Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b33fd45a57f6f11c8a4b96bd8231d4b9001a522c.roa
File:                     b33fd45a57f6f11c8a4b96bd8231d4b9001a522c.roa (raw, json)
Hash identifier:          yQx7WtCbN9qpO/G4h+92+ttAPa4sLCNm49LP0t5NnB8=
Subject key identifier:   F3:8C:A6:FF:D4:B6:3D:26:45:20:2D:28:CA:51:6E:19:A6:7C:80:49
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04D4AD
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b33fd45a57f6f11c8a4b96bd8231d4b9001a522c.roa
Signing time:             Mon 09 May 2022 02:50:17 +0000
ROA not before:           Mon 09 May 2022 03:00:00 +0000
ROA not after:            Tue 09 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316589 (0x4d4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May  9 03:00:00 2022 GMT
            Not After : May  9 03:00:00 2023 GMT
        Subject: CN=b33fd45a57f6f11c8a4b96bd8231d4b9001a522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:4b:36:e8:fa:d4:ef:b0:77:69:5b:22:07:
                    29:a9:0a:a1:fc:cc:52:d6:b3:2e:57:99:b7:db:48:
                    e3:ee:e0:6e:9b:c4:0f:d6:14:b8:d6:69:8b:be:93:
                    d0:f7:b2:68:23:b6:26:d2:fd:10:4c:1b:8f:84:e2:
                    4c:ae:6e:c8:98:c3:56:e1:c2:40:fd:d2:18:df:95:
                    29:eb:8a:4a:36:4a:31:5b:44:c4:2c:ef:61:75:46:
                    aa:87:24:aa:74:3a:64:ec:9c:6e:01:32:d0:03:c7:
                    60:49:43:6d:65:a4:ad:90:8c:16:f3:9d:bf:70:1f:
                    eb:0b:d2:85:93:da:fc:e0:73:92:ad:f3:87:52:ef:
                    94:55:eb:64:13:2b:70:a9:39:be:b6:e2:e3:aa:03:
                    3a:0c:4b:64:5c:7f:b6:85:36:3a:96:3c:59:2e:73:
                    9e:e6:cf:02:07:51:99:e2:66:97:07:51:85:56:2f:
                    29:cc:29:95:5c:6a:02:eb:1d:de:4d:3d:6a:4c:3a:
                    5a:a5:c5:b7:34:f3:51:d4:b6:d3:79:81:ce:fe:fe:
                    c4:3f:8d:5a:0e:1f:2e:2c:d5:31:c4:9f:86:e2:c5:
                    fe:17:a0:4e:e4:bf:be:59:c5:1c:74:0a:52:14:91:
                    03:52:1d:65:6c:e9:9c:b9:56:4f:2a:d8:ae:55:55:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:A6:FF:D4:B6:3D:26:45:20:2D:28:CA:51:6E:19:A6:7C:80:49
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b33fd45a57f6f11c8a4b96bd8231d4b9001a522c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:02:aa:29:b4:cc:66:ef:ee:7c:71:f6:13:37:80:a9:f2:
         86:2c:66:20:94:65:3d:02:17:c4:a1:3e:4a:19:d2:65:c8:79:
         40:58:dd:a7:29:ba:d4:d4:2a:33:6d:f1:7f:b5:b4:51:67:1b:
         45:2f:a6:ca:45:dd:7f:66:0b:90:09:46:43:4e:be:93:99:16:
         4a:18:af:02:ae:02:32:e5:63:db:28:de:2a:9d:a7:44:cd:b8:
         e7:50:9a:ad:91:1c:8a:f4:3a:b0:de:23:d7:02:83:d8:ae:43:
         68:39:dd:f0:76:c8:f5:a2:96:72:bf:fa:43:85:11:49:05:05:
         f7:ef:0e:82:43:d4:a6:69:07:95:67:83:25:75:84:2b:8c:cb:
         fb:f6:53:88:06:c6:51:6c:3a:49:e0:38:3d:f5:de:3e:7b:bf:
         1d:71:65:56:dd:9e:eb:95:5e:82:35:10:fa:a8:23:bd:c6:b5:
         86:dc:1d:5c:02:9a:a9:44:3a:a9:1d:0f:70:67:4c:d1:56:bb:
         15:bc:91:c8:cd:4b:a2:0c:7a:e0:f3:f9:6a:9f:30:90:ed:57:
         78:a2:cd:35:c9:7a:bb:45:4b:eb:02:2b:99:28:26:8e:8d:ab:
         60:b5:f1:23:3e:33:8f:b8:55:76:a1:36:70:49:34:ad:0d:aa:
         b0:d5:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org