Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c62ac593acabafed7d9b0dced8d43013ad03a2e7.roa
File:                     c62ac593acabafed7d9b0dced8d43013ad03a2e7.roa (raw, json)
Hash identifier:          BWK1nYNH1vKY7hI66WZ1E9RdP0CtLT989dbJphRfOHI=
Subject key identifier:   E2:10:38:8D:DD:38:A0:4F:C5:1C:0E:EC:7F:E6:09:B0:0E:1A:53:AC
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0583B1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c62ac593acabafed7d9b0dced8d43013ad03a2e7.roa
Signing time:             Tue 24 May 2022 01:34:13 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Wed 24 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361393 (0x583b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2023 GMT
        Subject: CN=c62ac593acabafed7d9b0dced8d43013ad03a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:f2:72:54:b7:88:e5:ca:95:3d:63:2a:77:
                    c2:ed:dc:87:4a:23:50:eb:cd:4d:6d:56:62:3d:85:
                    60:0b:17:e6:b8:9f:c8:59:63:42:1c:0e:78:8b:ef:
                    f0:6a:4e:e5:ee:35:88:f7:da:1e:48:74:9e:3d:5a:
                    7f:44:b3:3f:b8:fc:9c:71:83:41:1c:d2:55:e0:04:
                    79:31:36:aa:4f:ec:7f:df:3f:f2:77:86:6d:35:e0:
                    ac:a8:bb:72:21:99:a6:57:59:8b:2e:ef:b5:e5:72:
                    c8:57:95:5d:db:f7:b8:43:53:87:d2:d2:3a:b3:07:
                    50:71:20:7b:24:a9:c1:16:99:55:58:4d:54:e6:52:
                    f0:26:c7:73:64:78:0a:f9:d3:89:03:d9:e6:07:8d:
                    b4:53:8d:5f:ae:68:81:31:f0:6b:7e:f9:f1:d1:99:
                    37:e3:c8:64:f7:78:72:03:6f:6b:62:f2:04:8f:11:
                    e1:ad:6f:bb:1f:59:b0:07:9b:36:90:5d:cd:5a:a5:
                    f8:05:26:07:4b:1c:85:26:8b:e5:20:0a:d6:9a:94:
                    ba:94:d3:2e:43:66:f3:69:b7:e8:de:04:af:b8:be:
                    2a:3c:23:19:91:0f:e4:14:cb:38:fc:8e:a6:dd:93:
                    53:1c:06:01:8e:64:80:42:7b:71:79:7f:45:7c:31:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:38:8D:DD:38:A0:4F:C5:1C:0E:EC:7F:E6:09:B0:0E:1A:53:AC
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c62ac593acabafed7d9b0dced8d43013ad03a2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:5e:95:13:63:a0:b7:10:1f:1d:63:cd:49:02:99:f9:b8:
         bf:25:15:5f:c8:75:cd:0b:09:19:8a:19:8f:2d:a0:56:5d:7f:
         ea:af:ce:80:62:91:c6:fc:05:82:2d:eb:8f:9f:01:66:c8:b7:
         f9:c4:2c:f7:4b:05:dd:36:8c:81:16:0a:76:d5:fa:2c:02:53:
         ba:30:56:16:9a:2c:49:71:96:ed:2b:e3:07:0b:45:ba:10:13:
         fe:f8:1a:42:0f:51:fb:54:12:ee:a8:3d:d4:3b:5d:94:2a:fc:
         a6:6b:a5:33:ae:34:4b:d9:2b:d9:a7:18:0e:48:67:34:4e:0c:
         a5:03:a2:ad:e1:5d:bd:9b:3b:9e:8e:ac:b5:1e:8e:dc:d2:25:
         9c:a5:aa:95:24:2c:58:09:ad:3f:ec:b3:e3:5a:ac:9a:08:cf:
         df:28:35:5d:37:e1:fe:6f:0f:19:e4:2c:24:a5:38:e8:fc:a8:
         95:0e:da:82:1d:76:66:0d:88:cd:a4:42:8e:e4:28:b4:08:0c:
         9e:0e:7b:20:f7:67:fd:4a:c6:20:94:cb:f6:73:3b:3d:d9:58:
         2a:9a:82:d0:ec:33:97:ba:94:af:ef:d4:8d:43:d3:50:43:bb:
         16:89:85:29:fc:e3:f0:50:11:db:1c:3c:e1:de:2d:75:7b:d0:
         69:5e:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org