Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa
File:                     3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa (raw, json)
Hash identifier:          OCHMfBX/fLmuhLm6x9pS/IKmKGJ5moz3s9KcRgjLkR0=
Subject key identifier:   B3:9F:00:2E:09:8A:24:18:F4:CE:A2:D7:E0:32:C6:AB:46:A2:6B:51
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       039509
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa
Signing time:             Fri 08 Apr 2022 08:13:37 +0000
ROA not before:           Fri 08 Apr 2022 03:00:00 +0000
ROA not after:            Sat 08 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234761 (0x39509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  8 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2023 GMT
        Subject: CN=3e74ccd16405336b4f4cf0d3e25b0518f463d7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:d9:71:7d:0c:48:33:c1:70:7e:e9:10:12:
                    ea:72:d1:5a:ec:6e:01:fa:ab:ff:62:c1:c5:6c:f9:
                    c9:f5:ad:b1:df:83:1a:ab:8c:69:cb:5d:41:95:af:
                    78:92:f6:c4:6e:11:a5:6b:81:73:26:15:26:b4:7c:
                    67:19:ab:34:39:83:1d:0c:b1:2b:65:20:5c:bd:3b:
                    c7:50:be:ab:08:5e:98:e4:98:1a:e2:89:7b:ae:36:
                    45:bb:2c:cf:89:f3:01:4f:02:7f:79:42:e7:2a:62:
                    41:72:c5:64:53:95:fc:4e:22:f2:08:b5:7d:d2:7d:
                    55:c0:04:82:2b:b4:fb:6b:35:82:1b:b9:27:aa:1d:
                    a7:ed:82:8e:eb:82:9a:30:a6:c9:00:f4:32:0c:e6:
                    c0:00:c5:f2:b8:95:04:cf:9a:94:cf:7f:cb:80:8f:
                    48:f1:3c:6c:e8:7f:43:91:4e:d7:d2:5b:93:f3:30:
                    9f:df:6c:89:a1:61:f6:3d:92:50:ba:ad:b2:26:a3:
                    9c:0f:76:f0:c3:85:73:29:32:be:df:f3:6d:fc:ce:
                    4f:9b:99:91:fe:a7:66:eb:e0:66:09:dc:02:59:b4:
                    37:93:7d:1b:33:7c:27:4a:0b:ca:45:92:19:cf:69:
                    7c:e3:9c:c3:85:27:09:f0:f5:82:2a:0d:08:22:63:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:00:2E:09:8A:24:18:F4:CE:A2:D7:E0:32:C6:AB:46:A2:6B:51
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3e74ccd16405336b4f4cf0d3e25b0518f463d7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:54:ea:7f:ac:07:6d:39:de:af:08:38:f4:4d:ef:e5:d2:a4:
         4e:a4:67:d6:f3:4b:d6:18:72:a3:51:1c:a2:8a:f1:b0:2c:d4:
         b2:03:cf:c7:b0:91:78:84:c9:97:99:89:43:4f:93:e4:82:0c:
         5f:03:7d:70:c9:4c:8a:77:41:19:e0:44:7b:7d:10:7f:b2:7f:
         2a:88:b9:ef:64:7a:d5:80:36:a2:0c:10:b6:ee:32:4b:17:e6:
         ac:5b:4e:59:c1:6d:86:5a:6d:2c:f5:ef:8d:6b:56:6d:bf:f7:
         3a:59:dc:8d:e5:b1:ff:e5:78:67:1d:ff:64:70:73:39:c2:78:
         a2:db:1c:49:52:0f:8f:82:86:05:cf:26:dc:2d:9b:c6:ff:2d:
         64:85:4c:6f:32:fe:ee:56:41:96:4c:f4:1d:84:41:52:a8:60:
         f8:bd:d5:5d:b1:e3:0b:2b:fe:84:4f:16:87:d1:b8:97:cb:3e:
         08:be:cb:72:f5:77:25:e8:bd:7f:70:6f:4e:96:f2:ab:08:0d:
         9c:23:93:45:b5:7c:f6:c3:71:84:6a:b1:9a:a3:47:0a:46:5e:
         2b:e4:45:15:52:95:fc:2e:ce:b1:7b:a4:9f:33:41:6a:ed:95:
         42:7b:4b:97:83:f1:f5:73:fc:bf:d5:8c:5c:c6:ab:aa:66:f3:
         68:50:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org