Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f9344e230261340748b09891848f5dfe7249ccea.roa
File:                     f9344e230261340748b09891848f5dfe7249ccea.roa (raw, json)
Hash identifier:          TBaZL717kgICGatkGeHgYbXemNhT0+f9fswMFwoTG6M=
Subject key identifier:   81:88:15:05:A6:FA:81:80:DB:4D:11:B4:A5:98:DB:5C:A6:78:4D:A8
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       076B3B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f9344e230261340748b09891848f5dfe7249ccea.roa
Signing time:             Sun 03 Jul 2022 00:26:09 +0000
ROA not before:           Sun 03 Jul 2022 03:00:00 +0000
ROA not after:            Mon 03 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486203 (0x76b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  3 03:00:00 2022 GMT
            Not After : Jul  3 03:00:00 2023 GMT
        Subject: CN=f9344e230261340748b09891848f5dfe7249ccea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:ee:44:21:2c:86:28:25:c9:72:3c:02:c8:
                    91:cd:01:b2:25:f6:22:92:44:37:3e:7e:10:5e:2d:
                    14:3c:1e:f1:95:4a:44:2e:ce:03:4f:5b:4c:23:13:
                    45:f2:fc:48:9d:9f:66:12:0c:04:d6:e2:22:58:4b:
                    65:fb:24:a6:83:b3:53:cb:ad:f8:9b:26:0e:06:bc:
                    db:79:98:70:61:c0:7b:82:c9:e0:79:1f:1f:52:af:
                    8f:25:e6:dc:92:26:af:f7:b0:c8:15:a4:db:e1:14:
                    4d:79:98:f3:d0:20:e1:0b:8c:24:b6:2e:a9:a4:29:
                    65:b9:42:ac:04:41:1f:30:b3:b3:9a:b4:6b:1d:12:
                    c2:bc:dd:94:49:7f:eb:27:39:ad:87:b2:28:17:5d:
                    6a:62:45:05:97:ab:fc:42:d6:8a:b0:36:b9:16:88:
                    f6:dc:b3:d4:16:1e:8f:08:0d:be:2a:82:32:68:3f:
                    20:4b:50:b9:f0:5f:1b:0d:c8:0a:bc:23:a8:31:ab:
                    d4:36:44:db:84:09:c8:2f:67:0c:7c:60:e1:23:a2:
                    70:72:e9:c0:42:17:c4:40:60:03:74:c9:e1:9c:f3:
                    b9:6f:02:2d:f1:d5:a2:ea:a9:41:b1:0d:fc:14:61:
                    85:10:b6:f1:d1:db:d9:02:50:2f:1f:b0:9e:94:af:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:15:05:A6:FA:81:80:DB:4D:11:B4:A5:98:DB:5C:A6:78:4D:A8
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f9344e230261340748b09891848f5dfe7249ccea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:6f:df:d4:e2:7e:c4:e0:3c:27:c6:af:a1:1a:b7:5b:8a:
         5c:9d:10:15:cc:ba:32:eb:2e:10:7f:75:b6:ec:1e:22:8e:47:
         87:f6:51:db:61:f2:82:a8:78:9d:61:7f:78:e4:c7:22:1a:4a:
         f9:19:d2:7d:1a:47:93:e2:02:a5:4c:cf:be:8b:03:c6:e6:a9:
         38:da:66:2e:90:02:d8:35:08:52:6d:85:65:8a:4c:af:73:c9:
         23:49:5e:7f:e2:70:3e:b1:cb:0f:66:0e:fe:b6:07:27:80:0f:
         92:26:f6:37:b8:7a:4c:af:95:c6:fe:34:fb:f2:d5:cd:36:3d:
         0c:6f:fc:d1:e3:89:1c:e0:d5:1e:a2:97:5e:8f:93:00:83:2e:
         d8:00:d8:cb:4f:ac:e7:31:d8:38:56:78:23:13:5d:d7:fb:d2:
         0c:9f:d8:cb:04:60:36:95:3e:d5:5a:8b:3b:25:cb:f1:2d:c0:
         37:fd:05:13:db:74:c4:84:8a:45:bf:d2:25:5a:fc:d7:2c:a2:
         10:08:a1:5f:1c:96:03:99:a7:b0:dd:6d:7d:ee:27:45:d1:8c:
         51:9f:55:99:29:c8:7c:47:1f:85:56:21:69:12:7c:d2:0b:ab:
         e9:60:c1:32:b4:71:49:6d:26:ae:e6:63:0e:ae:07:e5:bb:b7:
         43:5c:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org