Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbfc5d901ac1c7bf8baf3ddfc3017ee8ec54527a.roa
File:                     dbfc5d901ac1c7bf8baf3ddfc3017ee8ec54527a.roa (raw, json)
Hash identifier:          ojBBL0WxO/Jq4lXNLbpXhkC17YBusj777hYxFITSXg0=
Subject key identifier:   01:09:A2:DD:21:4D:4E:91:8A:3E:2D:2D:D8:6B:9C:53:4C:F6:74:61
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05A200
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbfc5d901ac1c7bf8baf3ddfc3017ee8ec54527a.roa
Signing time:             Thu 26 May 2022 05:11:13 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369152 (0x5a200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=dbfc5d901ac1c7bf8baf3ddfc3017ee8ec54527a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:80:86:71:2b:d1:6a:37:2c:34:5c:37:12:
                    94:51:d8:cb:fc:d3:7f:65:b1:f2:02:05:73:36:76:
                    9d:f9:a4:96:b0:87:65:a7:17:c3:47:18:f7:05:96:
                    08:fd:81:ce:15:ae:ce:8e:2f:cf:bd:0f:07:46:f7:
                    1b:2b:ca:49:f2:3b:05:6e:c9:d8:89:bd:70:e0:1b:
                    3a:87:87:0d:67:12:42:3f:0e:9b:7d:16:d0:49:ab:
                    76:83:28:55:60:4a:78:53:7a:26:5b:d1:85:20:dd:
                    11:96:21:db:e5:48:a7:a1:43:dc:d7:aa:0a:4b:b5:
                    0f:76:ce:c0:c5:5f:22:d7:c7:22:54:50:0f:ee:20:
                    40:dd:e4:92:d9:f1:7d:08:5d:78:78:7b:f7:6a:60:
                    2b:86:d4:e5:a2:a0:75:c3:9d:6f:49:7a:ac:fb:ae:
                    85:36:bf:70:59:9a:73:6e:96:ba:a2:df:af:60:3f:
                    63:9b:5c:4a:27:5f:cf:a7:cc:5a:a6:83:f9:fb:46:
                    dd:fe:b8:ff:3e:7e:c3:be:ce:e1:8f:e1:2e:e5:c6:
                    23:4d:15:25:34:f0:b6:85:84:6f:c6:9f:9a:f8:e2:
                    2f:e1:96:fd:44:6a:3b:95:6b:39:26:e3:6d:9c:c6:
                    86:e4:92:78:96:72:d2:48:0b:8a:90:05:9a:fb:78:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:09:A2:DD:21:4D:4E:91:8A:3E:2D:2D:D8:6B:9C:53:4C:F6:74:61
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/dbfc5d901ac1c7bf8baf3ddfc3017ee8ec54527a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:c8:0a:13:16:cf:ad:e4:68:00:09:47:b6:63:f1:a0:99:
         0f:32:72:a9:f5:5b:cb:ff:eb:0b:a1:ee:8d:45:9a:18:0e:1c:
         29:b4:1e:0b:a5:13:97:d0:54:7d:d9:6d:e0:1e:b0:97:d7:55:
         45:48:53:5f:48:92:d7:7b:d6:d0:c4:ad:96:12:4b:8a:88:27:
         89:ce:bf:a7:48:0f:44:12:da:a4:5e:7a:b8:ee:c0:06:08:dc:
         f5:26:a6:ad:5b:cc:93:f1:e1:0b:fb:63:f2:b9:b9:0e:b4:88:
         41:2f:0b:ff:04:e7:25:f9:cf:41:25:02:cc:e2:4d:b6:82:21:
         8d:fe:6f:45:a1:42:8a:46:80:5c:b6:6c:51:c3:cc:9b:3f:0a:
         72:0b:3e:fe:39:b0:0b:49:3e:5a:de:05:1a:5f:e9:e8:e0:01:
         58:c1:5c:13:32:e5:e0:45:cd:31:b1:c3:55:aa:63:a1:e6:3c:
         47:81:a0:19:ef:d6:b2:2c:c1:17:49:e3:68:08:8c:07:a7:03:
         5f:6a:a9:a9:a3:4c:ca:10:3d:23:fc:db:4a:8f:9c:23:9e:b6:
         ea:af:fc:cc:7a:63:de:b0:89:78:e6:4f:70:39:97:e3:99:a7:
         f8:81:4a:5f:61:8d:83:15:5f:ea:12:5b:a5:18:5e:09:60:97:
         24:02:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org