Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/37c353886425387ba58044031935bb11ddd01cbf.roa
File:                     37c353886425387ba58044031935bb11ddd01cbf.roa (raw, json)
Hash identifier:          NY741OvtAGiYUvti3DLUqW+oob54V6pG8gQvl2KLHDM=
Subject key identifier:   B4:4D:FC:DE:60:AA:76:1E:96:39:37:33:D2:C0:6D:0A:14:73:37:CC
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0A979A
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/37c353886425387ba58044031935bb11ddd01cbf.roa
Signing time:             Sun 11 Sep 2022 02:16:57 +0000
ROA not before:           Sun 11 Sep 2022 03:00:00 +0000
ROA not after:            Mon 11 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694170 (0xa979a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep 11 03:00:00 2022 GMT
            Not After : Sep 11 03:00:00 2023 GMT
        Subject: CN=37c353886425387ba58044031935bb11ddd01cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:e9:f4:97:86:f8:80:5e:69:4c:e8:c3:db:
                    57:32:91:57:9f:9f:7b:81:94:67:b3:e3:30:37:bf:
                    72:b2:82:5e:37:9e:b0:d0:b5:44:fd:51:d3:fa:1c:
                    72:aa:c8:93:37:34:48:8e:a4:88:e4:29:df:1d:cd:
                    ce:fc:e6:22:f5:2b:4d:fe:d6:5b:ed:89:b2:38:8c:
                    77:b0:c4:d0:4e:62:af:5b:52:3c:f2:0c:bc:18:2e:
                    24:78:3c:1f:37:4a:71:2e:e8:19:a5:68:23:56:ff:
                    93:14:3e:f9:8a:3a:94:5a:d1:ea:e6:ca:dc:b1:92:
                    f6:db:e7:a9:7e:b3:23:5e:57:7c:28:e5:07:90:96:
                    34:bf:1d:7f:b8:c3:0e:6e:51:08:58:c9:15:95:3f:
                    b9:98:36:a8:8d:10:fc:1c:93:89:49:39:4c:46:28:
                    11:e4:d1:b1:ea:f2:23:52:38:35:d9:70:4c:bb:03:
                    da:af:dd:0a:cd:36:90:b3:93:ca:45:3f:f7:34:ba:
                    ed:51:02:98:ea:02:7c:fb:a4:b9:e5:44:35:16:c8:
                    1d:1d:fd:c4:7a:43:a7:ad:8f:0b:94:d3:52:8f:f8:
                    b1:76:ae:45:98:6f:e8:e5:52:70:65:aa:cc:7b:67:
                    c0:06:36:12:f2:81:6e:92:43:c2:54:92:5b:47:89:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:FC:DE:60:AA:76:1E:96:39:37:33:D2:C0:6D:0A:14:73:37:CC
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/37c353886425387ba58044031935bb11ddd01cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:e0:23:b0:c0:58:a7:c9:97:7b:25:d8:f6:24:87:17:aa:
         61:5e:8f:66:3e:67:24:6c:75:88:71:6d:2a:15:ae:e1:87:31:
         6f:1a:08:11:4d:6c:02:0e:a3:f8:8d:3d:47:b5:fd:7d:e1:cf:
         40:f6:f9:5b:84:bb:29:b0:58:0b:2a:92:e2:ec:10:b9:50:bb:
         4f:a2:14:3b:bb:10:f5:77:67:d9:3d:29:af:2c:97:05:65:41:
         9c:ed:53:b2:55:8c:98:2b:09:a2:b8:ee:5f:a0:bd:19:e1:60:
         be:bb:66:63:f6:7c:26:2f:35:71:cf:d9:c1:70:e5:fa:56:79:
         e6:ad:dd:47:2a:4f:e1:ff:e4:93:dc:d4:7b:ec:4e:17:50:53:
         66:9f:da:26:d5:dc:47:36:c2:f4:b8:52:bf:d4:d5:d5:3e:f6:
         51:de:bd:76:b7:98:14:ed:14:33:71:6d:80:4e:ff:79:18:2c:
         d4:d5:2c:65:60:38:8a:74:ed:a2:ef:be:97:4a:be:57:1a:6c:
         7e:42:d3:c9:53:4f:18:8f:57:a3:6a:51:10:7b:14:84:c6:89:
         4c:d9:06:4d:4c:c8:74:6a:b6:95:09:1a:41:22:2b:21:31:11:
         08:6c:a8:9c:c8:2d:94:7a:50:6d:e1:28:9c:e6:6a:82:54:ab:
         98:35:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org