Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1d9f541c4226905f82fd3fc4a9c7e5886cc9ac3b.roa
File:                     1d9f541c4226905f82fd3fc4a9c7e5886cc9ac3b.roa (raw, json)
Hash identifier:          0JHiFRiGQU4zk0cQcvJxLUU/QpdENaHhg/VNA80kDU0=
Subject key identifier:   3C:CC:0B:5E:85:92:41:71:92:E7:96:2F:90:31:28:94:D7:6C:AD:BD
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       076192
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1d9f541c4226905f82fd3fc4a9c7e5886cc9ac3b.roa
Signing time:             Sat 02 Jul 2022 00:20:54 +0000
ROA not before:           Sat 02 Jul 2022 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483730 (0x76192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  2 03:00:00 2022 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=1d9f541c4226905f82fd3fc4a9c7e5886cc9ac3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:0c:cf:a5:50:1c:76:c5:cf:d1:4f:49:38:
                    6a:3b:7d:83:ea:8d:d5:63:a0:f3:4b:2e:41:d2:b7:
                    63:af:e8:b1:01:a7:2e:76:b1:12:05:b0:c7:a4:73:
                    d0:7c:a1:e8:55:dc:f3:89:4f:2a:bb:2e:0c:f8:af:
                    f5:56:8d:3c:c2:11:b8:64:3a:38:fd:ea:f6:c1:71:
                    90:a2:c1:45:8c:52:19:6d:2a:fe:50:d7:45:53:31:
                    c7:e1:1c:e9:f8:6a:d7:c4:ee:24:06:24:6a:22:64:
                    9e:a8:d2:10:4a:a4:12:48:ae:d7:b5:34:7c:ad:d4:
                    3a:73:97:56:e6:e9:30:62:6c:48:4b:22:cb:a6:b7:
                    30:38:bd:20:13:08:38:77:38:d5:20:ba:b0:cb:c4:
                    03:d8:c4:4e:c0:77:4d:69:4d:d6:88:a5:2b:5e:2b:
                    63:6e:93:b3:01:1c:82:c0:f9:59:c6:46:8b:9e:85:
                    30:f8:fc:57:bc:0c:5b:1e:66:0d:3b:09:34:74:96:
                    2f:a8:f1:e1:30:aa:1b:63:bc:4d:cc:2b:79:ee:35:
                    0c:2a:27:9c:be:d8:c9:d1:ce:81:c3:fe:11:eb:81:
                    fc:f8:ee:c6:cb:73:73:c2:9a:6c:b2:d6:d4:d0:97:
                    8c:35:c0:ea:88:37:1a:34:18:b7:13:27:2b:8d:5e:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:0B:5E:85:92:41:71:92:E7:96:2F:90:31:28:94:D7:6C:AD:BD
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/1d9f541c4226905f82fd3fc4a9c7e5886cc9ac3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:75:9b:5e:4f:a7:a2:a8:07:3e:aa:de:0f:a8:45:f8:8c:
         f8:64:09:41:31:73:86:b4:d2:2e:c6:be:cb:1c:5c:1d:2c:fa:
         bb:b9:52:b0:79:a3:94:95:8c:32:ae:1e:0b:bd:45:56:dc:b2:
         2f:d2:be:13:2f:c4:f7:08:a0:d7:5f:57:17:d7:58:3e:69:66:
         eb:51:85:ae:89:02:9e:d4:bf:45:98:f3:45:65:12:96:03:7a:
         5f:b2:ac:74:14:2c:6b:85:0e:da:22:db:58:33:78:c0:a0:96:
         81:dc:71:a5:c2:5c:cc:a2:9c:0a:bf:68:44:3c:e3:a9:18:9f:
         a4:99:6f:0f:1e:b6:31:b9:32:3f:2a:0d:1c:22:0d:35:f6:94:
         af:7e:9b:9a:56:ba:86:b8:6e:82:ca:48:06:24:a5:7d:16:88:
         32:58:6c:31:9a:c9:0f:82:e9:c9:5f:dc:11:22:47:a2:c1:71:
         19:95:3d:40:22:71:c4:f6:0b:8a:e2:a8:ee:79:a4:43:18:0c:
         a4:cf:ad:ca:1a:cf:aa:b1:c3:5b:56:fe:f1:bd:f6:5b:f7:b6:
         f2:a0:34:3c:da:f9:9d:bc:c9:6a:c9:77:b2:3b:74:d7:79:7e:
         f0:95:2b:42:80:bd:c9:13:27:d6:01:95:64:37:e7:ce:e3:cc:
         a3:4b:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org