Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/031cbe44d04a3cc184d587f7bd6a6c12d8fb1e0f.roa
File:                     031cbe44d04a3cc184d587f7bd6a6c12d8fb1e0f.roa (raw, json)
Hash identifier:          Uf3XCzJlyWWqdbSxIa8T1Sr3DwH7G0ICoMtyW6WU/NA=
Subject key identifier:   09:A7:5A:E1:69:D1:62:4D:F7:2E:3B:28:B6:D0:DF:40:82:FE:83:8D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0BB15E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/031cbe44d04a3cc184d587f7bd6a6c12d8fb1e0f.roa
Signing time:             Tue 04 Oct 2022 04:14:48 +0000
ROA not before:           Tue 04 Oct 2022 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766302 (0xbb15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct  4 03:00:00 2022 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=031cbe44d04a3cc184d587f7bd6a6c12d8fb1e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:02:96:0f:21:d3:e2:15:fe:bf:60:80:90:
                    4f:75:35:1e:ee:4e:7c:16:69:d7:8c:1d:b5:cf:0b:
                    e5:eb:6e:4a:56:d5:e0:56:77:c0:86:20:95:32:c1:
                    ed:0e:dc:0c:a8:62:25:d8:9e:ae:e5:ed:d5:d4:21:
                    b0:0f:20:66:27:16:07:f5:e6:bf:16:29:3f:38:fa:
                    34:0a:f7:8a:89:8a:3a:3b:35:9a:d3:8f:d3:59:4b:
                    7f:7a:43:17:3a:19:52:13:1d:19:75:ce:21:ed:51:
                    f8:37:9c:80:26:b3:51:7b:e4:c6:bb:b3:82:53:75:
                    d6:39:95:20:20:32:7b:30:7e:a6:14:ae:14:43:cb:
                    48:0a:36:00:f5:73:94:09:44:82:52:16:fc:8d:c7:
                    18:7d:ca:40:9d:21:9e:2b:b2:ae:50:9c:8f:e5:35:
                    4c:13:70:69:76:5e:af:74:13:ee:51:8b:8e:bb:bc:
                    0c:ca:ce:72:2f:ad:a8:bc:e9:8f:7c:8f:fd:97:74:
                    93:cd:0d:0a:5a:62:df:a0:fd:e8:71:b1:f3:50:ac:
                    0a:6a:8f:46:65:8f:d1:13:35:48:e8:b3:2f:b7:fe:
                    7f:e2:bc:a7:72:ab:95:48:34:f2:9a:1a:21:e9:54:
                    71:0e:17:aa:53:bd:ab:5c:08:6f:61:e7:31:ac:d5:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A7:5A:E1:69:D1:62:4D:F7:2E:3B:28:B6:D0:DF:40:82:FE:83:8D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/031cbe44d04a3cc184d587f7bd6a6c12d8fb1e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:c8:db:52:1b:44:71:4d:52:75:e9:60:5d:9b:a3:ef:4d:
         1f:8e:91:f5:bf:47:78:4a:99:c7:58:bc:af:11:32:6e:51:6f:
         17:85:e2:88:ea:af:00:3d:b8:34:c2:ed:17:01:1f:09:6e:8b:
         d3:c0:35:9e:81:20:30:91:1b:7f:b6:c2:bb:f5:e9:9d:77:0a:
         f8:c4:4a:e8:27:9c:fd:21:1d:44:43:80:02:9e:14:db:2f:ba:
         95:10:05:9c:26:d1:96:2a:71:8e:85:3e:c3:a2:21:1c:b5:38:
         d8:1c:66:e4:75:6d:85:97:8b:81:5d:d4:f3:a0:2e:54:ae:06:
         11:7d:31:ff:26:0a:a6:18:fd:d8:99:e3:80:c1:9a:de:68:d1:
         e1:78:78:46:01:a6:d9:a9:73:c1:5a:61:9f:a7:db:08:cb:7e:
         ed:9c:e3:80:ba:fc:28:c5:2f:84:b8:85:97:9c:4c:48:f8:ae:
         3e:3d:e1:75:c2:fb:45:9c:ed:02:26:24:18:9b:69:94:03:9b:
         9a:dd:ec:b4:d1:30:ed:80:17:bf:82:ba:1e:38:54:71:13:34:
         8b:d8:5c:01:e8:f3:b1:f3:c2:e7:8f:42:97:3a:d4:b4:29:03:
         47:85:e0:f7:79:94:ee:6a:3f:a5:51:35:a2:26:2d:a0:43:8d:
         81:ad:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org