Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5e157c33ee972e1cdbc55e2bfdc8d601d190252f.roa
File:                     5e157c33ee972e1cdbc55e2bfdc8d601d190252f.roa (raw, json)
Hash identifier:          6q7WDIhV0qjkLPxWl0CqyfG6hHXAsNGKvmAauB1ZExU=
Subject key identifier:   28:C5:78:43:76:83:83:15:22:9C:9E:31:BD:D1:66:29:7D:FF:61:1F
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0B3E68
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5e157c33ee972e1cdbc55e2bfdc8d601d190252f.roa
Signing time:             Sun 25 Sep 2022 04:16:13 +0000
ROA not before:           Sun 25 Sep 2022 03:00:00 +0000
ROA not after:            Mon 25 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736872 (0xb3e68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep 25 03:00:00 2022 GMT
            Not After : Sep 25 03:00:00 2023 GMT
        Subject: CN=5e157c33ee972e1cdbc55e2bfdc8d601d190252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:59:92:d5:a6:43:e6:93:5d:1f:a5:b6:36:
                    96:7c:ad:f9:e2:9c:c9:61:b4:af:16:49:73:15:57:
                    6a:ae:bd:c8:81:75:8b:d6:5c:76:9e:65:24:0b:2a:
                    7c:da:41:2a:46:33:43:e7:c6:45:31:f4:88:79:1a:
                    0f:99:99:e9:e5:87:7c:b0:8a:64:a6:31:ae:62:e2:
                    27:3b:ea:74:a7:cf:6b:37:33:c7:30:c0:3a:2d:61:
                    11:58:ca:9f:b9:72:99:8f:ea:6b:9f:cb:a7:96:c8:
                    7a:4d:f0:c8:92:a7:79:91:2a:01:b1:46:15:4e:7e:
                    e7:aa:7c:a6:c8:dc:34:e1:c4:12:61:73:84:4e:52:
                    ba:97:29:3c:e7:67:09:ab:79:63:f8:46:32:7c:3d:
                    6e:86:6c:d4:81:2e:50:ef:43:a6:b2:21:da:3f:f1:
                    d4:25:16:1f:08:14:da:c3:42:bf:ce:ca:f9:a3:50:
                    c1:da:7c:21:d5:f7:17:a4:31:63:aa:cf:6f:07:f6:
                    00:4a:91:0b:ad:09:30:b2:19:23:e7:3c:f8:fc:d4:
                    45:1a:f0:ae:7f:5c:0b:46:f7:b5:86:98:83:21:ab:
                    3d:73:78:34:cb:7c:d7:97:8f:7e:d1:64:1d:e8:24:
                    22:1a:4c:5e:89:5a:24:cd:ff:fc:52:bf:35:2f:4f:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C5:78:43:76:83:83:15:22:9C:9E:31:BD:D1:66:29:7D:FF:61:1F
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/5e157c33ee972e1cdbc55e2bfdc8d601d190252f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:de:66:c1:ef:8a:54:36:3f:8f:37:de:2c:7e:40:4c:a4:84:
         ba:f2:90:36:ed:d3:7f:8d:54:b6:66:86:f2:08:a0:26:36:4b:
         0d:88:f3:32:fa:f3:33:be:f0:8b:d2:36:23:99:71:76:3b:47:
         ad:99:41:19:a4:80:fd:1c:b7:bf:66:58:61:3e:52:d8:cf:63:
         47:fb:fd:73:fd:c8:5a:5f:c8:cb:c1:08:a0:f4:e7:04:1e:60:
         19:7b:64:4e:67:8f:19:c0:41:3a:40:7c:00:8f:22:56:33:c3:
         0e:b8:22:05:e1:c4:e1:71:38:ea:0e:1a:02:d2:41:d4:38:74:
         78:4c:f5:8d:96:88:76:5d:fc:1e:be:43:0e:55:7f:4d:99:98:
         0d:b2:13:2c:a7:0c:a3:3b:99:c9:4c:9a:2b:0b:a8:26:22:eb:
         51:1a:ee:4f:2b:e2:c3:2f:bd:6b:82:1c:a2:a8:d3:31:4f:6a:
         9c:34:63:19:65:24:e0:9c:36:74:fe:e7:34:01:90:fe:95:ad:
         9d:88:32:2c:1d:46:08:09:54:e0:ef:cc:e7:2d:29:5c:ae:89:
         16:61:97:6c:46:51:fc:28:a6:f1:97:2c:04:8b:b1:a9:5a:53:
         91:80:6f:9a:9a:a0:cd:fd:da:a8:13:d8:f3:d7:f0:3f:a9:7a:
         01:27:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org