Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce8d00e75c7c8f21a75e288c098ace700e6fb7d1.roa
File:                     ce8d00e75c7c8f21a75e288c098ace700e6fb7d1.roa (raw, json)
Hash identifier:          c66bgSbkM6g4WHCHo1O3n+dYl9tut8Mnq4Tqp3RyDwo=
Subject key identifier:   C1:A6:01:EF:D4:FD:B8:51:53:42:8E:74:18:A3:D8:F0:A0:3B:5C:39
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       054ECC
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce8d00e75c7c8f21a75e288c098ace700e6fb7d1.roa
Signing time:             Fri 20 May 2022 02:15:15 +0000
ROA not before:           Fri 20 May 2022 03:00:00 +0000
ROA not after:            Sat 20 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347852 (0x54ecc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 20 03:00:00 2022 GMT
            Not After : May 20 03:00:00 2023 GMT
        Subject: CN=ce8d00e75c7c8f21a75e288c098ace700e6fb7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:e1:92:97:d7:ba:d8:ba:bb:c3:e0:f5:75:
                    dd:2a:83:de:3a:35:9a:ed:2d:2b:d7:bb:bc:da:6a:
                    09:bc:6f:1d:5b:ac:fe:a1:a2:fb:00:87:0b:7b:8a:
                    e5:e2:08:12:1f:d3:2f:c2:2a:c9:f3:22:db:ed:bb:
                    5e:76:5b:cc:ac:dd:e3:85:25:f8:f9:a5:8f:ab:d1:
                    62:8c:98:32:41:4b:2b:d7:12:e7:01:c0:ca:55:1e:
                    8b:8e:d5:9e:b3:e6:0e:96:3d:3c:db:a3:20:be:03:
                    4e:d9:ad:2d:05:06:05:82:da:28:b6:cf:07:e7:9c:
                    26:26:5c:0e:e9:7a:86:e4:5f:aa:b6:da:ba:b6:b6:
                    5e:88:47:1d:42:d2:d7:02:43:c9:3a:d1:3e:68:34:
                    db:81:b0:7e:96:bd:6d:72:95:ca:9c:0e:ad:6a:df:
                    c8:53:ab:cc:b2:55:59:df:62:83:1c:2e:69:a3:4c:
                    6c:69:93:4c:85:11:68:d4:9e:20:68:8a:c8:b1:92:
                    60:27:97:1f:6f:df:44:99:79:e1:04:d7:64:82:32:
                    bd:73:b5:44:78:6a:f6:f5:6f:80:43:7e:14:90:86:
                    fc:82:18:b5:3e:17:80:0c:f3:52:29:23:22:13:aa:
                    7c:cf:a3:27:88:30:9a:da:ee:49:93:dc:d5:49:6c:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:01:EF:D4:FD:B8:51:53:42:8E:74:18:A3:D8:F0:A0:3B:5C:39
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ce8d00e75c7c8f21a75e288c098ace700e6fb7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:86:ef:ce:99:7e:ea:05:ae:bc:9e:ec:5d:d1:f9:59:f9:
         31:bc:ac:3d:3e:d3:d8:68:cb:e4:e7:2b:bc:80:43:0a:e4:55:
         83:ed:54:bf:a1:d7:67:83:23:a5:fc:ba:a6:49:e6:07:14:e6:
         35:38:7c:2e:20:ee:15:38:f3:00:39:ef:e4:23:bc:e2:cf:7e:
         7c:7f:96:9f:69:64:bb:51:be:fd:67:5a:e5:3a:93:60:4c:54:
         d6:32:52:57:75:2c:67:74:52:7f:fc:c4:ef:48:e2:5f:5c:0c:
         0b:cf:f5:47:28:d1:d7:c1:ed:0c:b9:82:28:e4:3b:13:be:ac:
         e6:d2:ad:8e:e9:90:83:85:8d:2a:90:2c:ca:f0:6d:a6:a1:3f:
         87:1b:ea:96:40:96:52:ae:b8:c6:66:a1:41:d8:a5:e4:a1:eb:
         a2:00:50:01:de:b5:25:46:89:43:0b:99:34:07:3c:7a:f2:52:
         f2:4d:49:e9:93:08:ba:15:65:a8:9b:bb:2b:2f:b4:3c:23:c1:
         40:b0:79:d4:3a:fd:64:04:9c:38:b5:55:f6:bd:bc:bf:4a:3b:
         15:d6:62:f4:a9:ad:24:2c:59:41:86:b8:54:99:b9:74:c1:c1:
         82:ab:35:57:40:61:77:97:52:28:c7:3d:d0:a9:1b:31:02:a7:
         fe:3f:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org