Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8cbd6975af93d98877dfae5d0e185a317cb8d8a.roa
File:                     c8cbd6975af93d98877dfae5d0e185a317cb8d8a.roa (raw, json)
Hash identifier:          zbMwlYJElTYBwPOkgD7fCrMnh1VzxZKsKDc4UcymjHI=
Subject key identifier:   7B:6B:93:75:C3:75:C4:6E:32:D9:8F:6B:AD:FE:C1:17:EA:AD:9C:21
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       074863
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8cbd6975af93d98877dfae5d0e185a317cb8d8a.roa
Signing time:             Thu 30 Jun 2022 04:41:59 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477283 (0x74863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=c8cbd6975af93d98877dfae5d0e185a317cb8d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:ce:6d:40:5f:a6:40:de:fe:3a:09:63:5b:
                    71:d9:98:60:da:e1:0a:6c:e6:2b:c8:fe:fb:ad:5b:
                    08:7d:74:7c:6b:64:31:10:d9:e3:7f:58:e9:01:61:
                    b7:0d:81:70:12:6e:10:c1:11:f0:b5:1c:07:57:f8:
                    88:1f:fe:7a:59:e5:14:f3:30:00:72:78:57:f5:cf:
                    fd:fc:1a:2e:eb:87:dd:f8:5b:2e:c6:47:7b:de:5c:
                    4e:79:55:f5:ef:18:f5:19:f1:ad:d9:f4:1e:5a:b0:
                    d5:d6:ce:16:c9:f6:17:2f:fd:79:43:ef:59:77:57:
                    8c:a7:f9:75:a9:5a:c0:d9:0d:0f:58:da:06:fe:7a:
                    6b:69:bd:41:f2:43:8c:a8:9f:b5:ee:99:3d:b4:11:
                    66:cf:03:38:ff:e5:63:d2:4d:77:4a:ca:f1:2c:a2:
                    5a:62:fc:46:4b:e8:0c:72:72:fa:59:9f:a1:9d:6d:
                    3b:08:72:0e:c0:4b:3f:3e:ef:22:23:54:14:fb:2b:
                    23:66:ec:58:2f:5a:b9:63:4c:51:29:0d:4b:77:48:
                    69:99:c5:fe:dd:70:94:73:9d:0b:21:64:17:06:b7:
                    74:86:ba:b8:58:c4:7a:a7:96:29:a0:50:66:c1:90:
                    70:ae:0f:20:07:fa:14:69:8d:f8:22:54:3d:a5:8a:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:93:75:C3:75:C4:6E:32:D9:8F:6B:AD:FE:C1:17:EA:AD:9C:21
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8cbd6975af93d98877dfae5d0e185a317cb8d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:50:d8:18:a0:32:9b:44:3b:e5:08:ca:34:13:42:e9:e9:b8:
         ec:fe:cd:06:c8:6e:29:09:6f:a2:a6:c8:4e:9c:04:a4:b0:f3:
         fb:64:a5:7d:39:74:8b:33:ba:53:6b:b1:7c:61:c4:1e:4a:dc:
         4b:3e:a5:42:cc:b9:11:a6:58:37:d0:00:ba:84:4a:b1:e5:83:
         ac:cd:db:d3:9b:ae:76:b1:ff:d4:29:7a:8f:10:aa:7c:52:89:
         8b:2a:bb:8f:ac:3c:b3:e2:4d:7e:11:02:70:83:6e:1f:ca:f1:
         34:6c:89:d6:7c:9d:1e:3c:4a:81:22:98:81:63:dc:a1:76:c8:
         b0:82:24:e6:80:ae:a1:a9:5b:9a:33:cc:39:e8:72:34:b0:e7:
         3c:84:63:0f:72:17:28:73:58:ad:4f:d6:a4:fc:82:b3:57:06:
         8d:e2:ae:8f:91:70:ac:ad:bd:c1:6c:04:37:72:e1:8a:5e:c1:
         dd:2c:87:d9:93:bd:b0:d0:67:31:d4:26:8c:f4:3f:42:1e:cd:
         b3:b9:e3:b4:36:f5:f4:b3:f6:7d:23:fd:6e:b6:12:7d:28:1a:
         d3:d7:62:a6:b0:90:b9:f9:01:c9:6c:5f:47:66:95:3e:ab:dc:
         60:31:6f:d3:ed:34:88:f4:f3:9f:6d:f7:bc:69:bf:87:a9:de:
         2d:75:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org