Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a9e0248c4b83eef2a29424258f892f862429a45c.roa
File:                     a9e0248c4b83eef2a29424258f892f862429a45c.roa (raw, json)
Hash identifier:          aCn6LC0I//vBU+jyUbOYED7Vv4v2eTRjLYn49SJXo3M=
Subject key identifier:   A9:62:15:12:B4:D1:7A:B1:52:46:91:26:99:BC:46:4D:0C:02:DB:77
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       078A4B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a9e0248c4b83eef2a29424258f892f862429a45c.roa
Signing time:             Tue 05 Jul 2022 03:12:26 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494155 (0x78a4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=a9e0248c4b83eef2a29424258f892f862429a45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:8b:8c:11:ac:99:a6:a7:e6:20:6f:c9:94:
                    87:78:94:72:f4:e7:6d:78:b8:a0:3c:ac:eb:cd:8a:
                    90:6d:0a:8b:51:9c:e3:81:63:f2:3d:a6:a9:81:74:
                    98:f1:48:e4:c0:25:8a:ef:22:83:0b:ae:24:de:40:
                    27:45:3f:3e:ab:b2:e9:64:98:10:99:65:e2:75:d2:
                    f2:b3:97:31:7f:6f:62:14:e0:d1:30:e1:c5:2c:2a:
                    8d:44:b5:da:47:7e:c2:3a:61:9e:3f:83:3e:6c:f6:
                    e1:3a:9a:1d:b1:d9:9f:7c:c8:75:65:b9:45:d6:94:
                    c6:7e:d3:6c:0f:0c:79:37:c6:3d:24:bc:e3:cc:ff:
                    ff:1e:43:cf:f8:5d:e7:f1:20:e1:4d:46:31:95:3f:
                    04:94:13:82:65:0f:7c:fd:15:4f:07:b2:ec:87:3f:
                    cc:93:26:35:13:62:31:61:2c:61:ec:1d:01:88:be:
                    20:d9:68:fb:7b:f4:8d:55:6b:8a:d3:2b:43:ed:20:
                    78:ef:cd:28:20:9f:98:30:ee:29:b7:26:a6:97:0a:
                    93:5d:bb:e8:5f:dc:80:22:6c:0a:98:c3:e1:b2:84:
                    2d:88:cb:30:ef:ef:69:e6:0c:0f:03:d3:93:34:a4:
                    d9:70:8b:a7:e2:45:24:e4:70:81:c9:9f:4a:f9:25:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:15:12:B4:D1:7A:B1:52:46:91:26:99:BC:46:4D:0C:02:DB:77
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a9e0248c4b83eef2a29424258f892f862429a45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:e9:9a:d8:b9:3a:06:01:0f:1a:93:00:eb:c1:a0:05:17:
         50:31:28:a2:e6:0c:bc:2f:c8:da:ce:81:a5:0d:0f:e1:87:c0:
         4c:c0:e8:1e:7f:9e:a3:16:06:39:5d:2a:b0:88:27:d9:89:6c:
         e6:d7:fa:3b:31:92:91:af:99:96:08:26:3f:93:3d:d4:58:47:
         f2:4c:59:95:8b:43:3f:af:00:3e:7c:1a:03:c7:2e:11:b1:5d:
         35:f4:f3:6a:1a:bf:a6:b3:4f:fb:f6:43:86:c5:b0:35:26:75:
         e8:8e:f1:87:96:f3:39:8e:17:3b:71:9e:4e:48:8d:4b:e9:bb:
         db:4c:37:b4:8b:a6:c5:9f:15:64:53:55:3a:00:74:be:31:fa:
         fb:d8:c1:da:df:5f:5f:e8:85:d9:ca:dd:5e:26:e4:e9:6b:c9:
         c4:12:53:e0:1f:24:5c:a8:cf:e5:a7:35:df:b1:6d:ec:28:36:
         ce:39:c6:cc:d6:64:19:aa:18:3d:d5:91:39:64:4b:de:e4:e6:
         38:3a:5b:4a:08:6b:6c:df:f9:28:fe:3d:05:c2:6b:d3:5b:96:
         10:6b:03:d7:94:dc:f3:99:67:6a:0f:62:0f:52:7f:5c:96:78:
         65:ba:71:b8:5a:e7:e5:58:46:c5:3f:35:4e:59:9f:eb:f7:4d:
         9a:de:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org