Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0c7327dabcf99b2383d6e77ed48d331da91d346f.roa
File:                     0c7327dabcf99b2383d6e77ed48d331da91d346f.roa (raw, json)
Hash identifier:          2EHEZPksc5OFFmb/Xx1BUVVgu322YXIX91jq5qXYHJw=
Subject key identifier:   61:F7:34:00:74:46:FC:96:10:78:96:F2:65:C4:09:6C:27:91:90:16
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04EB3C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0c7327dabcf99b2383d6e77ed48d331da91d346f.roa
Signing time:             Thu 12 May 2022 01:04:36 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322364 (0x4eb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=0c7327dabcf99b2383d6e77ed48d331da91d346f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:2e:1b:86:b6:ce:e4:7e:fb:6c:50:dc:9e:
                    ab:e1:3b:b6:98:14:fd:33:ea:9c:48:e4:49:6f:38:
                    ec:76:5d:09:80:df:95:6d:71:0e:3d:f1:a4:e1:56:
                    d8:22:1e:57:24:02:95:94:8f:11:4c:d0:35:f8:84:
                    b3:36:41:fb:9c:96:f7:f4:48:94:6d:20:3c:fe:55:
                    b9:23:79:ef:88:99:58:c3:7a:4b:80:50:8b:05:8e:
                    3e:2c:00:a6:54:a2:45:4d:32:aa:0f:eb:e7:8a:c3:
                    5b:36:d5:d3:08:ef:ed:4f:78:b3:ee:7e:42:15:3e:
                    75:e8:13:80:0b:1c:75:1e:55:52:74:35:e3:35:31:
                    95:61:70:41:44:26:b2:c3:fb:de:ad:64:47:30:85:
                    5c:be:b1:13:ba:50:5d:b0:2d:49:10:61:9f:77:79:
                    8d:a0:b6:d0:9f:00:8a:c8:65:6f:1a:c2:50:c2:23:
                    f5:95:20:b7:5b:ca:1f:01:57:45:af:a5:3b:82:f9:
                    90:49:df:67:bf:56:7f:e8:20:e5:5b:ba:10:30:ba:
                    44:79:ee:c1:fa:f7:cc:6b:06:c5:2a:f2:9f:ee:54:
                    32:e5:28:19:df:ac:9e:fa:46:b0:91:52:cd:cc:e2:
                    d8:90:e1:77:a3:f4:06:5f:b7:83:15:2d:26:66:15:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:34:00:74:46:FC:96:10:78:96:F2:65:C4:09:6C:27:91:90:16
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0c7327dabcf99b2383d6e77ed48d331da91d346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:64:64:aa:c8:2f:06:25:2b:27:6d:a7:3f:7f:11:e5:29:fa:
         71:af:8c:41:91:20:17:9c:9b:27:08:b9:fd:da:a2:cd:5c:37:
         e4:b0:ab:23:f5:73:91:66:fe:e8:c1:1d:b9:40:22:ca:a4:9c:
         ba:1a:17:b2:b6:7b:d0:a5:94:7e:6f:8e:ce:91:ad:90:aa:f5:
         3a:8d:d7:ab:9c:21:1a:0d:6d:09:d2:fc:1f:c9:5a:1b:32:d7:
         8f:2f:c3:8c:e0:82:1d:38:ce:10:d4:2f:34:54:59:17:1b:c8:
         c2:7b:83:b5:1f:ce:f4:dd:e0:85:d9:65:23:04:c7:54:de:47:
         c7:00:e3:2b:ec:0f:62:a4:3b:a5:c8:42:14:10:a4:1b:c8:da:
         27:79:d7:5b:0f:9c:be:8c:b5:81:c1:bc:d9:e9:47:ce:f2:f2:
         42:4d:c4:69:d6:76:23:85:f1:8a:34:17:22:c6:49:23:29:5d:
         eb:0b:b8:4d:ef:4f:69:bf:67:53:09:46:64:a1:e2:50:e1:aa:
         3f:f3:55:7e:5a:df:2b:9a:d6:4a:fc:46:0f:de:06:28:ff:50:
         65:3b:02:40:9a:b4:e0:33:51:ac:ba:93:a3:50:02:ce:0c:d4:
         0b:21:a9:c5:a0:89:55:c7:9f:33:06:6f:c6:f6:1b:29:e7:a4:
         51:5f:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org