Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ccc3e64cc1bd9da4b354bfce85f068b560af6b57.roa
File:                     ccc3e64cc1bd9da4b354bfce85f068b560af6b57.roa (raw, json)
Hash identifier:          wtSn1KyLgvP7Qzmq4QJ840DF5lxMu1ui8OXVg7HwvTk=
Subject key identifier:   77:77:84:28:46:CF:E2:C8:D3:A9:27:5E:C7:AB:F9:92:02:C6:8A:00
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       023A46
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ccc3e64cc1bd9da4b354bfce85f068b560af6b57.roa
Signing time:             Thu 10 Mar 2022 00:09:05 +0000
ROA not before:           Thu 10 Mar 2022 03:00:00 +0000
ROA not after:            Fri 10 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145990 (0x23a46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 10 03:00:00 2022 GMT
            Not After : Mar 10 03:00:00 2023 GMT
        Subject: CN=ccc3e64cc1bd9da4b354bfce85f068b560af6b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:9a:bd:79:8c:e9:85:c5:97:dc:5d:3c:bc:
                    85:4a:a5:d2:7b:b7:32:6d:ff:75:75:cb:c1:b9:19:
                    7a:45:09:27:5e:14:2f:61:56:a7:d7:f6:5e:5a:9c:
                    6d:98:da:1d:47:11:80:d0:b7:f7:a5:a3:bd:d0:0b:
                    e2:65:53:54:26:f8:15:c4:70:5a:48:59:9a:fa:b7:
                    be:8c:7b:e4:fb:45:5c:c4:1b:57:10:7d:8a:82:0e:
                    f7:ec:e5:25:45:43:2e:f8:a7:48:2f:2d:81:0e:5a:
                    f6:8f:ad:0a:98:12:6c:71:0d:d6:07:c8:f5:c2:5f:
                    c9:e1:de:8a:de:3e:e1:78:02:ed:5f:72:78:66:5d:
                    47:12:29:73:1d:59:2c:e3:99:79:28:84:1b:07:91:
                    a8:56:6f:5c:fe:05:27:e2:f7:cd:29:33:91:bc:fb:
                    10:e4:4e:85:0d:73:2b:44:59:1f:88:bc:b2:cb:ae:
                    ab:ee:cd:83:a6:40:bd:50:db:70:60:a6:13:28:61:
                    f7:74:fc:7f:27:a7:09:e8:78:b1:a8:9c:12:00:4a:
                    06:e0:46:dc:07:ea:37:6b:05:29:89:b7:e1:42:09:
                    a0:96:18:45:c2:3b:ae:85:32:45:31:81:8f:bf:0e:
                    0d:d2:37:bc:2b:54:1b:8a:61:8c:24:8a:34:d8:07:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:77:84:28:46:CF:E2:C8:D3:A9:27:5E:C7:AB:F9:92:02:C6:8A:00
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ccc3e64cc1bd9da4b354bfce85f068b560af6b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:95:44:00:dc:de:8f:96:f3:64:32:3c:7d:81:c7:9e:e0:
         18:48:40:08:49:28:dc:dd:20:70:ce:8c:8c:19:e0:33:50:42:
         9a:4c:b9:8d:c3:04:53:c5:f6:7d:06:81:46:4b:a9:fe:46:32:
         8c:54:6d:48:ee:83:6e:73:40:ee:f0:f9:bd:b6:78:32:82:df:
         3f:b1:87:2d:62:c5:eb:59:68:37:53:c1:2c:b9:0b:71:8f:92:
         a9:77:b1:8c:d4:77:b9:7b:77:d1:b4:b1:6f:2b:6c:ab:e1:39:
         b9:88:e3:40:21:41:c3:12:b7:dc:82:31:2d:68:87:12:aa:dd:
         28:73:32:c1:3b:fe:82:8a:fe:5c:b5:3d:4c:eb:b0:d5:91:e5:
         17:e9:40:bf:54:f6:a0:f5:da:3d:65:2c:a4:f1:3a:f8:56:ea:
         ba:50:49:8f:e4:b9:83:0f:54:0e:22:ae:e0:f0:cf:31:92:43:
         8d:1f:be:2a:13:ec:8a:44:ff:67:f4:8a:29:7b:81:6d:7d:14:
         8e:db:7a:35:f6:9e:43:62:60:d8:d7:57:b5:90:ab:5b:1d:d0:
         8a:3e:9f:f9:76:d8:6a:d7:50:c7:b4:c4:3f:b3:b9:d3:50:08:
         01:22:ae:d6:59:ed:5d:fd:7a:e9:cb:e9:a6:86:24:86:81:37:
         cc:bc:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org