Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa
File:                     ca58a1011417882e2a1749c57bf6191942f0d140.roa (raw, json)
Hash identifier:          LemKHukTbbvozYGqoU1dVw+70MVmoQpriTKIcU5ObKQ=
Subject key identifier:   92:73:13:09:25:C8:74:C8:05:62:E3:33:06:2D:6E:2E:8E:1A:D9:FF
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01D197
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa
Signing time:             Tue 01 Mar 2022 05:31:50 +0000
ROA not before:           Tue 01 Mar 2022 03:00:00 +0000
ROA not after:            Wed 01 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119191 (0x1d197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar  1 03:00:00 2022 GMT
            Not After : Mar  1 03:00:00 2023 GMT
        Subject: CN=ca58a1011417882e2a1749c57bf6191942f0d140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:3d:91:b4:1e:5d:69:4d:5e:6a:fc:04:f2:
                    fe:ea:2a:6b:77:9a:77:5f:9f:7a:ac:d9:0d:6a:22:
                    b6:a9:b9:30:77:fc:20:86:7d:8e:ec:d4:95:7a:9f:
                    65:47:55:63:8d:b7:ec:7b:83:bf:56:13:17:4e:8a:
                    31:9a:ab:85:d3:7a:5c:4c:5f:18:8b:05:1d:02:ba:
                    40:0d:c3:9f:fa:4a:01:00:46:bf:5f:06:c9:db:f4:
                    a5:85:fa:ca:d9:3f:37:b2:37:e5:06:4c:2a:0c:00:
                    99:5a:ad:50:46:23:c3:a6:ea:cb:6e:af:88:b8:97:
                    e5:a4:cc:5d:b4:69:11:9e:fb:20:6f:78:57:57:a9:
                    92:94:fb:db:9b:4b:5a:f2:79:f2:69:54:0c:47:10:
                    12:65:15:ac:15:fe:02:c6:a6:38:63:82:99:46:73:
                    92:46:fb:92:af:c8:04:eb:0d:32:4c:ae:c9:a0:92:
                    57:29:54:eb:fd:c8:ac:8b:42:d5:87:18:1d:b6:24:
                    34:3c:50:91:92:bf:65:87:04:58:33:91:65:fe:8d:
                    5f:b0:eb:10:90:ad:3b:ce:d9:2e:68:95:75:4b:9c:
                    bf:bf:80:17:e6:88:59:f6:5d:f5:b2:ef:15:cc:39:
                    cd:2b:ce:49:7c:da:22:fb:c0:7f:5e:b5:e7:f1:ab:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:13:09:25:C8:74:C8:05:62:E3:33:06:2D:6E:2E:8E:1A:D9:FF
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ca58a1011417882e2a1749c57bf6191942f0d140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:77:13:5d:c7:e2:9e:97:e2:ba:6c:b0:35:5b:1c:80:2d:42:
         ac:98:73:ee:19:72:d4:79:b7:0c:eb:3b:ce:32:40:df:11:30:
         83:ac:4b:3d:52:66:8d:0e:c8:fc:69:da:54:ba:74:28:80:57:
         93:1d:8a:8f:bc:1f:2b:64:d8:cd:e5:a8:ae:3b:f3:f6:39:af:
         95:94:a0:dc:31:b1:f4:e4:81:00:b7:b9:81:cc:45:36:26:16:
         9f:2c:2a:c1:32:e7:e1:26:f3:44:fd:5f:4f:2e:b4:cb:53:1a:
         2d:79:8f:e7:be:a6:bd:c8:f2:a5:2b:4f:06:27:85:ad:68:d0:
         67:00:dd:eb:35:2d:9a:d8:2d:a5:49:5f:2d:7a:dd:61:e3:87:
         a3:04:e7:6e:30:ad:23:ab:3b:ed:96:40:d3:b7:ff:57:aa:06:
         be:40:be:d2:d0:03:9f:ba:35:37:a1:b9:c1:02:5f:80:03:76:
         5b:04:96:db:95:ea:af:1d:bb:e2:08:cb:c2:10:8e:8d:c3:ba:
         2c:f7:7f:9e:5e:ce:b0:2c:cd:cd:92:36:31:ad:94:41:5b:6f:
         22:c2:4a:f8:5f:3f:a9:0f:60:d4:8a:13:ee:4f:48:5e:2d:43:
         cc:c6:15:06:da:b0:aa:fa:82:59:b4:0c:76:72:f9:6e:cb:34:
         aa:74:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org