Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7041daf693739d95e92dd3f024e5052b517872e9.roa
File:                     7041daf693739d95e92dd3f024e5052b517872e9.roa (raw, json)
Hash identifier:          9s6Masfv4iadZlMbAmsLiU40z+LYrenwdeqwYg82EqI=
Subject key identifier:   79:94:C7:7A:DF:73:50:86:65:92:60:6F:D8:E6:3A:5F:DA:34:10:E0
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       016A41
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7041daf693739d95e92dd3f024e5052b517872e9.roa
Signing time:             Sun 20 Feb 2022 02:05:03 +0000
ROA not before:           Sun 20 Feb 2022 03:00:00 +0000
ROA not after:            Mon 20 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92737 (0x16a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 20 03:00:00 2022 GMT
            Not After : Feb 20 03:00:00 2023 GMT
        Subject: CN=7041daf693739d95e92dd3f024e5052b517872e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:39:80:d2:0b:5e:d4:18:5d:1f:04:cb:51:
                    20:ee:66:4b:ff:c7:5d:0c:e9:18:06:55:ee:e3:99:
                    9d:99:ad:f7:2d:97:01:62:65:3e:af:55:87:f4:d8:
                    57:a0:7b:17:cd:68:0d:e3:26:51:ab:01:c9:f9:3d:
                    55:42:3e:b7:a1:a9:d7:8f:7d:86:7c:b7:13:76:21:
                    84:87:96:80:3e:96:51:f7:0a:c6:42:d5:d9:75:c3:
                    1f:15:10:57:98:f1:21:a8:22:ef:d5:0a:84:bd:17:
                    22:bc:95:34:a5:d1:cb:fa:25:4a:5e:90:2d:95:8d:
                    c6:c2:4e:eb:37:b2:bd:69:a1:93:a1:6f:f9:64:2b:
                    d6:9d:20:07:b7:9d:73:21:e8:c7:b8:0a:c5:f6:6e:
                    9b:74:b2:dc:2b:f6:33:06:3d:b2:81:93:a1:1b:c7:
                    84:b1:09:fc:ac:97:06:2d:07:fd:7b:59:c4:97:3b:
                    53:a9:86:c5:f9:76:98:1c:71:12:fa:40:52:82:90:
                    17:da:2f:77:7a:af:68:bb:9d:ff:c5:e9:d0:09:82:
                    90:ff:50:35:28:f2:ee:8e:da:bd:93:70:79:f2:10:
                    7c:5a:0f:2f:61:d7:bf:05:ca:2b:ea:a4:b5:db:0e:
                    13:22:c7:9d:cc:04:f4:68:9b:2c:63:6b:b8:43:2b:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:C7:7A:DF:73:50:86:65:92:60:6F:D8:E6:3A:5F:DA:34:10:E0
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7041daf693739d95e92dd3f024e5052b517872e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:72:f5:59:b7:da:ab:b0:fa:2b:b6:86:90:32:48:40:e7:ef:
         6d:73:ef:14:c1:2e:1c:b5:44:c3:af:75:a2:4e:d0:67:70:c0:
         0e:72:f0:dd:5b:00:8f:77:1c:a5:3a:c0:3c:86:b4:1a:db:f6:
         4e:94:81:9c:65:c7:8a:d3:5b:11:42:1d:03:1c:f9:a3:ea:21:
         ee:9c:e9:c3:61:80:91:67:81:65:5d:54:b4:9f:23:40:d7:5d:
         0f:ea:14:56:7d:0e:79:a7:cd:c7:cc:dd:71:a2:73:94:bc:87:
         3d:f7:ee:cd:c2:2e:af:6b:a3:4f:00:e1:46:b7:75:5e:c1:40:
         5f:3e:7d:33:c3:f0:b7:cb:ac:63:d5:7e:57:73:4e:0e:57:f8:
         c8:80:a4:26:96:e0:06:2b:12:53:4d:ad:5d:65:96:34:2a:9f:
         0b:40:2c:39:48:2c:fe:4c:b2:f8:a0:e1:3c:04:e1:1a:d7:d4:
         46:fc:e8:c0:6c:1c:5f:db:cf:06:b8:98:d9:07:37:d1:26:27:
         19:d9:45:a0:80:b4:8f:a9:ec:b4:62:76:18:5b:9d:17:ca:39:
         b0:01:ef:56:76:68:55:ff:cf:02:8e:2c:6c:36:44:5f:30:85:
         ee:14:82:c9:15:6f:27:6d:1f:1a:90:89:19:5a:f4:ed:f0:c8:
         67:a0:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org