Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa
File:                     9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa (raw, json)
Hash identifier:          NazT2Q5tybcPUhhoBn6KPDibKbdoMwkIOFCUb0/ciyE=
Subject key identifier:   5C:64:14:E5:F9:23:C5:FA:6F:C4:19:A7:FB:0F:A2:0B:BA:EE:8B:7B
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06200A
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa
Signing time:             Mon 06 Jun 2022 05:03:21 +0000
ROA not before:           Mon 06 Jun 2022 03:00:00 +0000
ROA not after:            Tue 06 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401418 (0x6200a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  6 03:00:00 2022 GMT
            Not After : Jun  6 03:00:00 2023 GMT
        Subject: CN=9acd6f0b13d8cab53f2f7979fe21d055484294fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:a2:3e:20:96:40:18:f8:e6:ab:96:ab:49:
                    55:89:58:97:08:99:0e:4e:35:15:d4:65:ea:d9:2a:
                    58:2b:f2:13:4f:d8:9a:5e:a9:42:d4:a5:d7:2a:cd:
                    a7:f5:5f:b3:03:29:73:3c:ae:f4:ae:bb:ec:ae:ea:
                    b9:ee:d7:7c:77:89:90:f6:b5:27:b5:7a:1e:7f:4b:
                    f6:98:60:f0:ac:54:8f:cd:9f:83:52:4e:2f:f1:6d:
                    70:0a:df:0a:cc:ed:89:08:71:d0:35:29:84:46:ec:
                    d0:ee:11:45:3c:e6:ba:96:0c:b3:9e:f2:15:08:ff:
                    09:25:05:c7:18:56:1b:d1:76:72:32:a7:e4:00:e1:
                    5f:9e:d7:8f:73:64:db:47:46:34:3f:76:54:6b:9e:
                    39:b7:3a:3f:ee:2c:49:19:e5:7a:84:9b:bc:d6:ef:
                    1c:64:2d:c0:5a:96:fe:28:5f:b6:12:0c:56:ae:42:
                    c9:9c:13:6f:1f:7e:34:fd:5c:8b:43:33:5d:67:c3:
                    5d:d1:f4:4d:70:08:47:24:4b:78:8c:60:ac:f0:a2:
                    e5:94:46:7c:1c:56:82:df:10:fa:f0:81:0b:22:78:
                    cb:88:d6:f7:c4:87:44:aa:6f:25:a2:cc:df:a2:5a:
                    05:94:25:33:ec:2a:00:a6:a1:7d:82:10:32:1f:bc:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:14:E5:F9:23:C5:FA:6F:C4:19:A7:FB:0F:A2:0B:BA:EE:8B:7B
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9acd6f0b13d8cab53f2f7979fe21d055484294fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:0d:fc:b4:4a:5b:58:ad:a7:12:87:a9:fb:40:39:19:f8:
         25:af:9d:b8:f6:bd:dc:36:1b:67:27:d7:79:c8:36:2f:e6:03:
         2f:fc:c7:21:32:21:bf:34:ae:b9:b2:c5:4b:14:58:eb:89:39:
         81:a6:3b:7e:cf:43:bb:de:25:97:24:9f:26:06:05:d9:42:71:
         8b:92:83:58:13:0e:5a:8d:77:e7:f6:9d:22:8b:f7:be:e6:a6:
         50:18:f9:34:4e:c0:7f:cf:49:de:f0:47:cb:d1:56:3e:2e:4b:
         a9:5d:6b:85:3e:2b:06:73:81:79:ed:e3:39:86:2e:bd:78:97:
         f1:95:5e:f2:c4:8f:c5:8d:e7:0f:18:e4:e6:e1:b7:e2:ff:c0:
         cc:1d:c8:11:2b:30:7f:b4:5c:ef:93:43:6d:2f:cf:62:bc:8b:
         42:88:be:fa:bb:35:4d:ed:2f:11:ed:05:7b:05:54:b4:29:54:
         81:6d:a1:c8:e4:40:38:9b:ff:ac:68:b7:53:c7:a2:af:f8:8a:
         5e:45:ec:81:d4:81:6e:72:ba:a8:3f:24:80:c0:19:27:da:5a:
         1e:b2:b5:3f:25:e8:62:1e:15:c8:a7:ca:e1:32:b5:5d:99:81:
         ce:94:d4:9d:e4:1e:6f:68:dc:49:50:dd:96:ab:e4:b3:b6:75:
         9b:63:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org