Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bb25ed9c3b8c74f2d4ba895ec56dae79503a5df.roa
File:                     6bb25ed9c3b8c74f2d4ba895ec56dae79503a5df.roa (raw, json)
Hash identifier:          URXz5KlUOGrV3MKmEf4uY5scGqibIW3Gzjm7d1yBVZ4=
Subject key identifier:   B2:07:58:47:65:77:A7:5C:D7:E0:33:98:40:15:6E:4E:91:13:5B:68
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05EA61
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bb25ed9c3b8c74f2d4ba895ec56dae79503a5df.roa
Signing time:             Thu 02 Jun 2022 03:01:20 +0000
ROA not before:           Thu 02 Jun 2022 03:00:00 +0000
ROA not after:            Fri 02 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387681 (0x5ea61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  2 03:00:00 2022 GMT
            Not After : Jun  2 03:00:00 2023 GMT
        Subject: CN=6bb25ed9c3b8c74f2d4ba895ec56dae79503a5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:da:90:37:fa:97:d1:10:a8:0b:18:c4:f7:
                    d2:7a:6b:8e:fb:fc:6a:17:58:d5:97:0f:15:72:bb:
                    47:03:4a:9c:ea:c2:93:9a:8d:34:7e:bc:63:65:06:
                    2a:13:56:5b:ea:83:12:2c:9f:4c:db:15:44:16:73:
                    be:62:48:5a:51:1f:ec:e6:fe:ab:fe:6f:ab:d3:b3:
                    44:64:1a:2b:74:2a:b0:cc:7b:99:ea:0f:77:1d:e0:
                    38:89:31:15:2f:11:88:a0:a7:8e:42:40:15:dd:a3:
                    1a:86:89:c9:90:c4:38:c5:6b:52:06:ed:56:5d:c4:
                    5e:a1:84:fa:23:e2:b8:6c:d6:9a:c9:fe:67:c8:1b:
                    da:77:ba:69:08:86:07:d1:2d:d6:9f:f5:82:51:76:
                    51:84:8e:ce:1b:ef:c9:30:d2:9b:d0:af:85:96:5e:
                    25:2c:af:58:e8:24:20:45:f2:25:b1:76:7f:ba:66:
                    82:27:f8:3b:c8:1d:71:7e:4b:76:25:94:d2:a3:2c:
                    b6:62:e7:9b:de:ed:0d:90:3d:62:e6:61:c7:e4:0f:
                    a4:17:3d:00:cc:d8:7c:e9:08:3f:89:33:a0:86:44:
                    d2:50:00:0f:a1:9a:7b:d8:8d:88:8c:87:e9:fd:45:
                    a6:be:55:8d:27:81:6c:48:2f:dd:af:67:5e:7b:34:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:58:47:65:77:A7:5C:D7:E0:33:98:40:15:6E:4E:91:13:5B:68
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bb25ed9c3b8c74f2d4ba895ec56dae79503a5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7d:fa:13:4a:fe:38:52:54:03:91:63:20:21:95:ac:f9:de:
         e2:4f:a2:f4:70:bf:bb:b8:08:ff:a0:c9:96:9b:9d:79:da:a8:
         3d:5f:1f:4f:3a:65:da:7a:0b:0c:e7:0f:ff:4d:89:0b:b6:a6:
         9a:36:f6:4f:26:42:c3:c3:a0:45:51:86:3d:94:c7:b8:2d:d3:
         50:a4:b5:0d:2c:59:7c:b6:6b:2f:a9:6f:bd:06:60:bb:13:4a:
         4e:88:33:fd:73:e3:9e:a0:b9:6c:19:9f:d1:b3:8d:59:0e:89:
         1e:8e:63:a6:96:f9:d4:68:18:71:f3:79:fd:bc:0e:2a:23:59:
         5f:2c:39:ba:95:d1:34:0f:cc:75:1f:db:85:e6:cd:0c:a9:79:
         18:b4:bd:d8:93:fd:cf:6a:66:13:bc:b0:aa:59:8e:f0:88:63:
         dc:59:02:e1:af:7b:8d:d4:f8:38:83:a4:d8:4d:f5:e2:17:e2:
         96:a7:e1:6c:9c:af:50:a9:5d:74:b1:82:2c:a8:4f:f7:40:7e:
         02:b6:ba:14:5d:95:02:c6:fb:7a:ec:6d:34:69:3f:ba:26:af:
         70:16:cf:ff:b8:b9:a8:01:63:a3:e9:83:81:a5:11:df:73:34:
         b4:2b:70:cc:3b:33:db:65:f3:02:be:a6:21:2c:5d:07:fd:de:
         b2:6f:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org