Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bc6f9b8109aebd874f5407c9f08879a0d50e376.roa
File:                     6bc6f9b8109aebd874f5407c9f08879a0d50e376.roa (raw, json)
Hash identifier:          Ubizq/x4pS4wO5wf68/14TOVGuufFaQ5fZfYWAVxSPk=
Subject key identifier:   31:9A:3E:77:8B:95:08:BC:F0:D6:02:4A:B5:D9:CF:DE:72:07:C2:B6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       2D0C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bc6f9b8109aebd874f5407c9f08879a0d50e376.roa
Signing time:             Thu 20 Jan 2022 02:31:33 +0000
ROA not before:           Thu 20 Jan 2022 03:00:00 +0000
ROA not after:            Fri 20 Jan 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11532 (0x2d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jan 20 03:00:00 2022 GMT
            Not After : Jan 20 03:00:00 2023 GMT
        Subject: CN=6bc6f9b8109aebd874f5407c9f08879a0d50e376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:57:84:74:d6:ad:85:43:49:e5:ca:56:1b:
                    30:0d:11:fb:2f:76:a6:fe:0a:93:54:db:96:81:9a:
                    42:64:bd:33:7d:36:a3:9f:15:eb:8b:2f:11:06:31:
                    39:86:07:ee:e7:f6:90:c7:7d:51:0e:06:57:b9:02:
                    61:bb:ab:53:cf:b0:b6:f9:66:27:6e:53:12:77:48:
                    00:05:e6:ac:e5:80:af:2b:12:be:df:c4:96:4b:ca:
                    2b:28:f6:e1:bf:73:f5:71:eb:3a:09:3f:ca:fe:ba:
                    9b:bc:12:7e:b4:60:d7:ed:6f:02:05:4f:12:6f:80:
                    af:b6:3e:e8:d3:37:98:99:46:21:ae:0a:75:7d:29:
                    b8:df:e5:8c:ca:9b:c4:a3:24:12:3b:30:c0:95:0b:
                    e0:74:6f:37:ca:e5:80:ac:ed:56:1f:f8:3f:af:99:
                    04:dc:5f:de:9e:bd:94:1f:a8:aa:59:54:9c:fa:f6:
                    52:5e:0c:ba:98:c9:65:cc:b0:72:95:ca:a6:b9:9c:
                    ce:c7:82:ad:c3:86:4f:a7:ed:18:ec:0e:e8:d1:e3:
                    4e:17:b3:f7:5f:67:d7:ad:57:d8:83:cd:e0:ea:1b:
                    79:0e:eb:97:34:e7:16:cb:e9:4e:7b:b7:cd:44:80:
                    b8:85:e1:e2:33:47:46:22:35:42:01:17:f6:34:39:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:3E:77:8B:95:08:BC:F0:D6:02:4A:B5:D9:CF:DE:72:07:C2:B6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/6bc6f9b8109aebd874f5407c9f08879a0d50e376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:69:5a:a0:0e:83:63:aa:0f:cf:57:44:a8:b8:d9:06:76:46:
         76:5d:11:eb:9d:f5:3c:d3:00:67:9a:b4:bb:c8:47:50:fb:b2:
         6e:c3:f7:eb:9c:05:8e:da:ed:76:18:e6:b8:12:c9:2e:5f:8c:
         59:70:0f:03:2d:ff:b1:4a:5e:13:74:17:ce:68:86:d8:44:16:
         fa:52:63:22:0d:74:ab:cc:73:7c:c7:e8:f6:ba:40:47:c1:a4:
         d8:ac:16:77:bc:ce:4d:ab:3b:05:68:79:87:c9:a0:9e:08:85:
         80:45:12:5e:d1:87:50:e1:0c:d0:46:d8:af:4f:e0:4d:4c:11:
         1d:e9:f5:ec:e0:4f:90:94:cb:16:81:bd:ae:31:26:03:1d:c7:
         6f:32:70:e6:4a:36:10:69:08:14:c4:d2:f6:3c:bb:61:b6:44:
         ba:eb:0b:81:15:a8:11:68:b1:f1:0d:6e:ab:d2:24:82:85:2b:
         f4:88:d3:03:d6:84:4b:c8:fe:90:bf:ac:83:1b:b5:0d:64:f6:
         fb:d9:57:b9:d9:40:3e:7b:3d:d5:5c:28:d6:c7:95:ae:3c:20:
         e1:b0:f9:ec:f2:5d:87:5e:a5:0d:8d:b1:7e:e9:d5:79:c3:4e:
         b0:ae:49:2f:63:10:b1:fb:e8:96:aa:46:43:a7:54:97:14:74:
         b6:66:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org