Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0396bf53edd48935a7df798534ff61499b7b9ad.roa
File:                     e0396bf53edd48935a7df798534ff61499b7b9ad.roa (raw, json)
Hash identifier:          za/UzWiGDfBEDE+sDYV4WINDHhJ4Hv/ALyDP3r38YH8=
Subject key identifier:   F3:8D:AF:97:4E:84:E3:80:B5:0B:2D:02:99:9F:13:A1:66:D8:DF:1F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09921D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0396bf53edd48935a7df798534ff61499b7b9ad.roa
Signing time:             Mon 22 Aug 2022 00:40:01 +0000
ROA not before:           Mon 22 Aug 2022 03:00:00 +0000
ROA not after:            Tue 22 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627229 (0x9921d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 22 03:00:00 2022 GMT
            Not After : Aug 22 03:00:00 2023 GMT
        Subject: CN=e0396bf53edd48935a7df798534ff61499b7b9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:6d:5b:58:33:52:a0:12:11:8c:00:bc:83:
                    b8:a9:75:02:2f:01:60:76:ba:a1:e1:e1:cf:cd:b0:
                    a3:bd:d9:e2:c9:7a:9f:68:62:ff:ac:e4:fb:e8:fa:
                    bc:15:a3:94:b8:43:67:fa:a5:21:c1:32:a1:8d:80:
                    1d:65:31:0e:5d:b9:c3:2a:16:fc:15:05:7a:d0:2f:
                    3a:33:37:d8:70:5b:d2:88:c1:44:a3:4f:fc:34:9a:
                    7d:d3:aa:56:9e:c1:28:a6:e5:24:8a:ac:80:82:66:
                    a0:92:b9:2e:66:0a:71:5f:c6:1c:a0:8d:d2:99:5e:
                    b8:d0:20:f5:6c:e4:bc:86:2c:9f:d2:9e:e9:53:7c:
                    d9:28:fe:8b:7e:a1:10:95:a2:13:c5:57:77:17:4d:
                    fd:d2:00:fb:a0:04:d6:74:fd:f1:73:f7:bc:e8:42:
                    3d:5a:db:71:d5:1c:8b:a3:27:96:91:e8:4f:c3:63:
                    aa:32:24:6f:64:26:01:fe:00:cf:bc:bf:fa:93:6c:
                    27:6b:77:f0:a4:11:42:5b:da:4d:94:f7:85:ef:11:
                    c9:ae:ad:93:9b:a4:89:44:8e:37:cf:da:31:8a:f0:
                    ba:4f:44:25:21:fd:e1:39:b0:53:bb:c8:1d:89:28:
                    6c:f2:17:07:9a:38:36:7b:5c:ef:49:8f:83:a7:0f:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8D:AF:97:4E:84:E3:80:B5:0B:2D:02:99:9F:13:A1:66:D8:DF:1F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0396bf53edd48935a7df798534ff61499b7b9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:15:18:0a:2b:c7:03:c2:87:7d:57:6d:bd:a6:09:7c:84:
         6d:0d:c4:c5:49:07:dd:41:41:00:78:bc:14:c6:9a:8a:44:df:
         28:b4:ba:f0:a5:71:8f:8f:7d:23:c6:58:7d:c2:16:f5:8c:32:
         eb:ad:31:20:ea:4f:57:8e:aa:06:67:60:84:54:3f:3b:eb:ea:
         1c:1e:83:87:ec:43:18:b9:3e:e6:5f:15:ae:ee:df:e2:13:80:
         b9:a0:35:f5:b8:b9:a6:d2:cc:bc:fe:8b:97:ff:e4:84:0f:a1:
         a0:d6:23:91:ed:11:87:6e:d8:6b:0f:2e:bf:30:f0:58:ea:69:
         30:d5:13:c1:90:82:83:54:e8:6d:db:00:c3:72:48:56:b3:41:
         fd:10:8e:71:9b:34:82:21:6a:5a:35:95:4c:a7:d5:34:c7:de:
         26:b1:30:2f:5d:12:ff:ed:73:86:78:21:dd:e5:d7:e2:23:ea:
         71:e8:c3:6c:ab:7c:ef:b6:38:7f:ee:ec:4f:ca:3a:bb:9b:aa:
         c0:92:15:2f:c0:8a:da:03:ae:8b:f7:85:e0:95:e0:d7:4e:8b:
         34:e6:f9:2d:b4:f8:25:2d:e2:98:d9:02:22:61:c3:c5:ab:84:
         9c:9d:e2:46:86:df:92:f0:08:1c:8c:8f:5a:f3:01:84:37:46:
         1e:cc:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org