Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4c3c8f4f96575de7c8617ec2866191841d069fe.roa
File:                     d4c3c8f4f96575de7c8617ec2866191841d069fe.roa (raw, json)
Hash identifier:          Dm3WMXGcydHJuoSz8PrJ47Sq2HHlsd0C6r+txWbRPCM=
Subject key identifier:   85:DE:EE:8E:AC:52:9D:A6:43:E8:B5:FF:6F:55:DC:AE:F3:6E:B9:38
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C76A0
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4c3c8f4f96575de7c8617ec2866191841d069fe.roa
Signing time:             Fri 21 Oct 2022 03:26:08 +0000
ROA not before:           Thu 20 Oct 2022 03:00:00 +0000
ROA not after:            Sat 21 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816800 (0xc76a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 20 03:00:00 2022 GMT
            Not After : Oct 21 03:00:00 2023 GMT
        Subject: CN=d4c3c8f4f96575de7c8617ec2866191841d069fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:5a:37:98:a5:99:ae:ee:5e:2b:34:60:c7:
                    7a:f5:a3:df:0d:2e:be:f7:f5:f3:f7:e8:94:41:56:
                    a0:28:84:db:86:b3:c9:41:34:ac:be:9d:cc:7a:ff:
                    7c:b1:26:eb:b0:af:f4:87:f2:cb:e2:cf:97:60:b1:
                    cf:39:e5:0b:f7:7c:be:0d:68:e2:0c:69:cc:84:e0:
                    68:69:59:3c:f7:17:c5:b7:f7:81:1d:99:4a:74:42:
                    bd:6b:72:38:4c:06:d7:88:08:b6:cb:91:92:6f:c3:
                    59:21:81:9f:ef:d9:e8:e7:99:41:8a:12:c0:0c:fa:
                    7b:df:b9:a2:21:e3:b9:64:b9:80:98:6d:26:43:54:
                    ef:78:ab:b6:72:75:da:b4:14:e0:b9:92:28:c6:e3:
                    7d:3d:00:ca:4b:6e:34:f3:9e:0e:49:0d:92:74:48:
                    2c:89:d7:83:11:f6:18:bf:dd:1d:b1:34:fa:f6:73:
                    d2:c3:5e:10:f6:2c:05:72:6e:6e:bb:32:e0:c8:ba:
                    42:69:94:5d:1f:8a:ea:de:06:24:fc:db:51:7e:fe:
                    ad:4c:81:45:ac:7c:2e:11:2e:dc:b1:f0:c7:37:50:
                    1d:61:27:f7:e9:10:98:55:18:8f:3a:dd:45:6d:f7:
                    c5:58:42:c8:c0:03:fd:11:f5:45:f8:16:a0:66:77:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DE:EE:8E:AC:52:9D:A6:43:E8:B5:FF:6F:55:DC:AE:F3:6E:B9:38
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d4c3c8f4f96575de7c8617ec2866191841d069fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:76:6e:d5:ce:8a:c7:2b:45:a1:06:f7:30:ad:55:15:bf:
         d1:63:84:bf:9f:47:32:60:5a:dc:42:c5:71:a1:b0:f8:6d:f9:
         9c:1f:1f:ef:7d:92:3e:00:6f:13:33:5c:75:25:31:cf:35:69:
         6f:f8:e0:fa:89:7e:1b:81:d9:e7:38:e0:ec:92:57:07:8e:18:
         91:e0:e9:f7:0d:69:a9:eb:19:ee:56:02:1a:83:85:83:9c:63:
         43:2e:46:3e:d0:0c:21:9c:9a:88:01:6c:d7:ec:b7:67:41:24:
         9f:94:64:9b:83:5f:c2:d8:4d:42:1e:cb:a9:7e:47:e9:7a:e0:
         5e:eb:b5:a8:f7:05:9a:a2:10:b2:67:3b:d4:8c:13:da:6e:6f:
         1d:aa:b5:77:27:23:ab:9f:18:8d:fa:56:89:13:d7:b5:99:bb:
         49:c0:33:b0:3c:73:96:01:ce:f4:80:23:b4:21:d3:80:e9:6b:
         ab:c2:cb:68:5b:0a:74:5f:af:53:c6:a3:77:3a:2c:f1:e7:1f:
         2a:e0:5d:70:84:17:d7:3a:04:2d:2a:9e:3f:09:56:99:07:32:
         75:4b:43:ab:59:64:bf:02:36:b0:98:8e:db:08:b2:26:d4:82:
         7e:8d:32:c9:04:e5:08:3e:8e:22:8e:18:eb:41:76:fa:e3:6d:
         e3:3c:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org