Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e208cbc5d24ab30a3e208405e4ae9716411fa1fb.roa
File:                     e208cbc5d24ab30a3e208405e4ae9716411fa1fb.roa (raw, json)
Hash identifier:          SaSr6BM+wI5fTgta/B2UeVPOw4knFLHr/+qPaAVgXMI=
Subject key identifier:   05:E9:13:53:AA:6A:65:78:AD:1B:5D:FC:99:4F:7F:82:51:F4:C2:11
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09E886
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e208cbc5d24ab30a3e208405e4ae9716411fa1fb.roa
Signing time:             Mon 29 Aug 2022 05:43:44 +0000
ROA not before:           Mon 29 Aug 2022 03:00:00 +0000
ROA not after:            Tue 29 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649350 (0x9e886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 29 03:00:00 2022 GMT
            Not After : Aug 29 03:00:00 2023 GMT
        Subject: CN=e208cbc5d24ab30a3e208405e4ae9716411fa1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:f0:01:09:d0:77:fb:5a:bc:fc:dd:e1:55:
                    73:79:8c:98:b5:16:08:b6:50:9f:48:26:13:e5:cb:
                    9b:b2:33:72:13:5a:b4:8f:17:0b:2c:05:23:60:d5:
                    d9:ba:6c:68:36:4a:56:9d:d4:16:23:a3:38:f0:17:
                    b3:98:51:f5:9f:be:3f:8f:0c:05:c3:9b:6c:2f:9a:
                    36:af:ff:58:2c:57:d7:73:67:04:67:2b:1a:6d:18:
                    1b:3a:db:8c:b4:70:1f:d3:3a:db:31:b6:e7:d5:43:
                    8d:29:a2:2b:42:db:c4:8b:ee:11:e6:2e:9c:11:cf:
                    be:63:58:ad:8f:8f:b2:96:79:39:72:e8:50:11:76:
                    72:f1:e5:c7:e5:bd:a1:e7:d6:c3:a9:7e:e1:67:1a:
                    17:be:fe:4c:4b:94:cd:b3:bd:57:ec:b4:42:60:59:
                    1c:55:91:df:55:e8:9e:10:4c:54:54:7d:bc:66:d4:
                    5c:a7:9b:f8:93:56:1e:ed:ad:de:13:d8:a5:81:69:
                    0b:13:85:c6:1e:de:37:1e:1e:e5:9a:08:7b:90:c3:
                    04:c2:e0:02:d3:a3:b3:30:4e:f5:01:99:40:8d:44:
                    8d:69:5e:8c:fc:88:b7:67:2e:3a:2c:e9:83:1e:7c:
                    3f:b9:2c:0c:84:b9:b7:3b:c1:7b:6c:93:05:98:01:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:13:53:AA:6A:65:78:AD:1B:5D:FC:99:4F:7F:82:51:F4:C2:11
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e208cbc5d24ab30a3e208405e4ae9716411fa1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:64:42:6b:13:92:5b:31:f4:cb:a5:e0:ed:49:bc:3d:17:21:
         5a:47:c5:3b:5b:4b:73:ca:f6:7f:cf:b1:98:7b:41:66:60:34:
         9e:d7:57:d6:2d:05:7f:fd:11:9c:7d:57:b1:83:0f:a6:20:19:
         d4:97:d2:51:1c:b5:cb:3f:15:70:de:f7:9e:9b:05:28:97:af:
         df:59:28:4e:08:7e:fa:a9:32:47:27:0d:d3:ec:d8:88:66:c4:
         ce:78:4b:6c:4a:95:d0:b7:20:9b:aa:df:be:21:47:e0:0d:e2:
         db:c1:c5:38:dc:4d:5a:c1:66:20:fc:73:3c:09:f2:65:de:ed:
         19:84:aa:c3:14:a5:ed:64:69:59:dd:3f:c1:90:ce:8c:96:2f:
         69:15:21:86:d0:7f:34:8c:58:da:f9:de:d8:2f:6a:f4:3f:ac:
         3d:0f:4f:8e:da:dc:63:10:d5:45:12:e3:b9:c9:46:d7:69:df:
         e7:32:bc:b6:25:d2:3b:41:75:f1:58:47:58:49:d6:92:5f:e8:
         09:b6:f1:0c:e6:e5:73:03:01:fd:68:a2:d7:b7:d2:30:76:af:
         c1:fc:7c:aa:0c:1b:d3:95:16:a5:67:e9:8d:29:7e:16:15:a6:
         78:da:13:09:ae:39:fc:9c:de:24:77:5d:67:92:6f:87:51:8a:
         d6:40:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org