Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/af0d6467ddd745b5fa3044861667887205b67d55.roa
File:                     af0d6467ddd745b5fa3044861667887205b67d55.roa (raw, json)
Hash identifier:          Sry32ONiI3DhPqIBNbzHGZ+nVZ6oWFFdfEgmcG8nYZs=
Subject key identifier:   BC:67:AC:56:EE:59:49:9D:0A:03:95:E9:C2:8C:D0:41:60:B3:BF:B8
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0132E2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/af0d6467ddd745b5fa3044861667887205b67d55.roa
Signing time:             Tue 15 Feb 2022 05:03:21 +0000
ROA not before:           Tue 15 Feb 2022 03:00:00 +0000
ROA not after:            Wed 15 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78562 (0x132e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 15 03:00:00 2022 GMT
            Not After : Feb 15 03:00:00 2023 GMT
        Subject: CN=af0d6467ddd745b5fa3044861667887205b67d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:1f:76:7b:c6:68:3b:5c:b7:6e:f0:83:26:
                    13:21:9e:f2:15:2a:cc:cd:3b:d8:83:e5:ee:12:aa:
                    c8:b9:14:6c:34:a6:a0:12:15:23:39:33:4d:61:d9:
                    8f:e5:0a:39:5d:bf:23:9f:09:40:d3:fa:b1:6e:ee:
                    31:23:15:8c:ab:7b:c5:53:cc:6a:67:a1:bf:1d:63:
                    cb:0d:c6:50:02:36:21:35:0a:9d:86:92:3d:61:35:
                    5f:d1:d4:f2:e0:9e:f9:27:6e:8c:26:7e:90:46:9d:
                    42:05:74:17:87:ca:36:a3:a4:9b:db:6c:6c:a5:1a:
                    07:40:52:f9:8a:19:9c:ae:e9:01:a6:74:db:52:16:
                    a5:aa:31:88:14:22:82:3f:1e:f6:29:fc:29:2e:93:
                    e1:7c:18:0e:ec:93:26:86:35:7d:79:71:54:f9:27:
                    03:32:ef:a3:00:8a:d2:a1:69:59:c4:19:b4:ab:67:
                    e3:25:bd:b0:0d:4a:2c:62:ae:ed:f4:5d:d8:66:71:
                    0c:0e:8b:ea:aa:2e:0d:97:5c:71:14:b7:f0:0c:a2:
                    a7:c9:6e:cf:b8:78:1f:66:44:09:93:b3:f4:ad:c7:
                    d7:9d:0c:1c:ae:ec:6d:02:a4:9a:df:06:b7:1b:9c:
                    c2:25:47:1d:fd:f5:f4:9b:84:67:db:d0:b3:1f:b2:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:AC:56:EE:59:49:9D:0A:03:95:E9:C2:8C:D0:41:60:B3:BF:B8
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/af0d6467ddd745b5fa3044861667887205b67d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:0e:37:30:a5:e6:2a:e9:fc:12:80:87:cf:2c:a9:bd:20:
         98:17:0a:58:4b:ad:f6:57:1b:00:9a:8a:9f:12:62:f4:93:77:
         bf:db:4f:af:5e:53:d1:a4:95:ef:84:92:14:2f:5c:dd:30:c3:
         bc:b6:e2:d1:ce:46:97:05:f2:79:38:eb:9b:bd:fe:06:39:a0:
         46:b3:54:94:b2:6d:84:ed:f2:2e:00:65:54:96:15:66:c7:01:
         5c:15:45:c9:f1:3b:9a:9f:0c:ca:52:0a:7a:04:bd:3b:2b:86:
         92:82:85:b9:0a:8f:cf:a1:59:b6:2c:8e:a7:51:21:31:3a:79:
         02:67:45:d2:c3:b5:a9:d7:7b:04:8d:a1:ac:2c:cf:ab:64:fd:
         f5:fd:96:9a:fa:f1:63:16:5b:0d:0d:b2:5c:ee:7f:c2:4f:92:
         d5:b9:52:1e:ad:b7:0e:5f:46:88:3f:fc:0a:c3:40:9e:bd:90:
         81:98:c2:da:05:35:3d:f7:17:23:c9:cb:a3:c9:e9:f6:70:40:
         13:46:35:84:21:5a:29:39:d5:de:f1:76:99:b5:6d:b0:e9:74:
         79:cd:52:80:06:96:74:55:00:7b:d3:47:29:86:20:9b:ad:d7:
         ca:5b:c7:6b:54:24:cc:18:2c:97:c5:f0:75:a6:ac:2c:82:5b:
         c2:89:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org