Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8bcb178b5cbd6a7f078b77c2d35a1d3a16fef5f.roa
File:                     c8bcb178b5cbd6a7f078b77c2d35a1d3a16fef5f.roa (raw, json)
Hash identifier:          aNZvYZGPutu44hkhVmuMgrgygobshnbeGHkkRBFSm/I=
Subject key identifier:   3A:D6:D7:75:65:0D:64:65:24:58:DF:1F:38:1F:7A:ED:89:E5:81:C6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       088096
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8bcb178b5cbd6a7f078b77c2d35a1d3a16fef5f.roa
Signing time:             Fri 29 Jul 2022 01:59:45 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Sat 29 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557206 (0x88096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2023 GMT
        Subject: CN=c8bcb178b5cbd6a7f078b77c2d35a1d3a16fef5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:0a:21:f4:da:5b:02:a4:60:a8:73:40:f0:
                    7f:fd:c8:ec:85:57:10:7e:4e:c9:5a:96:a6:75:af:
                    f5:c1:83:49:d1:c5:16:3e:4d:ff:de:22:34:4b:c0:
                    7f:1b:28:ec:5b:4f:9b:2a:75:35:c6:f6:fd:14:7e:
                    70:62:cb:6a:21:53:cb:26:40:15:81:2e:f5:09:2d:
                    c8:c3:e0:a4:36:7d:0a:ab:cf:1e:0a:73:97:68:fe:
                    4e:13:af:9a:46:85:0d:96:25:00:29:66:1a:c6:7b:
                    82:f8:87:d6:fd:c9:e4:1d:6c:ff:e9:af:1c:e7:00:
                    9d:09:89:fd:80:3d:eb:f9:e4:ca:10:0d:63:08:57:
                    64:9e:8d:81:9c:3c:59:d2:f6:74:8a:96:a5:1b:07:
                    bd:29:6d:99:18:fd:66:29:50:1c:7c:fb:e5:02:25:
                    a1:c7:f4:0a:81:e3:bb:21:01:fd:93:70:01:4e:a2:
                    51:b3:d2:56:0c:bd:6a:40:b6:0b:73:90:f2:38:ae:
                    d0:90:b2:e5:5f:35:01:12:98:78:61:eb:c7:28:de:
                    78:02:ab:de:d4:9e:cb:44:34:70:95:49:66:aa:0a:
                    c6:c2:81:09:2a:bf:46:bf:bb:1f:e0:f9:c3:e9:11:
                    88:2f:dd:3c:bf:4b:9d:63:04:0a:91:cc:31:4b:da:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:D7:75:65:0D:64:65:24:58:DF:1F:38:1F:7A:ED:89:E5:81:C6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8bcb178b5cbd6a7f078b77c2d35a1d3a16fef5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:fe:b2:8d:5f:7b:9a:8c:7f:c9:5f:a2:13:79:16:88:07:
         b5:ec:d3:de:b1:36:e5:87:2b:b0:8f:6f:da:23:4c:98:32:31:
         d8:0a:af:cb:16:be:9d:75:ea:d3:e4:3b:f3:a7:56:4d:b1:66:
         c9:1f:5c:ab:2a:21:09:d1:71:58:56:4d:03:77:8c:ca:92:f1:
         10:ac:88:ab:d6:0f:6e:c7:b6:de:00:b9:b3:6b:af:c5:14:a9:
         c1:0c:fe:b7:6a:87:80:92:a3:c1:0c:35:2f:bc:62:df:12:1f:
         b1:48:fc:e8:ab:e4:04:56:84:57:88:d4:7d:f0:97:98:c4:cf:
         a7:10:59:0d:31:d6:14:b4:4e:db:2e:67:8f:15:32:3d:2f:99:
         b1:20:de:0f:46:30:75:e4:77:61:8e:be:1f:db:f9:6e:b5:d4:
         80:a6:d1:f1:be:5a:9e:b1:59:33:f5:2b:c4:f0:4e:66:0e:68:
         29:8a:82:70:fe:2f:7e:53:5d:9d:19:12:db:24:73:45:98:ca:
         35:b6:65:22:43:7b:6b:0d:82:39:ef:7c:5a:4e:51:bd:f4:9d:
         26:6b:d1:d7:1a:b5:2a:a5:e1:61:ce:4c:52:a7:b6:d7:82:93:
         b9:85:f7:01:63:c2:6c:b1:cd:08:3d:3f:47:cb:ea:c9:9d:9f:
         22:5d:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org