Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0e1b34611bf3d5f0b02997bd1885f82178351e6.roa
File:                     e0e1b34611bf3d5f0b02997bd1885f82178351e6.roa (raw, json)
Hash identifier:          q4prbsdWYCGQNEjJU9qEHQ66MorZruD71k1Zb6tFPWA=
Subject key identifier:   42:88:D5:65:42:4A:38:0D:8B:92:10:29:4D:1B:A4:93:05:CA:14:23
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       027CAA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0e1b34611bf3d5f0b02997bd1885f82178351e6.roa
Signing time:             Wed 16 Mar 2022 05:51:24 +0000
ROA not before:           Wed 16 Mar 2022 03:00:00 +0000
ROA not after:            Thu 16 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162986 (0x27caa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 16 03:00:00 2022 GMT
            Not After : Mar 16 03:00:00 2023 GMT
        Subject: CN=e0e1b34611bf3d5f0b02997bd1885f82178351e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:3e:a7:69:56:5c:87:1f:42:86:24:72:cd:
                    54:2b:a0:3c:39:c8:30:3c:a0:d0:9c:bb:dc:43:1d:
                    c0:69:fd:53:23:a3:ef:10:29:61:34:a3:e2:47:01:
                    9d:54:4a:ba:15:e9:8d:ac:95:0b:74:54:9c:c1:e4:
                    f2:e1:2b:a1:9a:df:1b:07:2c:e6:43:04:a5:c8:77:
                    6f:cb:2c:56:f5:6d:89:5f:7d:89:07:4c:09:60:6d:
                    8b:16:be:10:53:77:ac:e2:b0:0e:ec:ee:04:97:74:
                    72:ca:b9:ff:1c:80:1d:fd:2f:cb:fc:ca:0f:a6:d7:
                    15:42:02:06:d8:c4:52:35:9b:c1:15:b0:66:06:c0:
                    54:e5:a4:5e:9e:26:8d:0f:e2:51:b1:db:d2:73:9d:
                    c0:83:bf:06:22:0e:9c:96:18:26:30:fc:ec:e4:43:
                    41:67:70:9c:ed:f4:8a:db:e0:b7:c5:3a:1f:4e:5a:
                    c1:18:b1:b8:e5:fc:8e:e8:f2:62:7b:2f:50:19:c1:
                    88:3d:2f:a5:22:17:ac:7e:7b:79:32:ff:67:28:fa:
                    a9:97:50:cf:31:ed:5b:76:63:d1:f0:6c:78:87:d3:
                    4d:d5:0c:60:ed:25:04:b3:80:9c:72:07:d5:fc:d4:
                    79:18:51:83:ab:53:d6:4f:27:2d:fc:22:92:60:8d:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:D5:65:42:4A:38:0D:8B:92:10:29:4D:1B:A4:93:05:CA:14:23
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e0e1b34611bf3d5f0b02997bd1885f82178351e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:14:85:3b:84:2e:61:e2:41:39:45:a3:f0:c7:85:7c:65:1d:
         55:cb:96:57:94:be:5f:55:c6:5f:02:24:28:ef:83:f2:4a:8b:
         22:af:c4:ed:fb:26:e7:98:68:4d:5c:09:d2:17:40:6e:fa:b7:
         37:a7:bd:d1:ac:d5:57:87:21:7c:b8:2a:9e:84:d3:56:9c:38:
         e2:0d:a0:a2:38:c2:f5:15:d4:cd:bc:9b:e2:95:82:ba:e2:07:
         66:35:ac:19:68:5d:b9:cb:4c:57:14:c1:43:45:b4:cb:0a:2c:
         e1:02:b4:71:32:72:a6:73:34:a0:ee:5d:05:32:ff:ba:5a:b8:
         ab:df:39:9c:5a:07:13:f0:6a:d3:98:84:64:32:7e:17:08:2e:
         b7:17:c3:ea:80:02:65:ad:3a:01:e0:d0:3a:09:d0:e4:98:40:
         5c:85:9f:c7:84:de:9f:f8:fb:8a:4a:54:94:a5:c1:ab:27:d9:
         35:d5:1e:d7:6a:78:9a:49:24:67:c1:53:52:56:02:63:33:10:
         07:f7:27:94:94:f4:94:8c:a7:23:53:aa:8f:5c:45:d9:aa:51:
         19:ee:86:7a:f7:74:72:dc:4c:7a:a9:e4:22:01:a0:a9:35:4d:
         3d:49:ca:e6:87:ed:1b:18:ed:ab:de:4c:68:e5:f6:b8:fb:d6:
         c4:ab:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org