Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b25cbc4ad1d14deeccf7c9745f32571a49ff7c7d.roa
File:                     b25cbc4ad1d14deeccf7c9745f32571a49ff7c7d.roa (raw, json)
Hash identifier:          kd0D9XLS+L1CR8HJ9QS71Tl8ds2TjP16qGCkuiKiqJs=
Subject key identifier:   86:E8:57:44:80:5D:E6:6E:66:78:BF:59:F8:2F:AB:46:B5:85:4D:EC
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0A41B0
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b25cbc4ad1d14deeccf7c9745f32571a49ff7c7d.roa
Signing time:             Mon 05 Sep 2022 01:15:24 +0000
ROA not before:           Mon 05 Sep 2022 03:00:00 +0000
ROA not after:            Tue 05 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672176 (0xa41b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep  5 03:00:00 2022 GMT
            Not After : Sep  5 03:00:00 2023 GMT
        Subject: CN=b25cbc4ad1d14deeccf7c9745f32571a49ff7c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:97:15:5c:f8:76:02:ea:ab:4a:40:7c:ab:
                    59:57:f6:51:26:69:29:29:79:d3:28:a3:b3:86:09:
                    46:e6:42:5c:75:67:12:55:85:68:3c:59:2e:e0:e1:
                    b3:db:f2:89:4d:79:7b:95:20:83:60:cb:25:a8:b8:
                    5d:ac:46:47:6c:ad:d1:73:80:d1:27:9f:4f:5c:16:
                    bf:41:65:d2:c1:f2:99:95:86:3e:3e:7a:30:fd:57:
                    31:e8:99:3b:4c:6b:7b:a9:4d:c6:e4:b2:53:fe:09:
                    ec:6e:bf:b0:f0:e8:59:b0:53:02:c6:82:22:a6:61:
                    02:7f:36:f7:0e:52:e9:d8:51:89:c7:23:f3:84:3f:
                    f8:de:55:e3:8d:be:f5:92:33:b9:86:89:c4:45:b8:
                    08:a8:9a:7d:3d:31:73:e1:45:8c:a3:84:f6:af:7e:
                    17:bb:96:ac:29:d9:62:ab:06:62:2a:7e:c0:1e:ef:
                    2a:9b:a2:36:82:44:0c:d4:81:f0:3f:b3:38:70:98:
                    10:10:56:51:95:d5:41:35:90:24:af:95:71:f7:2b:
                    e3:3e:9e:e5:cd:21:7e:33:ac:2d:96:57:df:73:4c:
                    9e:aa:06:9e:b3:ac:6f:2b:cf:53:7e:17:99:a8:11:
                    58:23:d4:30:32:7a:df:49:a5:9c:9a:0c:75:b8:a7:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E8:57:44:80:5D:E6:6E:66:78:BF:59:F8:2F:AB:46:B5:85:4D:EC
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b25cbc4ad1d14deeccf7c9745f32571a49ff7c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:55:d9:7e:c6:f1:31:d6:a5:0c:eb:04:3a:de:44:ad:35:
         0d:a9:55:4b:c5:be:ba:a3:ab:b5:b3:7b:86:73:5b:8a:dc:7c:
         74:d8:fc:68:09:59:db:04:39:60:79:f0:66:ac:64:de:61:66:
         b1:55:39:ae:0c:77:f0:6f:11:b7:8c:aa:ff:b4:4b:e1:49:22:
         49:55:89:7d:f3:93:0c:7a:ac:09:dc:78:5f:17:aa:87:1f:cd:
         bf:0a:27:9e:b7:9f:66:09:6e:43:41:64:84:4a:d0:5d:f2:31:
         dc:7c:7e:d1:d5:f9:70:9e:82:5d:f5:3a:9c:d8:b8:fb:ac:cc:
         bc:1e:b7:bf:ff:21:b5:19:9e:13:c0:40:4e:07:4c:02:a3:ba:
         76:fe:14:52:cc:72:94:6c:62:6a:21:37:8c:fb:45:f6:4e:48:
         72:e9:31:75:55:4b:76:25:77:a8:b3:67:e3:ec:bd:da:38:6b:
         c3:75:57:30:af:5a:27:90:97:ad:e5:4d:84:7d:ae:14:38:c4:
         ac:b8:0a:31:77:e8:c8:1b:94:76:ca:3f:0c:ba:9c:a0:57:dd:
         c8:68:2a:96:f6:e7:16:b8:a0:8c:7d:55:ff:95:71:6f:be:68:
         f6:05:eb:08:7d:ee:c4:c8:68:f0:46:d9:b0:e3:3d:63:06:2d:
         61:16:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org