Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3fb1aa8df04ca4453c80412e720ae16c15cbf940.roa
File:                     3fb1aa8df04ca4453c80412e720ae16c15cbf940.roa (raw, json)
Hash identifier:          AFfkrtA2Zr9JZnBZ0O6R49PZ9C1k8dKp/bv4EEaVqUc=
Subject key identifier:   C1:A6:7C:73:60:88:34:F5:F9:A5:5A:36:65:AA:A1:16:3A:8E:AA:54
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       020FF2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3fb1aa8df04ca4453c80412e720ae16c15cbf940.roa
Signing time:             Mon 07 Mar 2022 02:46:09 +0000
ROA not before:           Mon 07 Mar 2022 03:00:00 +0000
ROA not after:            Tue 07 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135154 (0x20ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar  7 03:00:00 2022 GMT
            Not After : Mar  7 03:00:00 2023 GMT
        Subject: CN=3fb1aa8df04ca4453c80412e720ae16c15cbf940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:2b:b3:69:18:33:0d:9d:4e:77:0e:34:c1:
                    eb:ce:89:5a:cd:5f:6f:52:e2:97:5b:6f:76:90:29:
                    65:11:31:08:8d:09:38:16:17:bd:4c:d9:6d:91:b4:
                    cd:8d:b3:e8:81:7e:ad:fd:08:e6:e6:88:80:96:19:
                    c1:be:5c:ff:5b:f2:25:09:5c:6d:37:ec:9b:d8:9c:
                    5b:c9:0b:1d:c2:13:f6:1e:e9:55:25:87:24:ae:59:
                    eb:f8:1d:e5:72:00:6c:75:fa:39:10:9a:7f:38:45:
                    3d:e7:7c:7c:51:e0:c5:16:d3:1b:97:57:3c:35:9e:
                    90:e9:b3:f7:2f:28:3e:6e:4f:8d:5a:28:4d:c3:9a:
                    4a:4a:6f:98:1d:db:78:a2:82:09:73:67:30:e3:8d:
                    48:a9:21:e2:77:5d:3d:7a:33:3e:96:99:3c:35:d1:
                    ac:a5:6f:5e:a0:e2:42:0a:33:0c:13:2d:88:d4:00:
                    0b:e6:0e:f8:f2:de:40:55:1f:15:30:8a:4f:8b:0f:
                    e6:e3:6f:cf:90:e2:a3:2d:e8:d4:d4:86:c9:7e:00:
                    5a:fa:3e:c3:4a:d9:af:68:bc:48:05:04:59:30:36:
                    34:b0:ed:de:52:11:47:3a:0f:ec:94:48:38:cd:e2:
                    e0:76:ed:a9:fd:be:5a:ee:bf:a5:cb:3f:6d:1e:d0:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:7C:73:60:88:34:F5:F9:A5:5A:36:65:AA:A1:16:3A:8E:AA:54
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/3fb1aa8df04ca4453c80412e720ae16c15cbf940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:45:4f:32:fe:79:d3:a3:db:4f:78:66:95:4a:2f:5c:ce:4d:
         cf:9c:05:79:13:a2:a0:38:73:05:53:36:ba:9b:bd:29:87:19:
         35:ee:3d:2a:14:25:24:f2:ca:b2:57:00:1c:2b:2f:9f:94:53:
         77:e4:16:90:db:0b:89:e1:de:6f:0d:81:54:d5:8b:64:ac:6b:
         36:73:11:2c:b9:1f:f2:3d:2e:73:ab:57:2a:78:13:41:cc:f7:
         ce:27:56:d6:ed:5d:5c:08:60:42:c1:19:ca:89:96:f9:23:75:
         0c:20:ff:1b:3d:d1:1e:ad:74:d5:34:9e:bd:f6:b0:44:80:19:
         be:7f:5e:e9:8a:2d:0a:6e:29:d2:fe:22:e2:84:e1:6c:23:67:
         c1:56:e9:6b:d7:5d:1c:b6:e8:ac:ed:eb:2a:a6:a6:6c:0f:b5:
         d5:e0:0b:96:43:9e:3c:79:db:67:09:1a:f6:8f:f8:51:a5:4e:
         2b:ca:d2:ac:59:c0:c2:cf:8d:3e:70:d7:bd:06:5b:ee:09:95:
         17:a1:76:d5:4a:ef:ae:1d:92:b7:dd:7a:24:92:24:27:ac:a8:
         a1:dc:65:ed:ff:16:72:f3:0c:05:f4:cf:cc:b1:05:ec:85:6b:
         b2:b5:4c:c6:87:e7:c4:4e:70:87:87:81:20:5c:ea:54:03:fd:
         14:0a:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org