Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa
File:                     5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa (raw, json)
Hash identifier:          Uakjoc5TST937Lov5h22sN+z6OlY+kj2kbeJP7W2U/E=
Subject key identifier:   97:88:F8:34:21:1F:75:15:D3:D6:2A:CB:06:28:AD:F2:39:B1:E8:2F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       035B9E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa
Signing time:             Mon 04 Apr 2022 02:31:52 +0000
ROA not before:           Mon 04 Apr 2022 03:00:00 +0000
ROA not after:            Tue 04 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220062 (0x35b9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  4 03:00:00 2022 GMT
            Not After : Apr  4 03:00:00 2023 GMT
        Subject: CN=5aaa656982d5ddd2fb450af97ef88d4216f610fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:c2:b2:e4:94:aa:1c:33:d0:6f:e0:7c:99:
                    3d:0a:65:0d:c9:52:6d:0a:ca:10:c3:8e:12:9a:09:
                    1f:92:e6:32:22:e5:95:67:f7:ea:ec:50:fb:93:a1:
                    49:a5:36:af:e8:07:4b:0b:f7:7a:bb:73:e1:61:a7:
                    4e:87:44:17:74:fb:08:4a:12:43:7a:20:4b:0f:c2:
                    ea:16:4f:2e:d0:64:ef:86:95:c3:96:09:7c:49:da:
                    64:6c:bb:d4:b6:ab:d4:d7:06:4a:4f:5d:85:41:62:
                    9f:d9:b0:fa:a1:ad:47:fc:be:87:29:76:40:7e:9a:
                    d3:de:89:3c:02:07:e4:67:53:39:23:b5:98:2b:cc:
                    ef:52:44:0c:55:ca:aa:8e:9e:e7:fb:49:af:ab:c9:
                    db:9c:8a:52:0f:7a:9f:50:f4:e3:fc:fc:16:ed:68:
                    81:da:1a:69:86:09:a0:63:1a:11:8a:3a:4d:b7:52:
                    36:d7:61:26:db:b1:12:7f:4d:58:61:c7:2b:91:2d:
                    5d:98:68:21:f6:41:a4:be:e0:cc:6f:85:86:70:a3:
                    d2:64:ca:35:83:de:46:5e:fb:7e:29:36:2a:61:ba:
                    47:a7:47:b9:af:67:ac:41:4b:2a:8a:f5:36:d2:03:
                    69:37:b8:6a:0d:30:c6:d4:8e:18:f2:df:0c:21:a7:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:88:F8:34:21:1F:75:15:D3:D6:2A:CB:06:28:AD:F2:39:B1:E8:2F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5aaa656982d5ddd2fb450af97ef88d4216f610fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:16:65:8e:bf:e5:30:af:11:b7:f2:a9:01:91:aa:61:d8:
         d7:ff:74:0f:dc:bd:9f:eb:a1:3e:7d:f2:f7:7d:9f:5f:1a:02:
         51:0a:65:e2:4b:4f:42:8b:8b:99:b3:0b:64:8e:ce:be:cf:5f:
         71:91:ca:3b:65:96:11:fc:11:3f:de:19:0b:9e:b6:2d:b3:f2:
         c1:73:ed:f9:45:8a:01:57:6b:da:ad:3c:36:ff:05:2a:76:2a:
         0b:67:34:1a:54:b4:3b:e1:b4:ea:ce:cc:58:f4:8b:e2:51:f0:
         97:a1:a4:4e:39:88:a6:fe:05:1a:fb:1e:b1:f1:f2:d8:36:cd:
         c3:c0:69:be:6b:4b:3b:1c:c9:3d:2f:a6:0e:90:07:be:4e:0b:
         77:06:76:1c:4c:8e:7c:4d:6a:d9:66:6b:d6:36:2f:2b:07:53:
         ae:e1:27:73:e7:f0:f3:e8:e6:a0:45:2a:65:0f:17:1b:cd:d9:
         56:02:d4:61:89:5e:df:25:30:5b:4c:9d:b8:67:de:75:6a:cc:
         f5:4e:73:66:37:8a:f7:39:f5:5e:27:ac:00:ff:a6:57:b5:53:
         79:5d:84:da:c2:0f:f4:79:a0:a0:d9:71:3e:97:c1:99:46:59:
         d2:7f:e6:af:76:35:22:2a:a1:bc:64:b4:bb:a1:f6:ed:5f:1d:
         db:38:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org