Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b610990c895d34c5e1504513e57f6c29e5a3ffd9.roa
File:                     b610990c895d34c5e1504513e57f6c29e5a3ffd9.roa (raw, json)
Hash identifier:          EWVrzSwjxFVOpSJ381c3DHC+l2HgwMf5SSJHxa0nvL8=
Subject key identifier:   2D:7E:83:D0:69:36:B5:77:6B:FB:74:CE:39:24:9A:A0:F2:30:19:8C
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       047FCD
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b610990c895d34c5e1504513e57f6c29e5a3ffd9.roa
Signing time:             Sun 01 May 2022 01:42:21 +0000
ROA not before:           Sun 01 May 2022 03:00:00 +0000
ROA not after:            Mon 01 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294861 (0x47fcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May  1 03:00:00 2022 GMT
            Not After : May  1 03:00:00 2023 GMT
        Subject: CN=b610990c895d34c5e1504513e57f6c29e5a3ffd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:27:b0:a2:5f:f1:bc:db:80:8e:77:c8:aa:
                    84:35:09:b8:7f:4a:39:81:96:e2:4c:62:44:1b:38:
                    bf:f0:1e:6d:de:a1:62:06:6f:d0:44:6b:79:03:0a:
                    fe:c5:3f:97:c5:c0:50:cb:15:da:36:89:8e:00:68:
                    07:bd:4f:b4:19:2f:c5:44:b3:99:dd:39:e4:32:80:
                    1f:9d:ae:95:d1:97:04:31:6d:6d:bb:3b:89:53:4b:
                    b4:14:8c:bb:d7:dc:ec:18:e6:43:c4:fe:90:03:5b:
                    2d:30:da:d7:8c:4d:e8:38:90:4c:02:df:ec:82:f5:
                    6d:dc:7c:8c:40:eb:b3:86:7c:59:d1:1d:61:fe:34:
                    68:ad:66:52:6b:2b:cc:e8:94:ae:9e:72:35:2d:eb:
                    0f:d8:ed:f5:c6:0c:a4:e7:ea:b4:73:d6:99:cd:80:
                    fc:74:c6:f3:6f:a2:03:05:53:aa:da:6d:9e:bc:fe:
                    64:10:73:5d:3e:8e:f8:86:57:13:eb:ec:5e:dc:81:
                    71:38:e7:a7:79:3a:02:77:92:0b:a8:b8:c9:1a:eb:
                    4d:4d:8e:d9:44:e2:e2:8c:29:e4:f0:fd:6e:df:30:
                    3f:88:12:b4:03:5d:be:1e:20:f1:04:fc:e2:45:6c:
                    22:47:25:8c:0e:05:73:19:48:ba:a2:b5:a2:3b:b5:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7E:83:D0:69:36:B5:77:6B:FB:74:CE:39:24:9A:A0:F2:30:19:8C
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b610990c895d34c5e1504513e57f6c29e5a3ffd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:1b:93:2f:b0:b3:eb:8c:f2:c2:db:b3:66:5c:64:3f:92:
         5e:7f:fc:0e:a7:0c:f0:d0:22:d8:76:60:09:0a:b5:70:dc:a6:
         39:01:e0:cc:f4:e4:30:85:f6:f9:cf:81:72:13:b8:4b:9b:7e:
         f0:e1:88:24:22:6e:d2:a4:3e:0a:2a:37:7b:af:73:f4:e1:af:
         9d:72:c6:6f:8f:e3:0d:bb:f2:54:bb:0e:a5:32:16:c4:52:c4:
         5b:31:7e:24:52:5f:10:ac:74:19:c2:87:f6:dc:cd:36:70:a2:
         cc:a5:75:24:ce:dd:44:e9:fd:f9:db:96:a0:71:47:65:75:e9:
         d8:e2:72:a9:97:2f:30:c7:30:7c:04:5f:5d:4c:31:fe:8f:85:
         68:55:71:6a:8e:4b:8e:ae:74:a9:6e:d6:fb:60:a0:89:2c:fd:
         0e:00:79:96:1f:e0:ae:61:4c:e6:8d:4f:7e:96:de:33:03:f4:
         df:b8:b6:6a:4c:27:f5:18:69:28:0f:3e:14:89:d1:85:e1:e0:
         a6:a5:43:6e:c5:c3:96:f6:08:65:7d:5c:b5:bc:2d:76:43:76:
         4b:21:a4:bf:2b:8f:a5:2e:26:50:31:0b:17:6c:97:af:45:69:
         08:7a:da:be:85:97:53:b3:57:94:05:b3:d6:0a:df:7d:f7:27:
         d2:7d:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org