Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2b9781f5e49ececce5e5b02533043a8cc2429e9.roa
File:                     e2b9781f5e49ececce5e5b02533043a8cc2429e9.roa (raw, json)
Hash identifier:          8LP9wu48+BUYnquPyAkZKJM2UF0AO6ePMyd5rJGhnJE=
Subject key identifier:   D5:C6:4F:A2:69:33:D0:DE:85:46:BC:11:A8:FC:09:82:F1:16:FE:24
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05D9B8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2b9781f5e49ececce5e5b02533043a8cc2429e9.roa
Signing time:             Tue 31 May 2022 03:44:59 +0000
ROA not before:           Tue 31 May 2022 03:00:00 +0000
ROA not after:            Wed 31 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383416 (0x5d9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 31 03:00:00 2022 GMT
            Not After : May 31 03:00:00 2023 GMT
        Subject: CN=e2b9781f5e49ececce5e5b02533043a8cc2429e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:f9:22:aa:f6:44:3c:a8:b0:ca:14:c3:05:
                    85:94:d5:be:ad:61:7b:f1:f6:cd:09:f4:8b:fc:5f:
                    e7:be:0c:ff:81:0a:06:f7:ab:4f:54:f4:cf:c3:7b:
                    80:70:ed:a5:70:bf:6f:88:d1:71:d1:9d:86:e4:75:
                    fb:70:ab:37:88:fb:41:ee:7e:30:9e:40:47:04:52:
                    86:17:7c:b6:fc:7d:76:79:60:ee:c8:4b:9e:67:a6:
                    77:37:0b:f1:97:0d:b1:b5:fa:b4:59:07:28:8f:00:
                    33:45:59:d9:16:3f:ed:4d:37:6d:c2:e8:0e:66:82:
                    b7:c6:d9:4c:7e:81:68:80:d0:52:eb:3f:9d:ec:75:
                    02:18:39:a4:94:a6:3b:3e:d9:1e:9f:8d:16:9b:75:
                    82:11:45:aa:0d:e9:f5:92:08:62:8e:ae:92:2b:63:
                    b3:51:ad:21:0a:00:1a:53:ca:8c:6f:64:4b:e0:48:
                    3f:36:86:e0:6b:ab:14:57:99:75:d5:2d:d7:79:ab:
                    f8:a6:f5:c2:ef:34:2b:16:98:ed:10:04:a1:ba:b7:
                    56:c7:66:95:21:9d:8c:5d:c5:5b:a0:5d:df:a2:69:
                    1f:13:e5:5e:99:da:14:3f:83:ca:40:b9:7d:40:b7:
                    7d:9e:9f:53:ae:85:50:5a:79:16:d8:57:60:04:0c:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C6:4F:A2:69:33:D0:DE:85:46:BC:11:A8:FC:09:82:F1:16:FE:24
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2b9781f5e49ececce5e5b02533043a8cc2429e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:1b:91:55:90:eb:35:0c:e5:81:18:52:0a:d7:50:bb:02:
         28:31:c6:a8:9e:f1:ef:6b:2a:36:47:f0:2b:80:1e:8b:9c:1e:
         b1:42:69:29:13:65:50:65:a8:cc:3d:0b:7f:51:28:52:77:22:
         df:50:ee:ff:6e:fd:a2:a0:db:18:dd:51:ec:ce:82:39:88:a2:
         e7:6b:83:8d:b1:c3:ae:de:ad:99:e2:69:34:8c:4f:e9:e7:48:
         be:7a:ca:4e:9a:e4:d6:ea:bd:cf:15:19:7b:e0:85:02:b0:d9:
         b2:6b:ea:81:87:dc:fa:e2:87:1e:d7:84:4d:68:00:db:9b:ab:
         4c:86:03:41:2d:6b:9a:29:d9:12:3f:1d:f7:96:dc:b4:d4:0d:
         bb:32:bd:66:96:e0:a3:d8:91:b3:88:83:46:74:08:40:2a:88:
         f4:05:a3:98:c9:a5:1e:dc:b2:58:ef:51:7b:f6:6a:fd:76:b2:
         4d:70:b5:38:0d:ec:35:ae:29:22:22:dc:67:10:74:c8:b2:a3:
         51:03:2e:47:da:18:70:a2:4f:3c:c1:f2:3f:1c:cc:b4:9d:02:
         cf:40:2f:d5:23:76:2e:b6:c3:e9:92:d3:6a:b2:10:79:bf:80:
         89:96:e6:60:db:53:21:02:e8:4b:a0:72:85:ff:67:ca:98:af:
         15:44:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org