Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbe15262e37c20d763b61a21391b277b4d7336db.roa
File:                     dbe15262e37c20d763b61a21391b277b4d7336db.roa (raw, json)
Hash identifier:          tSjvTmvCdrC7jifJA4f+dr15vopP+C/d22KXHprSOtM=
Subject key identifier:   66:A0:97:50:9B:CA:20:92:04:59:10:FE:CB:55:3A:9C:0F:D7:CD:CE
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       29D1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbe15262e37c20d763b61a21391b277b4d7336db.roa
Signing time:             Thu 20 Jan 2022 02:30:08 +0000
ROA not before:           Thu 20 Jan 2022 03:00:00 +0000
ROA not after:            Fri 20 Jan 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10705 (0x29d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jan 20 03:00:00 2022 GMT
            Not After : Jan 20 03:00:00 2023 GMT
        Subject: CN=dbe15262e37c20d763b61a21391b277b4d7336db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:fc:3e:c7:b4:f3:27:1e:e5:3b:a4:47:6b:
                    52:f7:17:f9:bb:d9:c9:cd:3e:17:e8:b6:be:04:62:
                    45:0e:0b:3b:d6:7f:3d:4e:85:88:32:6d:a1:2f:ea:
                    a2:18:b5:4e:22:01:85:48:18:ec:ff:7d:28:ae:f8:
                    0e:f7:23:1d:85:e7:1f:52:26:8b:05:b0:81:3c:6c:
                    7d:f2:56:c4:d0:fd:6a:8d:a1:07:35:1f:8f:e7:6e:
                    75:44:4f:44:62:c7:3b:5d:66:09:11:de:9d:5f:fa:
                    b1:d9:ec:fe:4d:bc:59:81:ca:c5:df:db:47:6d:18:
                    84:b2:33:80:1f:dc:98:7d:25:6a:d5:7d:ab:18:e7:
                    55:d1:99:fa:6f:d0:94:17:3b:a8:37:94:5a:52:b1:
                    52:65:e4:9b:25:32:29:05:d3:7f:13:e8:3e:eb:9c:
                    ea:8d:27:4e:c1:a4:ed:93:8c:bb:7e:a3:55:28:61:
                    16:b7:71:09:9b:97:d9:36:a9:63:9a:17:c4:06:5c:
                    72:43:15:4b:5e:06:f4:df:b7:e1:1b:31:cb:8b:b4:
                    eb:d3:c6:a6:86:bb:e4:f4:b4:bc:0c:e9:7d:0e:c8:
                    10:0a:58:0f:6f:f1:74:2b:ac:a6:68:3b:e6:b1:31:
                    c7:fe:2e:3b:c1:75:be:c6:66:e9:7a:3a:85:81:36:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A0:97:50:9B:CA:20:92:04:59:10:FE:CB:55:3A:9C:0F:D7:CD:CE
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbe15262e37c20d763b61a21391b277b4d7336db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:aa:a4:40:01:98:95:c9:34:b4:ea:49:f4:9f:7a:9f:59:
         07:81:9a:b8:68:4c:03:61:20:55:1f:df:d9:a3:07:ce:89:3e:
         14:a0:c6:9a:c5:a3:83:4e:f4:e3:2f:94:1a:3f:75:8f:34:92:
         2a:39:be:4d:df:fb:28:78:ca:66:6d:de:cf:81:cc:50:1e:c9:
         99:33:2e:21:20:bb:fb:1c:dc:d6:ca:79:25:1b:50:2a:70:67:
         62:cd:f3:55:2b:aa:a9:ce:85:65:22:bb:3c:fa:24:ea:1c:e6:
         b8:95:d2:f9:72:00:f1:4a:17:31:3a:fb:42:68:3d:6a:a1:68:
         a7:87:e4:3d:3b:0d:83:63:02:cb:f2:e8:5f:ed:ae:76:3c:2e:
         d1:cb:ab:45:75:9b:ee:04:71:4a:ff:f7:0e:7b:4c:98:ae:1d:
         30:06:9b:03:b5:20:7e:3c:0f:20:41:37:e9:3d:b8:3b:eb:eb:
         ed:c6:99:45:3b:70:21:4f:ff:74:05:d3:cd:b9:3e:3c:b4:7b:
         ee:3b:c3:0f:aa:4a:a9:7f:2f:6d:5b:23:d3:12:8c:b4:46:ac:
         99:7c:be:3c:54:c6:88:2c:ef:27:be:d6:bc:a7:09:a7:57:42:
         12:02:64:9f:9b:12:aa:dc:fe:10:6a:ed:df:e9:49:13:7a:ee:
         db:87:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org