Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d738c9d9d53dd0e9589a01931f3410eef07f2714.roa
File:                     d738c9d9d53dd0e9589a01931f3410eef07f2714.roa (raw, json)
Hash identifier:          Ka5ADAmmpfgYcXjiHUzdxPgyB/MhxatNXdcAD0ZL7vA=
Subject key identifier:   9C:C9:11:35:04:DA:72:5A:BD:4D:3C:24:8B:64:F0:C1:C9:95:7E:84
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C0F5D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d738c9d9d53dd0e9589a01931f3410eef07f2714.roa
Signing time:             Wed 12 Oct 2022 00:17:24 +0000
ROA not before:           Wed 12 Oct 2022 03:00:00 +0000
ROA not after:            Thu 12 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790365 (0xc0f5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 12 03:00:00 2022 GMT
            Not After : Oct 12 03:00:00 2023 GMT
        Subject: CN=d738c9d9d53dd0e9589a01931f3410eef07f2714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:be:50:c1:0c:e8:86:ca:7c:95:2c:f0:f9:
                    e7:26:24:60:6b:50:28:ea:13:0e:0a:cb:bc:2c:7a:
                    a1:91:79:5a:17:92:38:47:60:53:ca:f8:1f:24:a7:
                    8e:c5:46:75:b3:3b:62:24:f8:bc:1e:f6:82:3a:6e:
                    79:3b:e2:f5:20:f5:d9:8e:eb:ba:95:67:37:8d:44:
                    44:39:0b:28:75:ad:bb:33:ed:4b:59:3b:41:34:54:
                    61:f1:ff:55:c3:ed:d3:32:63:cd:05:65:c4:74:cb:
                    81:98:53:1e:c7:7b:b2:7c:44:21:fc:0e:a7:e8:48:
                    f2:52:1a:6a:e6:81:3b:4c:d5:a8:d2:17:8f:fc:b1:
                    ec:ea:8c:9c:91:8d:81:74:ac:57:91:24:72:34:70:
                    90:27:a1:7d:2d:89:b4:10:0b:84:6e:e9:08:59:0d:
                    02:82:a1:14:cb:66:ed:45:b9:76:06:c2:61:40:fc:
                    3d:10:f9:f1:14:8a:65:33:2b:8c:b1:bb:78:e3:51:
                    3b:32:24:61:7b:90:b3:a0:8c:e2:2c:50:37:5c:61:
                    6d:05:bd:74:07:13:34:87:55:d8:00:06:5f:a8:3b:
                    42:37:0d:7c:dd:92:a6:97:43:09:ac:15:85:38:16:
                    8f:90:39:3b:98:b2:a3:77:27:2b:72:af:94:c5:8e:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:11:35:04:DA:72:5A:BD:4D:3C:24:8B:64:F0:C1:C9:95:7E:84
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d738c9d9d53dd0e9589a01931f3410eef07f2714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:26:16:7f:38:3d:99:5d:3e:b4:d4:65:42:be:2e:38:cb:2e:
         58:1d:75:78:f2:e9:7e:79:bb:28:dd:5f:88:15:8d:f6:eb:d3:
         7b:16:22:57:3e:be:54:1b:c1:27:d4:ef:0b:9f:2d:43:43:70:
         60:9a:14:e5:f2:23:35:57:db:6c:a9:18:85:5d:57:18:02:63:
         ac:41:fe:4c:b3:cc:d1:55:cc:48:11:9e:59:68:e5:39:46:4b:
         f3:f8:69:20:e4:26:90:c5:6a:c0:f8:67:b3:a3:8c:7f:d0:90:
         35:76:32:ce:93:d9:9c:ae:0f:f9:e0:d1:63:6a:bd:81:eb:20:
         13:21:14:be:1b:c4:dc:d7:7f:63:a0:8b:6b:bc:c6:16:95:d7:
         28:ca:c1:28:64:a1:89:e5:fc:07:cd:6a:0a:22:9d:25:59:84:
         e9:c3:53:af:a1:3e:b0:c2:33:50:80:dd:c2:b6:43:75:d0:10:
         e5:5c:c0:7b:1d:11:2e:6a:dc:d5:9e:71:02:b8:11:5c:81:9b:
         4d:bb:05:12:fb:3b:f3:36:4c:db:42:7f:c5:64:f5:38:44:39:
         fa:d3:44:61:48:4a:6d:9d:47:2b:90:ce:53:30:57:07:fe:7c:
         2e:6b:a6:12:a6:74:65:f5:fa:03:fc:78:10:7e:a2:cf:b3:66:
         89:bb:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org