Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6342a37b268a4de6e0ea0f6f441268d5ccc7cb74.roa
File:                     6342a37b268a4de6e0ea0f6f441268d5ccc7cb74.roa (raw, json)
Hash identifier:          MfARMu/lRo2vU/59cBIxSfbSQh4WcVfObhE/HWTUA0k=
Subject key identifier:   02:3B:AF:1F:3D:38:BB:DC:37:B9:E4:90:A1:96:EC:0E:B1:A5:C0:9D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       DDEE
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6342a37b268a4de6e0ea0f6f441268d5ccc7cb74.roa
Signing time:             Tue 08 Feb 2022 03:46:22 +0000
ROA not before:           Tue 08 Feb 2022 03:00:00 +0000
ROA not after:            Wed 08 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56814 (0xddee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  8 03:00:00 2022 GMT
            Not After : Feb  8 03:00:00 2023 GMT
        Subject: CN=6342a37b268a4de6e0ea0f6f441268d5ccc7cb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:58:bd:30:26:bd:40:9a:58:80:74:0c:0f:
                    a1:cd:77:3b:7d:b6:97:3d:40:0d:e6:78:56:9f:93:
                    76:19:bf:7e:12:04:e2:60:76:69:a6:fb:33:f5:e6:
                    ef:4c:96:69:61:5f:d6:b6:f3:9e:72:5d:a5:e8:47:
                    59:e2:96:72:ec:e9:2e:70:58:a7:29:a7:71:98:b1:
                    56:9b:42:fb:57:3e:b8:5a:0a:71:7d:9f:e3:43:81:
                    09:ce:61:bc:fd:60:1d:2c:22:66:7d:92:f5:93:69:
                    06:8e:08:5e:32:a9:9c:12:88:5a:1b:2e:2e:c9:31:
                    27:71:d2:f5:de:67:c7:96:08:90:65:1e:8c:2d:00:
                    20:c0:84:a7:e9:26:f7:69:ff:f0:67:55:cb:b2:60:
                    37:a9:50:1f:f9:10:93:15:14:d2:7f:34:3f:51:2b:
                    6c:2e:55:63:e1:7a:5b:c5:f1:31:df:84:1f:89:24:
                    12:1e:a7:7a:50:e7:21:f8:fd:93:fa:c0:ca:52:a2:
                    5f:a6:cb:17:08:84:a0:a0:a3:5f:3d:93:e3:25:4b:
                    b7:d1:55:57:0f:f9:30:10:99:e7:14:ce:17:67:4d:
                    32:08:9c:16:ed:24:b7:cf:2a:df:2a:26:1a:3c:74:
                    39:6f:8b:68:1f:93:8a:fe:67:17:23:a5:01:8d:66:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:AF:1F:3D:38:BB:DC:37:B9:E4:90:A1:96:EC:0E:B1:A5:C0:9D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6342a37b268a4de6e0ea0f6f441268d5ccc7cb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:9b:40:6b:f6:d1:64:6c:4d:52:c8:66:2d:08:00:46:24:
         c9:bd:40:ce:9d:e3:b8:cc:89:35:10:eb:dd:7c:7f:0f:5d:28:
         d6:05:36:05:53:d3:6f:f3:e6:e1:5d:05:92:e4:12:d6:40:bf:
         47:d3:c3:c8:8e:ff:43:25:1e:ea:a4:c3:4b:20:ae:0c:6e:75:
         1f:d3:59:4a:05:5a:07:3a:88:39:cf:0b:fc:8e:81:7e:1a:43:
         0d:fb:de:50:0d:a4:5a:0a:02:bc:ab:73:b1:b7:83:ba:79:ce:
         03:a4:e2:ea:4a:2b:fe:e6:c1:7f:40:84:af:ec:56:ad:4d:cf:
         16:ea:e8:74:83:85:ed:4b:c1:4f:62:4b:47:0b:0f:f0:cd:53:
         62:e7:1c:87:cc:21:11:76:d1:cf:62:e8:c7:2f:1b:b0:1d:60:
         9f:c0:46:c7:e9:b8:4d:75:dc:18:49:e7:34:b1:0e:3b:93:3f:
         98:23:46:73:83:d2:91:ea:30:b0:ba:84:dc:f3:f3:9d:52:50:
         bb:fa:e0:b4:b6:35:e1:f0:df:08:c2:d4:ed:11:98:76:48:f9:
         72:0c:44:f4:bb:0e:86:04:53:63:d8:d0:e3:22:f4:b2:ce:dc:
         e2:ef:29:cb:8c:7d:b2:32:c5:6d:6f:43:ba:41:89:cd:dd:77:
         85:3d:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org