Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa
File:                     b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa (raw, json)
Hash identifier:          ye+4r/psZXIOc6kwJNfbiAvPKva+M+JsaaZBcBK6fus=
Subject key identifier:   4E:DC:90:5C:7A:6B:CD:F3:9C:7E:1F:C8:12:5B:16:E4:BB:39:E7:19
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08F37D
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa
Signing time:             Tue 09 Aug 2022 00:08:18 +0000
ROA not before:           Tue 09 Aug 2022 03:00:00 +0000
ROA not after:            Wed 09 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586621 (0x8f37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug  9 03:00:00 2022 GMT
            Not After : Aug  9 03:00:00 2023 GMT
        Subject: CN=b4dd8590f6bb392826e7295493f6d60d2dd005ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:dc:04:ac:d0:9f:3e:b0:e5:55:5d:41:26:
                    f9:7e:aa:cb:b9:41:8d:bf:d8:04:cb:12:1f:79:47:
                    f7:36:a7:66:39:bb:11:42:d7:26:93:50:cb:6f:90:
                    90:78:f1:02:d0:56:f8:f2:b0:9b:a7:68:cc:37:fe:
                    03:eb:73:75:dc:62:77:35:d2:2b:e7:e8:16:95:24:
                    29:a4:98:a1:35:df:d1:d9:05:98:ec:d1:37:17:6d:
                    cc:79:29:c2:60:bf:48:6f:13:d2:6a:1a:93:08:40:
                    b9:00:e7:7f:93:53:5f:94:7f:1a:e2:2f:83:2c:d1:
                    68:88:0d:0c:44:75:89:35:b2:66:f9:d0:45:49:a5:
                    4c:d6:a3:78:3f:d7:14:60:9c:19:af:9e:7f:55:03:
                    9b:38:37:cd:28:67:9f:1e:55:0f:24:54:b0:15:31:
                    63:3d:1d:20:79:ad:14:16:e2:09:43:97:3a:b8:b4:
                    cc:54:19:ee:9d:cb:f9:de:98:b2:b8:59:0b:5b:35:
                    38:66:0a:f2:57:e1:ea:42:a7:38:87:57:63:e4:28:
                    a3:cb:89:cf:85:2f:11:66:72:58:ab:30:59:84:fa:
                    0f:9b:06:96:a6:fc:0c:e5:58:cd:ff:2b:f8:c7:b1:
                    c0:90:13:3d:b7:25:83:fd:62:d3:d0:f2:5a:20:70:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DC:90:5C:7A:6B:CD:F3:9C:7E:1F:C8:12:5B:16:E4:BB:39:E7:19
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b4dd8590f6bb392826e7295493f6d60d2dd005ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2b:2e:37:1e:7c:c5:76:68:82:80:b7:1a:36:cd:50:a0:89:
         d8:f6:79:0f:bb:ac:29:fb:61:a7:84:55:c6:78:1b:e2:64:3b:
         7e:94:0a:94:ec:9e:df:26:d9:f1:c8:64:c1:b1:81:19:69:2d:
         98:a7:6c:46:b7:ad:e3:fd:4e:9c:24:90:03:49:f0:6b:41:13:
         af:2d:bf:b8:96:e8:b2:76:59:96:dc:1c:ce:56:8f:cd:f9:77:
         30:02:ce:e5:1f:aa:17:88:32:a9:3f:1f:a9:ab:e0:17:bd:fe:
         a4:e3:eb:fc:e6:ae:b2:b7:ac:48:0a:fe:13:e3:99:59:3a:94:
         5a:14:d5:a8:5a:63:f9:7c:57:6f:1c:09:84:78:cf:06:f7:0a:
         b6:7b:8d:94:6a:ab:72:28:98:79:a8:8a:39:c3:5b:a8:04:b0:
         d2:62:da:0b:d7:a3:ab:ca:4f:41:5e:5b:0b:de:a7:e9:bc:33:
         b0:31:dc:6d:bf:2f:50:a2:02:e8:a7:2f:4b:47:72:33:9e:92:
         b4:ab:9d:a1:19:0c:8a:1b:2e:a1:03:b4:19:ba:93:4c:78:94:
         d4:5d:38:7f:1b:29:45:b3:a6:30:2c:b7:de:9e:43:85:9f:d4:
         67:00:31:b6:ca:66:19:58:b5:7c:86:1d:2b:28:22:9c:27:f2:
         54:86:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org