Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/376db48327551fffb276737f8e22dc80aa6d45f2.roa
File:                     376db48327551fffb276737f8e22dc80aa6d45f2.roa (raw, json)
Hash identifier:          X+x4iXFo5zCROOwqbsL4XBWbVNW0G/dRUCdD979BbhU=
Subject key identifier:   87:7F:05:4D:A8:BF:0A:6F:F2:BD:E0:1F:32:2E:6D:87:A5:79:29:20
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08C622
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/376db48327551fffb276737f8e22dc80aa6d45f2.roa
Signing time:             Thu 04 Aug 2022 02:20:06 +0000
ROA not before:           Thu 04 Aug 2022 03:00:00 +0000
ROA not after:            Fri 04 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575010 (0x8c622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug  4 03:00:00 2022 GMT
            Not After : Aug  4 03:00:00 2023 GMT
        Subject: CN=376db48327551fffb276737f8e22dc80aa6d45f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:8d:d6:4a:c4:4f:70:54:82:ae:4d:3e:79:
                    e8:9f:22:85:ef:f1:da:72:cb:c7:c6:cf:f1:56:c0:
                    28:b5:da:97:b9:9d:dd:7c:50:1c:0e:78:07:f3:62:
                    36:09:1f:ea:4c:d9:22:b9:b4:dc:3f:52:b4:61:e8:
                    09:68:48:4c:f5:11:bc:73:09:9b:ed:1e:9b:e9:8b:
                    40:7e:67:9c:ef:56:18:d4:89:ea:90:37:c6:fa:32:
                    8d:e4:81:03:7e:e4:3a:05:88:aa:60:6d:52:47:50:
                    f4:92:b9:a1:11:ed:f7:22:ae:9b:74:77:6c:cd:67:
                    53:49:37:8a:3e:13:cf:d8:20:74:b0:ac:67:b0:ad:
                    1b:c8:62:f5:b0:b3:14:0d:b3:e9:09:41:fc:95:82:
                    9a:2e:40:b0:e9:6f:d5:a8:06:28:1c:14:f5:bf:2c:
                    a1:e1:c1:7b:30:fc:71:dc:37:42:17:b8:93:d8:ff:
                    cf:e9:21:59:80:b3:77:eb:3c:31:0e:64:b0:8f:bd:
                    a9:ba:21:1b:89:49:3e:32:5a:c9:c9:41:7d:c3:db:
                    58:ae:0c:7a:89:f0:ff:15:60:9f:1a:0d:36:c6:00:
                    c4:04:d4:c9:c3:39:d4:06:0f:28:3f:bd:e2:f1:27:
                    ba:a1:9b:51:58:b5:d8:5c:8d:14:56:bb:e2:fb:14:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:05:4D:A8:BF:0A:6F:F2:BD:E0:1F:32:2E:6D:87:A5:79:29:20
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/376db48327551fffb276737f8e22dc80aa6d45f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:07:08:43:13:f6:30:29:44:c0:6d:b0:4e:96:58:8f:00:e7:
         36:61:94:ab:cf:42:d6:49:74:a8:ab:d9:1d:93:2a:61:e3:ac:
         bb:70:36:f7:f5:64:b9:d6:22:03:2d:69:df:5a:f1:21:f8:32:
         40:bd:16:f1:7f:c2:49:e6:f8:62:a5:79:2a:4b:7d:3f:dd:d4:
         80:63:ea:d7:d0:fc:36:e9:5f:49:7f:4e:dc:63:b0:73:91:82:
         91:80:53:d5:37:48:0c:de:cf:37:d5:be:5c:2e:2b:3b:a2:b3:
         67:c4:60:2f:07:5b:d0:fa:a4:d3:34:c8:eb:65:f2:cd:bd:9b:
         42:3f:a6:9f:e3:f1:08:c1:e1:74:bb:a1:35:a5:7f:bb:a4:07:
         c7:3e:5d:3d:ef:5a:55:9b:50:17:9d:14:aa:ba:4a:2b:47:b5:
         16:d2:bb:52:5d:fa:e9:f6:eb:ef:c8:90:6f:da:83:fd:51:8f:
         01:d5:e4:cb:51:58:8d:1e:de:ed:d1:c1:3c:56:4b:be:5e:4e:
         23:bb:9c:98:ef:9b:f4:73:13:47:b5:e5:c6:4a:71:57:6d:5a:
         39:67:b8:81:7b:9a:44:27:14:9a:b6:4f:32:6b:32:42:8c:8f:
         07:fc:53:a5:ed:4c:2b:45:39:0e:af:02:b6:35:24:91:2c:9a:
         e8:aa:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org