Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/48e911d188ca65c98df346d098ab87545ad58ee9.roa
File:                     48e911d188ca65c98df346d098ab87545ad58ee9.roa (raw, json)
Hash identifier:          J3WmPGIqYA/TTYOgKapWTPOkbYpYjt3xO/NdlPr0NXs=
Subject key identifier:   40:B4:AF:F4:67:D9:59:F3:6D:32:66:E2:64:CE:71:21:2F:CB:A6:FE
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01710F
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/48e911d188ca65c98df346d098ab87545ad58ee9.roa
Signing time:             Mon 21 Feb 2022 03:04:18 +0000
ROA not before:           Mon 21 Feb 2022 03:00:00 +0000
ROA not after:            Tue 21 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94479 (0x1710f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 21 03:00:00 2022 GMT
            Not After : Feb 21 03:00:00 2023 GMT
        Subject: CN=48e911d188ca65c98df346d098ab87545ad58ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:b9:30:dd:11:f4:73:3b:84:d7:b0:5b:5d:
                    39:6f:47:22:bf:3b:61:0b:e7:fd:a8:4f:83:28:0b:
                    13:99:cd:02:90:05:b9:f4:18:59:0d:47:03:02:c8:
                    eb:d3:44:bb:e9:c8:25:d7:05:54:b8:80:b1:8a:1f:
                    b5:9f:79:ef:02:7a:54:50:2d:de:c1:61:09:85:56:
                    df:e0:76:3d:16:54:96:16:12:50:f0:28:75:1c:ba:
                    73:50:4a:bd:fe:af:80:21:c1:95:76:87:6c:57:0f:
                    49:02:a6:65:18:57:08:93:9c:71:2c:51:3f:5d:6b:
                    37:95:38:5f:89:52:9a:66:36:b5:f8:58:4f:53:93:
                    c4:4b:a1:3e:fb:90:a0:9d:9a:a1:6d:34:a3:05:2a:
                    fe:8a:3f:42:e9:5f:52:7e:4b:f2:9b:8c:60:be:4e:
                    e1:00:bc:a7:4b:b1:02:0c:56:1b:41:06:5d:04:29:
                    ce:be:45:84:3b:10:4e:67:ef:5e:92:4b:46:8b:b4:
                    d9:d8:2a:aa:22:4b:a1:f8:9f:c0:6f:56:7f:1a:55:
                    bb:a5:83:e9:c3:95:05:40:4c:e9:c4:ed:70:7e:40:
                    02:30:af:61:55:70:06:26:13:de:9c:38:92:a7:a4:
                    21:53:e2:ca:9f:1c:3c:d6:44:ff:ce:56:aa:63:db:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:AF:F4:67:D9:59:F3:6D:32:66:E2:64:CE:71:21:2F:CB:A6:FE
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/48e911d188ca65c98df346d098ab87545ad58ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:78:e2:ea:f1:a1:83:70:e7:e7:d1:e0:2d:14:36:d8:b8:
         dc:80:56:bd:63:93:f0:17:87:3c:a8:50:5e:1a:72:51:0d:6d:
         df:8e:f6:65:63:3a:8e:a6:93:00:03:4a:52:1d:96:1b:c0:c7:
         c1:89:51:4a:37:7c:25:f1:6a:66:33:49:1d:07:46:c8:18:b2:
         1a:c1:32:96:be:bc:3b:80:e4:89:4e:57:00:9d:b5:40:b9:9f:
         0d:95:f9:18:92:b8:38:39:25:f3:c9:0f:17:fc:50:82:4e:e0:
         50:91:cd:f2:77:48:5b:06:d2:49:cf:e7:7a:91:9e:1f:2c:90:
         82:b9:78:88:17:ad:18:17:8f:54:6a:10:1b:d3:5b:43:02:55:
         c0:5e:ef:16:a2:35:e7:7e:d9:eb:fe:1a:bc:72:a1:02:33:5f:
         c8:90:2a:7b:28:f6:82:4e:c2:32:46:18:cd:2a:9c:b4:2f:ad:
         3a:02:95:fa:35:fb:7f:6c:c3:fc:ff:0f:24:49:3e:e0:1a:b2:
         36:12:83:0f:39:af:3e:d4:a2:8c:a0:36:15:7a:34:6a:e9:2d:
         09:b5:f1:17:15:90:35:75:06:75:42:c2:af:19:23:45:fa:b9:
         67:be:30:0b:4d:f6:3d:08:5f:a7:a4:d8:1a:0b:81:0c:ab:1e:
         74:4b:bd:5d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAXEPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjIx
MDMwMDAwWhcNMjMwMjIxMDMwMDAwWjAzMTEwLwYDVQQDEyg0OGU5MTFkMTg4Y2E2
NWM5OGRmMzQ2ZDA5OGFiODc1NDVhZDU4ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmJa5MN0R9HM7hNewW105b0civzthC+f9qE+DKAsTmc0CkAW5
9BhZDUcDAsjr00S76cgl1wVUuICxih+1n3nvAnpUUC3ewWEJhVbf4HY9FlSWFhJQ
8Ch1HLpzUEq9/q+AIcGVdodsVw9JAqZlGFcIk5xxLFE/XWs3lThfiVKaZja1+FhP
U5PES6E++5CgnZqhbTSjBSr+ij9C6V9Sfkvym4xgvk7hALynS7ECDFYbQQZdBCnO
vkWEOxBOZ+9ekktGi7TZ2CqqIkuh+J/Ab1Z/GlW7pYPpw5UFQEzpxO1wfkACMK9h
VXAGJhPenDiSp6QhU+LKnxw81kT/zlaqY9vJmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEC0r/Rn2VnzbTJm4mTOcSEvy6b+MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzQ4ZTkxMWQxODhjYTY1Yzk4ZGYzNDZkMDk4YWI4NzU0NWFkNThlZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEALQJ44urxoYNw5+fR
4C0UNti43IBWvWOT8BeHPKhQXhpyUQ1t3472ZWM6jqaTAANKUh2WG8DHwYlRSjd8
JfFqZjNJHQdGyBiyGsEylr68O4DkiU5XAJ21QLmfDZX5GJK4ODkl88kPF/xQgk7g
UJHN8ndIWwbSSc/nepGeHyyQgrl4iBetGBePVGoQG9NbQwJVwF7vFqI1537Z6/4a
vHKhAjNfyJAqeyj2gk7CMkYYzSqctC+tOgKV+jX7f2zD/P8PJEk+4BqyNhKDDzmv
PtSijKA2FXo0auktCbXxFxWQNXUGdULCrxkjRfq5Z74wC032PQhfp6TYGguBDKse
dEu9XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org