Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/809c9aa2531376bfadbb5f643918368cf4057925.roa
File:                     809c9aa2531376bfadbb5f643918368cf4057925.roa (raw, json)
Hash identifier:          jhHvcG9pc4N53TMTISClDdqfuOw8ErKXKVvH4bAe64E=
Subject key identifier:   82:1A:14:52:70:F1:25:54:C6:64:A9:B6:9B:51:4E:72:6A:02:3A:D6
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0377B2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/809c9aa2531376bfadbb5f643918368cf4057925.roa
Signing time:             Wed 06 Apr 2022 05:55:40 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Thu 06 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227250 (0x377b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  6 03:00:00 2023 GMT
        Subject: CN=809c9aa2531376bfadbb5f643918368cf4057925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:39:6e:c5:a7:c0:86:ae:c9:02:38:d6:32:
                    7f:36:eb:06:65:95:d3:b0:90:48:a9:f3:26:97:75:
                    28:c1:85:e3:c2:e0:89:ae:70:7d:c6:98:41:5b:ad:
                    d2:72:4e:9f:ab:4b:00:ec:fb:69:33:27:45:e4:38:
                    be:96:f7:93:83:5d:44:02:0e:1b:28:dd:bf:bb:a3:
                    3f:56:89:d6:45:2f:a4:55:69:d5:50:33:1f:56:4b:
                    03:d4:92:61:0c:4b:8d:ed:27:88:a0:bb:72:9e:e1:
                    82:7e:9c:49:a1:78:ef:16:7f:9b:17:93:d2:1d:ce:
                    7c:2d:b0:21:3b:3f:a9:07:44:11:ca:62:b1:4b:f2:
                    57:3c:1b:e4:76:f6:db:26:51:78:e4:3b:fc:b6:c1:
                    61:74:06:78:ce:6a:9a:f5:89:e5:13:79:e0:a0:cd:
                    11:30:60:86:e4:7e:a2:08:b9:8a:86:fa:ce:4d:8b:
                    8d:b7:3a:79:19:1a:40:08:56:47:1d:52:cc:36:ca:
                    66:3f:36:33:88:95:f6:69:d6:6e:b5:5d:ef:61:0d:
                    e6:73:78:96:39:bf:ce:ef:4e:83:b5:d4:75:17:56:
                    03:a3:0b:7e:96:1b:0e:47:9f:0b:25:4f:d1:b5:1d:
                    d0:df:ec:32:01:6f:33:54:bd:02:72:62:13:99:db:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:14:52:70:F1:25:54:C6:64:A9:B6:9B:51:4E:72:6A:02:3A:D6
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/809c9aa2531376bfadbb5f643918368cf4057925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:e8:55:32:42:0e:82:bf:1d:1e:06:50:55:93:1f:11:57:
         0c:5b:03:86:55:0a:6d:81:5e:13:6f:4d:3a:f5:4a:00:77:23:
         77:91:75:03:52:4d:85:b3:0f:5b:f6:9a:a9:68:d7:5d:6a:49:
         d8:09:3b:02:81:be:2e:1c:f5:b5:00:5c:a6:9b:07:20:9f:8d:
         36:ba:c7:45:cf:10:b7:12:9f:2c:1d:0d:64:52:3c:2f:5c:49:
         74:4a:14:29:35:71:dd:95:ce:90:ba:ab:f0:cf:42:d8:7b:ba:
         38:f2:44:a5:d7:85:9f:e2:ad:f1:03:cf:75:d7:64:02:e1:8c:
         e5:d6:53:50:99:93:63:93:6e:49:d1:97:bb:a3:c1:41:cb:23:
         24:07:dd:32:61:01:fe:ce:44:b7:7b:f0:21:c7:d0:22:c2:90:
         6b:1a:73:4b:64:d8:70:df:2a:ee:88:17:ee:dc:39:85:76:4a:
         6e:17:35:c5:ae:6a:00:d2:b7:42:a0:a9:0a:42:69:8d:53:39:
         ed:b6:0a:3f:d9:43:97:1a:4b:93:ca:ec:88:8a:9d:ad:4e:ec:
         ed:f2:f3:ef:8e:78:62:56:4d:c8:ce:f7:13:39:cf:84:84:9d:
         6b:7b:56:c0:8e:7f:bc:ee:42:2c:fd:b7:84:65:ba:cc:03:7c:
         61:0f:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org