Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b8488d7e3d84b53a381c8c4ff869436ce6143ce7.roa
File:                     b8488d7e3d84b53a381c8c4ff869436ce6143ce7.roa (raw, json)
Hash identifier:          jJYYi+Tbbq3oyUFinzGORYjXmwPPKyFpyRtyWBkGTkA=
Subject key identifier:   2F:F7:F1:64:4C:FD:7F:BE:A0:AC:F7:63:E3:D4:95:A6:D4:60:EE:26
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C22A9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b8488d7e3d84b53a381c8c4ff869436ce6143ce7.roa
Signing time:             Fri 14 Oct 2022 03:47:18 +0000
ROA not before:           Thu 13 Oct 2022 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795305 (0xc22a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 13 03:00:00 2022 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=b8488d7e3d84b53a381c8c4ff869436ce6143ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:f1:7d:04:b0:a7:6d:4c:c3:8e:ef:01:67:
                    05:65:0a:b6:67:70:bb:8b:27:35:75:1c:eb:1b:40:
                    ed:4d:a3:3f:ef:7c:df:f9:1f:23:a5:40:03:27:18:
                    d2:6a:e8:d5:87:da:61:92:a4:4f:91:3b:60:68:c8:
                    d6:c6:de:4d:c9:92:5f:5a:b6:7b:a7:cb:4a:f1:ed:
                    80:73:63:86:db:7e:f9:20:a2:75:ba:8b:57:3e:d7:
                    ae:19:2a:bc:b7:e9:8a:24:88:e9:05:2b:a2:b2:e2:
                    9a:c8:a0:3e:1e:9a:b8:7c:90:92:88:a4:87:08:aa:
                    61:30:0a:77:b9:99:2a:50:1e:4b:a7:84:c9:98:42:
                    2a:9c:74:01:65:62:32:40:05:28:98:8d:8c:47:e6:
                    44:46:40:08:10:04:0c:87:a4:e2:5a:b0:e4:e7:49:
                    88:22:6c:62:37:99:3a:52:0a:d0:28:f4:34:e5:c3:
                    1e:e5:4c:66:d3:de:7c:14:13:c9:7f:75:72:72:e8:
                    61:2a:32:67:82:15:c3:6e:c6:88:c6:86:35:b3:dd:
                    0d:3e:13:9f:8b:68:c1:21:ef:d8:68:cd:96:66:02:
                    f3:93:c3:7c:bf:9f:eb:27:3a:d1:11:79:ff:3c:03:
                    12:ad:92:ab:f5:d9:5b:d1:a2:ea:70:42:7b:08:91:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:F1:64:4C:FD:7F:BE:A0:AC:F7:63:E3:D4:95:A6:D4:60:EE:26
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b8488d7e3d84b53a381c8c4ff869436ce6143ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:43:7c:e0:1e:f3:b3:8f:5f:1d:0f:1d:90:f9:2d:39:50:
         16:66:df:dd:8f:c5:d4:a2:f5:58:0c:15:fc:dc:58:6d:b9:81:
         a8:f9:59:c8:5d:ec:e3:48:ed:98:8c:89:39:9d:7e:a7:e2:55:
         02:3e:27:12:db:3e:4c:f6:4f:1e:38:b4:ee:57:f5:44:ce:9b:
         ab:1b:87:1c:34:20:39:56:a2:b1:d8:07:47:22:18:40:91:5d:
         3c:2e:bf:4e:ea:75:f7:7f:c0:26:22:5b:e8:e5:7e:43:7e:1a:
         71:a4:76:21:03:1e:a1:d5:ce:99:82:45:37:ba:c9:5d:45:02:
         92:a9:b3:93:d1:fc:70:9e:2d:cc:ac:38:46:81:07:c1:d1:0d:
         3d:6e:93:98:bd:d8:4b:b8:a7:1f:5f:b3:de:27:c7:0c:dc:de:
         a0:a9:34:77:1f:05:d2:00:d5:da:c6:66:60:98:d5:95:c0:3c:
         20:ac:f1:92:6d:c1:3d:e6:5a:d6:53:04:c9:21:ab:20:f5:c6:
         d1:2c:90:83:aa:55:e7:2a:5a:5f:3c:5b:56:7d:c8:59:08:30:
         89:88:1d:79:cb:09:23:4f:a8:1d:95:0c:25:12:2d:b4:2b:78:
         74:81:b1:fa:cf:ab:44:9d:95:d4:98:05:47:b2:a6:b4:97:a0:
         ae:a2:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org