Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e983a300953d4f9c4f3fc0d56c86176e8693c3d0.roa
File:                     e983a300953d4f9c4f3fc0d56c86176e8693c3d0.roa (raw, json)
Hash identifier:          0yKxu+Cq6QXB54XjxxG1bQmzCh7agkBvmWqu4PiD2F0=
Subject key identifier:   4B:60:5C:CC:BE:82:85:8C:E7:12:4C:F7:1A:D5:6E:1F:A4:4D:A2:3F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0329F8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e983a300953d4f9c4f3fc0d56c86176e8693c3d0.roa
Signing time:             Wed 30 Mar 2022 02:40:55 +0000
ROA not before:           Wed 30 Mar 2022 03:00:00 +0000
ROA not after:            Thu 30 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207352 (0x329f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar 30 03:00:00 2022 GMT
            Not After : Mar 30 03:00:00 2023 GMT
        Subject: CN=e983a300953d4f9c4f3fc0d56c86176e8693c3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:02:86:1a:60:80:7c:9d:95:19:1a:02:91:
                    38:af:f4:e1:2a:44:ab:2b:a3:49:6a:53:04:01:cd:
                    ff:98:35:35:f8:cf:6f:cd:38:2f:4b:5e:4d:b6:41:
                    c3:0a:f7:26:ac:75:7e:fc:35:2b:a7:17:c4:62:4e:
                    2f:a2:5e:da:21:6e:ff:29:26:08:8b:38:b4:3c:ea:
                    7e:8a:e3:6f:fc:c4:c0:d3:66:3d:4d:40:d1:af:72:
                    0f:1a:41:a1:ba:e5:cd:87:69:0b:66:bd:0e:2e:55:
                    bd:79:d6:dd:97:fc:8f:86:7b:e0:50:07:79:c9:b8:
                    b5:10:fe:08:9a:1c:09:a8:a5:74:19:62:08:38:fe:
                    93:30:93:d4:37:3e:d7:f0:b9:e0:a0:0b:7e:8c:5f:
                    1f:36:4e:78:d0:40:2a:b7:36:03:19:5e:d3:4c:85:
                    3e:4e:b8:07:f2:df:cf:ce:80:18:bc:5f:42:28:2d:
                    7f:27:46:5f:6d:da:ab:85:d0:dd:0c:5f:14:be:d9:
                    07:f7:b1:37:3b:ed:33:1e:56:da:d6:4b:57:d7:9a:
                    54:75:8d:a7:2c:e6:db:75:8f:dd:e2:2c:3f:4c:2b:
                    41:29:a5:db:f2:96:eb:46:9f:f3:05:a1:2f:8b:b3:
                    b9:4d:9a:92:e2:99:f4:f4:6d:28:98:29:cb:7d:c6:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:5C:CC:BE:82:85:8C:E7:12:4C:F7:1A:D5:6E:1F:A4:4D:A2:3F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e983a300953d4f9c4f3fc0d56c86176e8693c3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:8c:a9:62:5b:58:97:95:fa:11:f5:5e:65:26:a9:71:7e:
         71:7c:60:8f:a1:ca:86:1d:52:8f:54:46:27:35:cb:88:1a:e3:
         72:16:78:37:61:a0:cc:f0:53:50:bd:f1:97:66:89:95:15:fd:
         9c:6c:d4:91:95:29:48:a2:d0:b3:4f:d3:fe:70:83:b2:9f:6d:
         f5:54:e1:b9:85:b4:2c:34:78:dd:25:c0:07:2e:5e:f6:35:6e:
         a6:9f:7e:b9:e9:d0:23:b4:56:55:df:5d:15:b1:ad:09:8c:15:
         89:ac:79:53:53:65:8b:3f:6b:d1:0e:71:36:d1:58:21:f1:0f:
         70:7f:e0:9c:9e:1f:0c:c0:5c:57:ec:06:41:4a:92:f0:64:0b:
         5f:10:a2:9b:75:67:51:67:0f:0e:1d:16:24:09:bf:b2:2b:0c:
         bb:e2:17:94:51:58:d9:51:fb:22:0b:7e:a5:9a:f3:0f:7a:91:
         80:15:84:1c:11:92:56:a1:c1:a2:d7:ba:59:13:1a:96:4b:67:
         c8:9a:f2:be:9f:47:ad:b5:01:58:cf:fb:86:d5:d8:5e:41:17:
         5f:d7:25:b0:4d:38:20:82:47:d3:8b:e7:5e:36:32:93:a2:75:
         25:2e:41:f2:a7:d3:b1:72:44:30:55:0b:e0:4a:0c:5b:f4:9f:
         86:7b:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org