Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ae345b428ec3504e6fde7349c513d9f2cd2a101.roa
File:                     6ae345b428ec3504e6fde7349c513d9f2cd2a101.roa (raw, json)
Hash identifier:          fwtGa13k2J12T4joUUdCU9/NHaYShUluc/M8fOiWqb8=
Subject key identifier:   E4:BA:6C:16:C1:13:B6:4E:46:E4:27:F0:76:9C:5E:8D:3D:0D:F6:2D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05CD52
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ae345b428ec3504e6fde7349c513d9f2cd2a101.roa
Signing time:             Mon 30 May 2022 00:22:12 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Tue 30 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380242 (0x5cd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : May 30 03:00:00 2023 GMT
        Subject: CN=6ae345b428ec3504e6fde7349c513d9f2cd2a101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:53:94:bd:d4:0e:bb:ca:34:fd:43:fa:af:
                    c9:eb:ae:8c:a1:de:51:ad:71:15:a2:d3:6f:91:bc:
                    86:7e:f3:ac:6d:e3:d5:2f:2c:90:6e:33:3a:fb:d3:
                    d9:bc:cc:16:8d:20:d5:7f:57:f0:b4:26:d2:d3:f2:
                    ae:b6:9b:2f:a4:9c:07:d4:6f:be:ea:26:3e:e8:24:
                    e5:e6:7d:b9:e8:6f:82:8a:90:1e:0b:92:df:38:66:
                    21:74:07:37:8e:82:a9:3d:09:99:f6:a6:12:65:87:
                    5f:74:69:53:4a:46:45:e9:69:5f:b3:51:83:94:69:
                    91:7a:5a:d3:bf:69:54:8b:58:7b:79:17:bc:ee:9e:
                    2b:34:65:23:c8:35:ea:19:c4:52:1e:b5:a0:90:b0:
                    37:d1:df:a8:28:37:b6:e1:56:69:af:f9:82:a6:a3:
                    96:c7:bd:88:36:3a:da:5c:48:51:6f:54:a7:6c:70:
                    2e:45:5c:0a:88:de:d2:40:6a:a4:42:ba:c2:73:06:
                    3b:56:ce:9f:3f:02:3b:2d:40:71:99:97:66:89:08:
                    a6:6a:41:4c:1a:63:71:55:1b:04:b4:b6:64:96:77:
                    66:46:d7:e4:e9:28:f1:78:21:b5:cf:07:45:38:16:
                    f2:97:0d:88:3a:7c:20:42:3f:13:7d:38:ab:3e:f5:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:6C:16:C1:13:B6:4E:46:E4:27:F0:76:9C:5E:8D:3D:0D:F6:2D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6ae345b428ec3504e6fde7349c513d9f2cd2a101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:40:c6:cc:11:46:dc:2e:67:da:71:3f:f1:99:38:24:fa:37:
         ba:22:8d:54:8c:3b:0d:e1:b1:58:8e:41:cb:44:c3:95:3b:83:
         6f:ea:23:bf:57:17:67:7b:b9:17:c1:a7:75:38:f3:84:21:7f:
         38:8b:77:2c:6c:65:1c:14:02:29:5a:93:15:bd:ab:7e:26:3a:
         32:e1:40:c4:52:d9:e2:57:47:67:89:12:d6:1e:cb:f4:84:28:
         2b:56:38:31:19:03:60:34:e2:6e:b7:bf:8a:d8:cd:6b:c5:cd:
         04:52:ca:8a:e7:06:3e:1d:f8:78:22:26:0d:32:b4:93:20:a5:
         c0:04:d7:d5:6b:3b:ef:71:fe:fe:d1:7d:db:da:f3:49:cc:49:
         29:f1:a6:fc:d6:2b:ec:73:c7:6f:7e:d1:3d:3e:6b:e1:d9:3f:
         14:02:29:1b:5f:c6:ec:41:66:e9:c7:9e:08:97:ea:d5:ad:01:
         e2:94:56:32:da:6d:c2:5a:ad:8c:58:d0:24:09:a5:e6:47:38:
         9b:eb:4a:07:24:04:af:98:77:df:ea:f1:e2:e9:f7:02:ba:56:
         4e:ae:1b:d1:ff:23:65:5e:33:ea:51:bf:e3:4b:44:6c:8f:99:
         c1:02:5e:b4:76:8f:d5:e1:61:64:7e:b0:99:31:92:b0:f9:22:
         98:b0:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org