Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ecdb0deae7ce4bbd0b55b2ae722923b6805e7333.roa
File:                     ecdb0deae7ce4bbd0b55b2ae722923b6805e7333.roa (raw, json)
Hash identifier:          fPe/d1D4ClUoxdA/Bf929g/3x2LAqhxTbOHF1Jjybio=
Subject key identifier:   52:47:2E:82:03:70:7C:84:D3:14:07:D3:13:83:6C:03:5C:1E:65:79
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       090E27
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ecdb0deae7ce4bbd0b55b2ae722923b6805e7333.roa
Signing time:             Thu 11 Aug 2022 02:01:23 +0000
ROA not before:           Thu 11 Aug 2022 03:00:00 +0000
ROA not after:            Fri 11 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593447 (0x90e27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug 11 03:00:00 2022 GMT
            Not After : Aug 11 03:00:00 2023 GMT
        Subject: CN=ecdb0deae7ce4bbd0b55b2ae722923b6805e7333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:33:2d:05:f5:3b:27:fb:22:a0:ee:ce:3f:
                    32:ce:ee:6b:ed:90:a3:47:2e:16:02:8c:87:32:0a:
                    d6:36:1f:69:ae:12:b0:92:8d:ca:2c:95:47:ae:85:
                    ec:05:17:2d:3a:8e:e3:5d:1a:77:ce:53:c6:cd:18:
                    36:78:b6:62:94:b7:ba:fa:fe:78:93:9e:da:14:46:
                    c5:29:12:2c:c9:88:3b:b0:b3:1a:50:58:35:4e:23:
                    19:19:77:e5:0b:1f:b4:b6:00:68:4e:25:61:82:ad:
                    ab:1c:ba:c7:8c:3b:c7:47:6e:c4:fc:9a:9e:28:db:
                    be:dc:d8:91:d6:8e:f7:09:f1:ee:24:c3:34:cc:2b:
                    50:f7:e6:66:da:d7:40:91:43:b4:ea:ef:85:df:83:
                    21:c6:91:e3:47:82:d1:7d:ee:4f:b6:09:a2:a9:40:
                    11:05:4a:38:d1:75:4e:e1:6f:bb:e2:b8:03:92:7b:
                    e1:cb:d8:1e:ad:17:5a:08:80:d6:97:8c:92:1c:f9:
                    a5:11:31:c4:be:30:2b:ca:42:03:15:68:45:2c:06:
                    a0:9f:9b:13:a7:b7:e9:f0:44:d4:53:69:d4:b5:ea:
                    52:0c:af:8d:f0:c8:d4:3f:19:4a:57:b0:7e:44:f3:
                    7c:18:b0:16:97:40:22:f9:b1:d5:c6:a3:5f:11:3d:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:2E:82:03:70:7C:84:D3:14:07:D3:13:83:6C:03:5C:1E:65:79
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ecdb0deae7ce4bbd0b55b2ae722923b6805e7333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:4c:43:d1:dd:33:a5:d0:ad:7f:a5:99:5d:fb:fb:c3:55:
         30:b0:4b:97:11:c2:22:2d:b1:5d:f6:f8:f2:1e:d2:6d:24:f2:
         ce:68:78:a6:a4:ee:c6:ae:02:86:52:5d:fd:b9:91:bf:5e:8d:
         4f:6b:a9:58:fd:c4:93:64:43:42:de:bd:f0:0f:74:09:8d:0c:
         2d:6b:0d:cf:f0:90:61:64:cd:ab:45:55:55:45:ab:a4:90:6b:
         a4:3e:ec:f9:0c:22:e4:2e:2a:8f:8e:4a:a5:69:94:8d:0a:e4:
         4f:62:e4:f6:f5:90:7e:ec:d8:86:9c:13:0e:4c:68:10:e9:0e:
         48:b7:60:fd:94:f2:3a:c7:8a:ed:6f:70:cc:01:ed:74:be:83:
         81:15:99:ad:dd:c0:31:77:84:65:bd:7d:b8:d2:7d:e1:78:80:
         f9:4b:de:9d:a2:e1:1e:cd:f6:57:4b:aa:77:5a:16:41:9a:2f:
         92:7d:1f:fd:f3:d1:25:fe:65:1f:e3:fc:46:95:be:80:73:e7:
         8d:92:98:f2:bb:fc:d4:4d:90:0a:4b:ab:95:90:01:d3:73:c8:
         9c:96:d7:c8:9f:39:f4:a4:f2:e0:aa:4e:10:66:89:ca:d7:5f:
         b6:ef:a5:dd:36:b1:9e:b6:9c:29:72:41:8a:47:7e:8c:ba:3d:
         ed:aa:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org