Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e130aa196fe11bffa8fa385752415050da7e7f77.roa
File:                     e130aa196fe11bffa8fa385752415050da7e7f77.roa (raw, json)
Hash identifier:          jJqhW+x92B52nPDPK9MUWJp9YLt+aE0BHU4DczE2odI=
Subject key identifier:   DA:E6:3A:F5:C9:0E:EB:BC:82:68:B9:03:E6:E7:30:F3:47:E8:A9:AB
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0CD862
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e130aa196fe11bffa8fa385752415050da7e7f77.roa
Signing time:             Sat 29 Oct 2022 04:56:31 +0000
ROA not before:           Fri 28 Oct 2022 03:00:00 +0000
ROA not after:            Sun 29 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841826 (0xcd862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 28 03:00:00 2022 GMT
            Not After : Oct 29 03:00:00 2023 GMT
        Subject: CN=e130aa196fe11bffa8fa385752415050da7e7f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:9e:cc:6d:12:6f:45:f2:f7:96:6d:8a:ed:
                    5b:16:4c:80:87:9f:e8:6c:81:eb:3e:df:87:4d:77:
                    50:e0:7b:19:12:09:24:96:3c:81:e2:b8:a2:fd:9d:
                    51:1b:3c:4a:df:09:a9:10:08:57:f1:1e:30:81:bb:
                    06:4f:31:61:ef:87:41:03:20:2e:7e:85:0a:e0:61:
                    26:42:45:72:eb:83:55:df:d0:fa:68:1e:80:8a:c5:
                    3a:be:77:ba:32:63:9d:d3:69:84:7a:80:ba:90:8f:
                    98:ef:be:6a:8d:43:50:2f:96:ba:70:69:b6:9e:f4:
                    1b:31:3e:02:a0:d7:dd:c3:00:ad:6d:1f:4a:67:b0:
                    f5:70:0a:43:8e:f4:49:30:37:2e:07:36:71:78:3c:
                    1e:25:f5:df:fc:4b:d2:d6:48:53:58:85:9e:72:3c:
                    49:7a:57:50:83:5f:17:4e:fb:00:5a:a5:1e:b5:4b:
                    53:23:32:55:7f:7c:d1:fa:c7:92:fb:93:95:6e:c2:
                    21:ee:9b:74:b8:02:02:82:50:56:d1:7f:87:77:da:
                    b6:5c:af:d8:89:d4:55:db:61:f2:2c:e4:7f:f4:22:
                    dc:f6:35:75:33:94:36:c2:b2:69:1d:88:ed:a1:e4:
                    35:5e:02:9e:d2:bf:b7:8b:5c:59:2c:c0:98:90:1c:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E6:3A:F5:C9:0E:EB:BC:82:68:B9:03:E6:E7:30:F3:47:E8:A9:AB
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e130aa196fe11bffa8fa385752415050da7e7f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:95:9a:a0:7a:dc:10:07:cb:b5:11:60:dc:cd:6f:e0:7e:07:
         0e:37:1f:84:df:10:1b:59:ae:e4:57:01:56:be:67:c9:78:3c:
         de:45:78:81:c1:14:55:1a:41:03:52:75:85:a8:4d:56:79:bf:
         fd:5a:1f:eb:cf:bf:ec:55:a3:ee:3a:c5:84:3e:22:2d:73:a7:
         96:79:c3:86:e4:b4:3b:90:9c:41:5a:c4:94:d3:66:7f:94:72:
         9d:55:46:fc:3b:25:f4:af:98:7b:ce:42:e2:77:a7:89:42:68:
         55:cd:fd:5e:a9:39:a7:25:67:75:d0:ef:ea:19:40:a0:7c:bc:
         4e:04:d0:43:e5:ef:a4:39:03:4c:df:71:68:dc:55:93:f7:be:
         b1:73:bd:f9:e5:af:02:63:c8:fe:67:3e:95:5b:87:e6:6b:1f:
         74:5a:e5:29:fa:f8:e9:69:80:5a:54:cb:a1:2e:cb:a2:87:ec:
         8c:56:2d:11:cf:fd:bb:c8:d6:cb:64:a5:40:21:41:45:88:d6:
         9b:eb:ed:72:84:48:6b:f1:04:4a:1d:95:e1:35:e0:eb:33:9f:
         46:1c:40:9d:fa:0b:75:d2:ad:a1:12:ee:62:d8:1d:e2:41:00:
         73:db:6d:73:0e:cc:1d:c0:b1:5a:68:64:63:6b:7e:55:fc:a4:
         f6:e6:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org