Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa
File:                     b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa (raw, json)
Hash identifier:          4ROg2I4U5QwSqJhUTlSqKa2N07roKE/pAgtPb7WaFvw=
Subject key identifier:   E7:32:43:27:4F:60:CC:60:82:EE:5E:BF:B0:3C:BD:41:5A:61:FB:8D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05FBF8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa
Signing time:             Fri 03 Jun 2022 04:47:26 +0000
ROA not before:           Fri 03 Jun 2022 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392184 (0x5fbf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  3 03:00:00 2022 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=b20f2f247f3f2954fe87cf72ff2f54667be3dd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:5b:01:22:ce:c3:25:39:17:86:82:2a:df:
                    5b:6f:f6:6b:f8:c9:a1:fc:a3:f1:a9:5d:e1:5b:b7:
                    03:57:04:d1:b5:16:73:e9:0d:a6:b2:d3:c5:a3:3c:
                    a6:a4:ad:f8:e3:79:b5:d7:84:81:60:01:20:f7:0b:
                    46:c4:5c:8d:7e:62:ca:a1:ab:71:6c:99:38:86:1a:
                    3d:40:42:9d:44:a6:e1:4d:18:d7:f7:6f:92:7d:20:
                    b9:00:bf:44:e2:b7:9d:7e:e6:50:b9:8f:e5:54:fe:
                    00:ab:1b:bf:f7:cb:b7:7e:d5:39:99:77:92:32:0b:
                    15:86:60:0e:4c:8b:75:82:c0:c6:a3:51:de:46:52:
                    0b:e2:7e:bf:97:d9:81:d2:ec:7c:c4:53:1b:1f:03:
                    93:45:e1:c7:a7:97:bd:21:b9:43:7c:a4:d5:0f:de:
                    c4:11:ab:e1:94:80:1a:3e:29:c6:7e:0a:68:20:7f:
                    46:85:2e:87:0b:a3:5d:53:05:41:45:9e:d6:ee:8f:
                    97:e6:6a:58:30:b0:17:99:60:51:f3:f7:31:d3:5b:
                    a2:03:41:4f:c3:98:58:44:64:29:56:72:02:65:11:
                    4f:22:10:79:8a:fd:35:4b:f2:87:e2:93:4d:c1:c8:
                    6f:bd:93:1a:82:ef:8d:ff:44:85:41:e7:da:ef:1f:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:43:27:4F:60:CC:60:82:EE:5E:BF:B0:3C:BD:41:5A:61:FB:8D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b20f2f247f3f2954fe87cf72ff2f54667be3dd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:00:27:0a:77:fb:eb:60:15:bf:07:4f:9a:f9:b2:65:ef:b4:
         81:c1:1a:b8:eb:08:e8:12:e7:80:04:49:d2:b9:ed:1f:22:53:
         9a:e5:52:49:ad:18:70:52:2d:dc:20:66:87:a2:49:af:30:ea:
         9b:6c:b2:30:6e:b6:bb:58:a9:31:67:5b:86:f2:f2:4e:f3:40:
         05:84:6a:5d:57:a1:5f:41:9d:96:b0:a8:29:6a:ec:3f:b9:5b:
         b2:e1:92:cb:bc:89:8b:36:f8:67:94:ea:bd:37:43:ef:7b:56:
         67:c3:af:93:bf:88:a1:03:8d:2e:f1:12:d5:4e:0c:1c:50:56:
         3c:60:41:6c:db:c1:9f:5e:99:ec:cd:9e:97:00:46:63:20:cd:
         c0:62:39:6d:6f:22:42:33:33:69:cd:58:ee:13:b4:d9:46:12:
         59:1e:a3:f9:1b:6e:4e:be:44:d7:11:81:44:fe:cf:82:34:ab:
         d7:f4:d2:7b:c0:33:6c:83:1c:a1:51:4c:aa:35:57:4d:b2:28:
         d5:95:7f:2e:f2:6b:61:19:ec:b1:f4:b4:63:4a:30:df:c0:00:
         ef:42:c7:fe:2a:c8:c5:1d:de:cb:a2:99:b9:83:e8:41:65:c5:
         5e:01:29:91:68:20:6c:a1:61:aa:28:81:63:b6:60:c8:3a:e5:
         4e:57:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org