ae:a7:b6:03:ba:50:e5:68:af:89:f9:
                    bc:6c:8b:d9:80:49:a2:73:be:40:7f:f7:9f:02:ac:
                    88:03:82:1e:3e:90:c0:23:4d:6c:93:ed:e1:ae:07:
                    a1:01:bb:0c:e0:07:a6:b3:81:d3:4a:9c:84:28:ec:
                    3e:15:5d:91:f1:8e:3c:9e:24:f5:87:89:36:0b:10:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:28:8E:E8:26:20:06:5A:22:3E:B5:DB:CC:35:31:FD:14:03:87:DE
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a0287cbe62815e25c105fdd2c507bfd283f80baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:ba:41:34:c4:31:55:44:33:32:97:ae:99:a8:5c:c5:1a:
         f2:7e:f7:d7:5c:58:08:b3:f7:27:e2:d3:b3:b3:85:f5:3e:80:
         07:3d:4d:f6:ae:40:6f:54:3b:23:58:19:a3:7f:94:d4:f9:84:
         e3:04:8f:d5:a4:c2:78:85:0d:39:1d:c8:e9:e4:34:69:ea:6b:
         3e:49:30:9d:89:2f:45:24:11:21:d1:d8:93:bf:78:4f:d7:67:
         e1:c9:ca:52:af:95:2e:1f:22:03:17:bb:d6:49:6d:3a:1e:c6:
         f0:fc:06:36:7e:7c:88:ee:27:55:27:e6:ac:03:2b:ba:95:41:
         33:30:df:5b:e3:20:1d:5b:a5:e8:ee:89:5c:94:6e:9e:a6:10:
         bc:fa:08:b3:24:21:61:6a:cf:c5:d7:b9:ba:f7:98:9f:c2:c2:
         b3:ea:b2:b6:fb:06:34:ec:c3:d0:83:d2:2d:6f:c0:19:6e:46:
         33:15:d6:79:60:f9:ed:8f:fa:38:43:35:3b:a0:17:9f:82:22:
         35:cd:96:59:f6:80:e8:21:45:92:ca:db:b9:dc:3d:e1:47:fb:
         8f:06:8d:7b:89:66:67:6d:30:6c:ea:45:af:c0:52:09:ba:0f:
         a1:e3:01:61:f2:6d:ce:38:0d:fd:2b:43:3c:37:2a:c9:ea:4c:
         94:98:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org