Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f6c3b4a4bdde16bcda28cdecd17665e587099cb9.roa
File:                     f6c3b4a4bdde16bcda28cdecd17665e587099cb9.roa (raw, json)
Hash identifier:          Fa7rraH35ii5BNwjIA6ffTCxNDT9qGJfglYe0dGjiv0=
Subject key identifier:   95:30:BF:B4:B8:47:88:7C:D9:AC:24:BB:22:6A:00:52:B5:1C:B3:F4
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       D0C2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f6c3b4a4bdde16bcda28cdecd17665e587099cb9.roa
Signing time:             Mon 07 Feb 2022 03:56:23 +0000
ROA not before:           Mon 07 Feb 2022 03:00:00 +0000
ROA not after:            Tue 07 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53442 (0xd0c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  7 03:00:00 2022 GMT
            Not After : Feb  7 03:00:00 2023 GMT
        Subject: CN=f6c3b4a4bdde16bcda28cdecd17665e587099cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:ab:b9:32:a7:39:cb:f3:64:0e:d9:a5:48:
                    49:4a:76:c5:15:c3:24:c1:f0:8c:b4:bd:d5:05:41:
                    e4:92:b0:95:41:6c:6f:d4:ac:71:7d:7a:dc:57:0e:
                    50:09:c3:01:b8:57:4d:d6:34:e4:28:d0:2c:91:5c:
                    de:94:85:4a:10:78:29:14:e9:03:5d:29:01:c1:85:
                    32:07:b9:ce:35:74:8e:a5:cf:c4:bd:e1:2d:30:b6:
                    37:f3:a0:91:ae:96:07:0d:d9:88:6a:8c:b9:b1:70:
                    00:35:fb:c4:86:25:2a:8b:2a:04:8b:26:d9:a4:74:
                    5b:34:50:23:7e:3f:db:9a:39:c8:d8:37:4d:c6:08:
                    c4:4c:68:77:a6:bc:f7:08:86:c5:5f:6b:c3:3f:47:
                    18:d7:90:bd:b2:3f:c9:d0:2e:88:6c:1c:9e:2f:51:
                    11:13:56:9c:04:f5:f8:e9:2e:57:5c:e0:69:fb:32:
                    be:fa:85:cf:aa:2d:2f:a4:0f:94:e6:a2:15:f6:80:
                    f6:e1:f1:68:72:59:2b:d3:91:36:95:fe:93:93:65:
                    ea:17:4e:91:6a:c7:0c:b8:e6:0a:da:c8:fb:fa:92:
                    7a:1c:8a:83:3a:e7:b6:7e:8f:2c:8f:f7:09:75:48:
                    4c:86:87:f7:af:a4:f2:23:01:fe:a9:01:98:ba:70:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:BF:B4:B8:47:88:7C:D9:AC:24:BB:22:6A:00:52:B5:1C:B3:F4
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f6c3b4a4bdde16bcda28cdecd17665e587099cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:02:76:fd:fe:37:d3:98:06:f1:ad:70:8f:88:f5:39:4a:3c:
         61:15:d1:79:72:ec:82:d9:5f:0f:9c:6b:c1:2d:fb:62:ff:ed:
         aa:26:c6:e7:20:bf:33:44:1c:61:b0:56:01:15:60:8c:9a:71:
         1c:1b:b2:3a:da:4d:0a:d7:1e:15:31:31:54:44:46:e7:40:33:
         01:8a:13:a9:99:84:fc:78:ea:ad:1f:63:22:f8:e5:21:7d:71:
         13:71:99:08:f4:6b:00:74:5f:84:49:75:a1:3d:ee:a9:a5:52:
         d3:c1:38:39:88:41:26:ab:46:c0:fa:36:39:bd:22:fe:62:a4:
         f3:27:88:25:17:0f:80:33:2d:83:55:44:6d:3b:b7:42:18:9f:
         90:98:18:11:5b:a3:8c:9b:48:14:9c:c6:9c:e2:b7:e0:32:c0:
         89:8b:e2:15:bf:f4:6c:b1:9b:8f:d0:bb:8e:ce:81:3a:df:d4:
         70:06:22:73:54:a6:88:5e:11:2c:02:83:9b:4b:d9:13:6f:b1:
         6b:83:22:f7:ac:8b:a3:47:9b:49:23:86:91:a5:24:2f:09:1d:
         25:23:66:4c:ee:4e:63:36:18:7c:8c:5a:9b:4f:ff:ba:f5:ec:
         38:24:88:60:79:b4:3b:e2:ec:53:73:92:f4:2f:69:a7:fb:0a:
         7c:f8:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org