Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/05dbb0c3837736dc599c442d8fe146ba115dcff5.roa
File:                     05dbb0c3837736dc599c442d8fe146ba115dcff5.roa (raw, json)
Hash identifier:          L8Nu3fGuszit1Bmwa1tFaIclX1PfqR2ESOhuKZSBhh0=
Subject key identifier:   E7:5D:63:25:46:7E:21:74:3B:84:09:E8:3B:9C:57:28:F3:01:45:45
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0192C9
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/05dbb0c3837736dc599c442d8fe146ba115dcff5.roa
Signing time:             Wed 23 Feb 2022 05:23:50 +0000
ROA not before:           Wed 23 Feb 2022 03:00:00 +0000
ROA not after:            Thu 23 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103113 (0x192c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 23 03:00:00 2022 GMT
            Not After : Feb 23 03:00:00 2023 GMT
        Subject: CN=05dbb0c3837736dc599c442d8fe146ba115dcff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:16:15:76:8b:c3:31:28:64:f4:f9:fb:23:
                    6d:c7:25:ed:fc:fe:22:5d:47:d8:8f:04:1b:dd:9d:
                    21:0a:0e:98:1e:3a:49:6e:10:43:2f:48:77:8e:ef:
                    69:2f:e2:67:f6:69:e8:90:02:50:23:18:a8:bc:7a:
                    8a:ac:7b:45:63:14:83:23:ad:c4:f4:45:98:4a:08:
                    f0:60:c2:56:58:d7:ee:b4:8d:a1:d2:44:ea:7c:a5:
                    4d:82:e2:40:67:e7:d2:f6:d8:28:46:1c:03:47:96:
                    51:3e:9f:dd:bc:01:dc:3a:90:a8:b6:a2:0c:f1:59:
                    c9:51:57:cb:2f:dd:1a:08:fd:fa:0e:18:03:2c:05:
                    bb:60:41:7d:22:a8:6b:52:4e:70:a5:4a:54:49:12:
                    b1:ec:f0:cc:4c:0e:47:8c:33:d1:4f:cb:1a:f6:47:
                    ee:80:12:d1:9b:3a:6d:e6:3b:83:fd:4b:95:85:51:
                    0f:51:fd:68:5c:7b:20:26:e8:0b:ae:48:d4:0e:09:
                    63:6c:b0:8b:24:c3:e4:05:52:aa:7c:dd:5d:bf:4f:
                    cc:00:44:96:2d:65:5e:b9:ee:6e:1b:bd:9d:e8:50:
                    73:93:83:77:1a:4a:04:7f:34:4c:af:a7:ad:db:e5:
                    3e:1c:e7:29:32:88:47:1e:19:4d:18:47:01:30:a2:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:63:25:46:7E:21:74:3B:84:09:E8:3B:9C:57:28:F3:01:45:45
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/05dbb0c3837736dc599c442d8fe146ba115dcff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:4e:1e:b2:2d:fd:b1:3e:97:2d:41:b2:3b:84:c8:20:c0:
         36:8e:0f:a9:4a:04:c9:00:e4:25:15:68:15:0d:87:0a:10:4b:
         71:85:5e:f1:d5:2d:b9:65:b8:b7:ab:06:c1:b6:0c:39:7f:34:
         ef:9b:c4:9e:23:9f:b8:13:b5:57:ec:51:d3:26:64:98:83:94:
         d5:e8:45:09:06:c5:32:d1:db:bd:2a:2b:2a:66:bd:a3:20:e9:
         12:51:b9:98:16:f6:51:90:35:a9:33:28:79:3b:4b:09:58:01:
         71:1f:a4:1f:f6:21:ca:30:16:c9:e3:77:6a:86:ba:3d:87:47:
         f6:50:06:ad:62:75:84:2e:d7:09:3a:6c:50:66:83:d2:e3:d1:
         d0:0a:44:5c:ae:8d:29:b8:25:fc:fb:2c:82:6b:a6:06:8d:34:
         50:92:04:46:76:6f:62:4f:bb:5c:15:a4:78:2a:ed:8e:54:6f:
         28:2a:88:c5:10:7a:67:9a:4d:07:db:56:67:ec:fc:5f:3b:61:
         a2:ba:a4:87:43:e9:d8:9c:7b:92:69:13:56:0a:17:ae:5e:2e:
         97:79:80:95:83:c1:be:1c:75:f9:58:fe:c9:4d:9f:48:66:45:
         f7:aa:81:71:ea:8e:ba:ca:de:41:92:e9:ae:81:5d:c9:4e:72:
         df:1f:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org