Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/414a7664869b2170e6ea271ac524a4930ef95931.roa
File:                     414a7664869b2170e6ea271ac524a4930ef95931.roa (raw, json)
Hash identifier:          fKytoOxXWG9K1AGxBzJxFmJN88iDtpeU40PO+7LMJtM=
Subject key identifier:   AC:AC:9B:0C:C8:B1:67:48:5C:C9:0E:EC:5F:9B:F3:58:04:B2:1B:9F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06D7C4
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/414a7664869b2170e6ea271ac524a4930ef95931.roa
Signing time:             Tue 21 Jun 2022 05:55:33 +0000
ROA not before:           Tue 21 Jun 2022 03:00:00 +0000
ROA not after:            Wed 21 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448452 (0x6d7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 21 03:00:00 2022 GMT
            Not After : Jun 21 03:00:00 2023 GMT
        Subject: CN=414a7664869b2170e6ea271ac524a4930ef95931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:45:4c:f2:b7:27:d7:09:fa:f2:30:47:37:
                    89:1a:44:1f:63:d3:17:0b:4c:87:db:ec:0a:38:fa:
                    78:13:89:0c:93:e1:78:5d:fe:12:28:7a:17:39:9a:
                    de:1d:22:df:01:dc:df:44:49:4c:18:7b:5c:9f:51:
                    14:a2:8c:fb:b4:10:ed:03:50:bd:b0:4d:da:c5:ab:
                    11:b8:71:10:3f:96:0f:a0:2d:ea:54:26:df:9e:3a:
                    39:ea:85:c5:05:32:64:a2:b4:93:ea:5c:2c:61:5c:
                    45:d5:66:be:ec:09:b8:f7:5a:6a:35:a1:e3:75:89:
                    98:d0:3f:63:f6:8c:03:77:51:c4:d3:9a:bf:9c:a1:
                    ed:c1:8d:fb:e2:d1:dd:f1:99:af:9e:d3:c8:c5:92:
                    61:86:39:82:a5:de:64:55:ff:0d:35:57:59:6f:7e:
                    36:de:1f:be:c4:30:86:c6:dc:d7:8c:60:59:d3:42:
                    1d:84:af:58:16:c4:5e:62:55:50:7a:d8:b2:f4:6a:
                    42:a4:4b:ae:54:34:ba:88:ef:e1:1c:e3:35:6c:53:
                    28:9d:3e:91:e2:8d:ad:44:a9:dd:de:b9:3d:88:44:
                    d9:c8:e0:db:1d:95:f0:e0:6c:ba:4b:ff:e0:b3:8c:
                    9c:96:75:ff:cd:71:86:1f:48:0c:25:03:f1:32:1a:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:9B:0C:C8:B1:67:48:5C:C9:0E:EC:5F:9B:F3:58:04:B2:1B:9F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/414a7664869b2170e6ea271ac524a4930ef95931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:84:1b:bf:b6:ca:a2:19:38:c5:a3:ea:f7:d2:5a:92:7e:d2:
         99:52:f8:66:cd:73:8a:92:ae:3e:14:97:82:27:23:8f:ce:92:
         76:61:d4:da:fd:8e:16:70:ad:79:a7:07:63:66:71:40:c0:04:
         ba:5e:e4:f8:94:76:4b:5b:13:a8:4c:98:d0:23:fa:6e:7a:5e:
         a9:fe:4d:b3:72:b5:2a:05:b4:67:65:66:fc:95:ad:3e:0f:87:
         f0:9b:3d:a9:98:3a:23:df:71:65:c1:bb:cf:6e:8c:0b:45:9d:
         fd:b6:14:1c:d0:54:15:65:db:c5:b0:3c:fa:0f:3d:34:26:0a:
         d9:ac:24:84:98:bc:58:e9:3e:32:64:e0:42:d2:f0:74:f4:a7:
         be:d6:b9:b9:8c:de:4d:85:1e:53:43:b9:3d:a0:dd:7f:16:9d:
         c0:17:36:c5:b8:a1:ec:f5:1f:a4:1b:72:c9:43:ac:0b:34:e8:
         41:77:1a:ab:d4:23:28:38:ce:13:1d:b9:24:56:af:0e:9d:f4:
         01:02:79:38:9c:cc:9b:c7:84:8b:73:aa:37:94:c0:b4:ce:15:
         df:4a:34:58:9b:64:6e:55:13:7b:61:6a:d6:80:e1:4a:db:de:
         b9:cd:af:3d:34:fc:d4:4c:ea:19:dc:c7:26:ba:29:bf:0c:81:
         cf:d0:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org