Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ea6d83948e9b5bae30a5f5b5cd9438863ca20c74.roa
File:                     ea6d83948e9b5bae30a5f5b5cd9438863ca20c74.roa (raw, json)
Hash identifier:          Ta/tcunAt9UaMuGZkqffv2G6m0SUcz8YRChWoa+xqS0=
Subject key identifier:   CA:D0:1E:D8:FC:0E:60:C0:55:EA:AF:5E:86:41:86:4C:AA:72:54:8A
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       09291B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ea6d83948e9b5bae30a5f5b5cd9438863ca20c74.roa
Signing time:             Sat 13 Aug 2022 05:28:16 +0000
ROA not before:           Sat 13 Aug 2022 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600347 (0x9291b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 13 03:00:00 2022 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=ea6d83948e9b5bae30a5f5b5cd9438863ca20c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:e4:ad:cb:08:b8:9d:46:56:19:d2:cc:89:
                    33:6e:3e:92:c0:c5:6e:16:64:7f:38:6c:5a:2e:d7:
                    79:16:7b:31:b9:64:3b:e8:b9:06:2d:1a:fa:33:60:
                    ab:16:0d:94:7a:83:0f:ab:b4:9d:20:9f:80:c0:2b:
                    3b:e8:a8:bf:f2:20:00:a8:4e:cd:da:35:72:d2:9e:
                    dc:7a:c7:5b:7d:75:de:27:44:c1:ca:fb:0c:96:8b:
                    ac:a4:39:5e:e1:0f:33:b0:a3:ab:8c:cc:00:8e:84:
                    4a:99:48:90:c9:b4:39:c6:5c:31:5a:f3:66:81:f5:
                    0f:e9:a0:54:16:d6:f0:5b:6b:be:9f:7d:de:2e:0b:
                    43:e5:da:b1:b7:b4:41:19:3a:a8:b9:8f:51:9a:30:
                    d5:80:46:44:2d:c8:6c:3d:37:98:3d:ee:05:57:54:
                    5a:14:09:e4:a7:2f:06:b5:ee:23:c0:de:d8:fe:de:
                    e3:15:bb:8e:8c:79:d3:d5:38:e8:63:85:85:4a:0f:
                    27:09:29:11:4e:4d:05:c8:4c:6c:e8:d5:8e:3a:b0:
                    83:5e:57:ff:f4:01:23:0f:fd:38:29:34:e8:c2:a7:
                    bb:0b:c2:a2:ea:87:da:5a:85:f4:b8:38:b1:f2:1a:
                    e9:4b:95:21:92:20:d0:0e:7b:4a:1c:e2:64:72:fd:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D0:1E:D8:FC:0E:60:C0:55:EA:AF:5E:86:41:86:4C:AA:72:54:8A
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ea6d83948e9b5bae30a5f5b5cd9438863ca20c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:5b:52:48:ef:cf:9c:a1:f2:85:f0:9c:d9:33:0e:42:b5:
         eb:45:c3:d5:93:38:2c:79:4b:f9:c8:9e:0c:0b:16:2e:db:1b:
         25:b4:eb:dd:02:81:4c:80:af:94:28:9f:fa:93:d6:4a:93:a8:
         e8:3e:c2:3b:0b:4c:77:fb:47:7b:76:82:86:64:48:d2:01:4d:
         16:e6:d5:fa:b5:bf:67:cd:0c:c8:b1:c4:19:98:1c:c9:02:35:
         10:de:e7:b2:c1:3a:cd:ae:f9:60:21:ab:e9:61:51:dc:02:07:
         17:63:54:f0:36:87:80:3c:55:73:ff:b4:fd:c7:02:7b:9b:c6:
         20:b2:dc:9c:af:50:16:14:0b:9b:c9:05:9e:a0:f3:9f:b6:52:
         66:e5:ab:ed:b6:af:41:f7:53:58:e1:c8:22:60:a7:bb:d6:21:
         1b:a5:3c:17:aa:a8:26:7c:92:11:72:ef:88:04:4c:f5:44:a4:
         ea:72:3a:fd:b0:58:84:8b:34:0e:41:86:78:77:05:63:7e:35:
         2f:69:32:0b:6c:18:19:53:2f:8c:20:be:ab:35:a0:ca:a7:d5:
         9f:09:86:62:46:04:8e:d7:53:af:de:6c:6d:2b:87:d3:db:2c:
         0a:36:e4:23:42:03:ee:4f:3f:db:2f:32:30:ed:f8:7f:f5:7b:
         7a:1f:27:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org