Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b65b9bdc0855daf72c6f587fc23df9b8df89a30b.roa
File:                     b65b9bdc0855daf72c6f587fc23df9b8df89a30b.roa (raw, json)
Hash identifier:          Y3Ifxe6M9xZPL9Vg1P+PVKHkxS9JRMUM/EGNlTS+NDI=
Subject key identifier:   F2:4D:A8:56:2D:E2:96:4E:63:F4:15:02:D3:5F:A9:75:96:24:7E:78
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0CA1F5
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b65b9bdc0855daf72c6f587fc23df9b8df89a30b.roa
Signing time:             Tue 25 Oct 2022 00:38:09 +0000
ROA not before:           Mon 24 Oct 2022 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827893 (0xca1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 24 03:00:00 2022 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=b65b9bdc0855daf72c6f587fc23df9b8df89a30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:21:87:36:5f:54:a2:e8:cf:18:a6:2f:61:
                    9f:30:92:76:20:0c:b4:ba:18:a4:ce:7b:be:62:a7:
                    21:68:5c:71:eb:d3:04:bb:36:39:b3:32:aa:c3:6f:
                    17:57:ce:38:5c:17:a8:b4:e1:46:e6:df:a2:63:ac:
                    53:be:30:a1:bf:37:2f:e0:b5:8d:0f:04:67:20:e6:
                    95:42:09:08:31:7b:b2:b5:9c:7e:cf:74:72:01:81:
                    be:cc:66:cf:c4:80:8f:84:9b:e5:6d:97:13:a5:3a:
                    ca:41:d1:84:5c:99:26:06:a6:13:09:96:51:48:18:
                    8c:b9:90:9e:35:94:e1:51:76:8f:36:1c:ee:89:f3:
                    ef:c6:81:9c:04:41:2a:c8:b1:f4:51:4c:7f:1b:d6:
                    0a:f8:e3:13:90:88:4e:4a:f8:42:54:d0:ff:83:80:
                    6f:f6:49:16:52:10:c4:b6:57:67:38:e4:13:7f:03:
                    58:33:45:ac:3c:8f:88:68:43:ea:b2:2f:5c:59:23:
                    15:8b:74:7d:1d:d0:6b:ac:a5:85:ad:3e:04:7b:e1:
                    0e:2a:23:05:39:d0:9b:17:e6:d5:d5:a3:c6:c2:f6:
                    59:30:df:b0:7b:7d:44:77:12:a8:8a:81:c2:ba:e9:
                    04:cc:b6:1f:88:f4:3e:df:2a:5d:df:82:b4:b9:50:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4D:A8:56:2D:E2:96:4E:63:F4:15:02:D3:5F:A9:75:96:24:7E:78
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b65b9bdc0855daf72c6f587fc23df9b8df89a30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:a0:92:19:91:52:c1:6c:f4:cc:4c:1a:c8:4f:f5:f1:a3:
         07:7b:c2:43:6f:aa:05:a2:62:0b:e4:b8:4a:8e:98:25:22:7f:
         03:d9:46:c9:b5:da:5b:73:88:16:83:47:3b:00:99:72:da:bc:
         71:0c:bd:56:15:ee:a0:4c:a5:32:c3:e4:ec:6d:5c:bc:c0:a4:
         cf:db:63:53:46:7a:6d:43:2e:bd:72:cd:8f:ed:94:ca:48:7e:
         01:a9:6c:98:25:a0:aa:d1:b7:27:10:b1:57:eb:11:41:ae:00:
         aa:86:d1:c4:6a:13:e6:6b:c7:e9:fd:b2:f0:f0:48:83:8b:5a:
         5f:ea:03:c3:cc:2a:7e:f2:2d:3c:fe:d3:0c:f8:3a:5f:cc:52:
         0a:83:7c:46:40:50:24:81:9e:b4:65:3e:98:b1:16:4f:29:7f:
         e2:be:e4:d8:01:ef:bb:7e:ae:1e:54:0f:8b:b1:56:9a:91:5c:
         ea:35:c2:44:17:08:91:20:58:ba:cc:3f:ce:70:bf:a0:ee:73:
         8e:bb:2c:71:42:4b:57:65:d6:57:28:75:88:a1:42:2f:da:a3:
         17:2e:fe:ee:3a:bc:56:9c:8c:7b:73:5c:04:27:0c:0b:e3:b5:
         23:bd:90:2d:47:ad:05:cb:d3:9c:c9:79:36:1e:57:9e:fe:5b:
         c6:40:c5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org