Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b31a3444a6f702bfafe312264816ef80e90efffa.roa
File:                     b31a3444a6f702bfafe312264816ef80e90efffa.roa (raw, json)
Hash identifier:          qo61algf4XiaYqud8I+TaPu+FRPM4wVVMzmG+6Nsi2o=
Subject key identifier:   07:24:07:99:6F:EB:38:1B:D1:5F:2B:C2:0F:8C:90:84:46:75:F8:C5
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       026BF9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b31a3444a6f702bfafe312264816ef80e90efffa.roa
Signing time:             Mon 14 Mar 2022 03:30:42 +0000
ROA not before:           Mon 14 Mar 2022 03:00:00 +0000
ROA not after:            Tue 14 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158713 (0x26bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 14 03:00:00 2022 GMT
            Not After : Mar 14 03:00:00 2023 GMT
        Subject: CN=b31a3444a6f702bfafe312264816ef80e90efffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:d0:aa:41:ea:35:e4:06:7b:68:f6:37:52:
                    fe:86:fd:c5:80:73:7f:39:4f:30:2c:dc:c3:27:72:
                    6e:6c:70:a9:e0:af:97:93:03:dc:74:7c:a5:0a:c4:
                    f7:be:24:2b:a5:c5:86:d6:e9:58:43:f4:b6:1c:8a:
                    bd:2f:26:83:42:a3:f4:e8:90:d7:ec:9f:1f:88:63:
                    ec:9d:c2:d1:d2:c8:71:ca:fb:ce:14:2a:ec:7f:d0:
                    a9:72:65:bc:05:48:21:93:c5:76:46:11:a0:b9:cd:
                    72:6a:30:cc:da:02:ce:82:50:9f:dd:e8:95:37:d9:
                    a7:60:ac:32:9c:b0:dc:73:fe:3b:b5:d0:aa:a5:45:
                    4f:a4:47:00:f4:00:48:4d:0c:c8:fd:55:0d:24:9b:
                    f0:74:1b:5c:05:ae:9a:4b:33:ae:28:f5:46:f3:c9:
                    ac:7b:27:cf:34:cb:d6:7b:58:e1:a9:dc:ae:40:c0:
                    93:e8:d6:ca:0c:aa:71:5c:c7:f6:89:27:cb:bf:06:
                    5a:b5:cb:01:12:5f:5c:62:d6:50:dd:0d:0a:ae:00:
                    f8:91:f0:34:4b:3e:25:24:70:6c:d2:e9:07:be:82:
                    74:c5:9e:16:0b:73:26:3c:c4:59:25:ce:28:6c:06:
                    c2:33:98:af:09:d5:f7:e4:c4:07:cf:e7:8d:e6:fa:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:07:99:6F:EB:38:1B:D1:5F:2B:C2:0F:8C:90:84:46:75:F8:C5
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b31a3444a6f702bfafe312264816ef80e90efffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:2c:75:71:10:e8:50:38:e6:7b:da:18:cd:75:d2:13:93:e2:
         7e:df:6a:4d:f1:c8:eb:08:41:09:d0:ec:29:03:31:37:08:59:
         e1:bd:d1:47:60:d9:17:ca:36:5b:78:c2:1e:cc:2b:b5:72:e9:
         5e:98:b5:a4:03:4e:85:0c:fb:be:e1:fa:e4:e9:7e:09:c6:95:
         4c:b9:0f:85:b3:08:9a:d1:01:41:67:01:ad:47:09:74:9b:c3:
         a7:20:eb:03:92:29:b7:f2:60:65:44:9d:df:e2:6f:d6:f8:35:
         e0:0b:61:ab:a1:1e:7a:ce:bf:c3:4a:e9:8c:11:d6:a4:0e:46:
         94:c3:61:19:99:f4:18:48:d1:c8:70:4c:70:65:78:74:c2:db:
         b0:fb:da:b0:ed:d9:2d:76:56:a5:02:e3:91:aa:be:bf:2e:90:
         a9:0d:33:2d:f1:43:8d:06:4c:a8:81:cf:f4:07:56:af:dd:c4:
         29:43:09:1d:4b:b9:a3:91:35:95:ba:56:cc:89:e1:3d:a0:c1:
         d8:53:69:29:93:84:09:c6:da:ba:d0:a2:66:95:8d:79:1f:1c:
         88:1b:de:5c:18:86:cc:ed:9d:1b:94:20:92:16:65:c8:25:23:
         af:d5:a0:ae:2a:40:58:69:1a:24:cc:9c:4a:ba:f7:29:2d:c0:
         91:f0:79:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org