Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d61988ff005bedb08d7563067deb6b9fe58770b3.roa
File:                     d61988ff005bedb08d7563067deb6b9fe58770b3.roa (raw, json)
Hash identifier:          5sawkcHFHqwD4KFhRGj+tmkB3m/qCpVaWTdJjjvcB90=
Subject key identifier:   A6:3D:BF:90:EA:CA:3F:0E:41:31:78:41:B7:3C:38:D6:C8:17:68:D2
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       079BC3
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d61988ff005bedb08d7563067deb6b9fe58770b3.roa
Signing time:             Thu 07 Jul 2022 01:16:57 +0000
ROA not before:           Thu 07 Jul 2022 03:00:00 +0000
ROA not after:            Fri 07 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498627 (0x79bc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  7 03:00:00 2022 GMT
            Not After : Jul  7 03:00:00 2023 GMT
        Subject: CN=d61988ff005bedb08d7563067deb6b9fe58770b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:45:29:41:29:44:13:db:c3:39:59:6a:97:
                    eb:f7:42:72:a0:00:67:52:13:69:d5:e2:84:75:79:
                    14:3e:0e:33:00:c0:57:6e:62:e4:69:f1:8d:b8:70:
                    c4:ed:57:be:e6:b5:26:da:61:26:4c:72:13:e9:4a:
                    a9:af:05:43:c7:c1:0b:0d:be:33:ce:89:7c:97:17:
                    49:bd:21:a9:dc:79:08:64:70:a7:ff:a2:49:94:ea:
                    9a:b8:e2:73:bf:8e:24:93:67:5f:7f:15:49:63:0c:
                    32:6f:34:d2:06:69:b5:7e:ae:97:06:a0:e3:85:ca:
                    eb:a6:6e:d6:a3:ee:e7:4a:b7:7d:f1:8c:fa:10:a6:
                    00:1a:78:e9:17:82:b3:49:f3:43:6c:5e:64:d5:62:
                    e5:b9:82:67:c8:7b:02:1f:06:89:1c:bb:cb:52:29:
                    96:ef:a1:1b:7c:24:10:9a:bf:dc:98:6e:c3:fb:17:
                    df:51:30:43:2e:8f:1b:56:b4:c5:bd:aa:4f:db:ef:
                    71:62:a0:d7:0c:c1:ca:c9:ef:10:88:e8:15:d5:27:
                    78:33:3b:b7:9c:a7:20:a5:81:25:38:34:9c:4f:44:
                    06:3c:e4:1f:56:3d:58:cc:85:65:ed:f0:c3:d9:69:
                    65:82:6c:0f:3b:70:bb:aa:0c:24:a3:c1:5c:d7:cc:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:BF:90:EA:CA:3F:0E:41:31:78:41:B7:3C:38:D6:C8:17:68:D2
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d61988ff005bedb08d7563067deb6b9fe58770b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:9e:ef:8f:dd:2b:da:72:d4:33:2c:04:64:77:73:ca:97:
         e7:f8:3e:08:f4:3f:29:ca:f6:0c:e8:8a:15:82:e5:5d:c8:b4:
         37:82:7f:1e:8a:d2:47:99:69:29:d2:4c:11:d4:fa:c6:b9:c8:
         5c:01:6a:56:6b:87:3b:0c:01:cb:c2:1c:36:00:81:04:e6:3a:
         0b:0a:5e:f9:49:d9:1f:54:8d:ff:74:eb:85:e2:28:65:95:ff:
         7a:13:d2:d9:2b:e6:42:e1:c6:ef:ce:d8:d5:49:a6:71:a7:18:
         aa:43:33:22:34:f2:97:e2:ad:8a:2d:2e:47:d1:d4:ea:da:02:
         f2:b5:ac:b5:d2:b5:32:4b:a0:e6:6d:b8:44:4d:4e:09:55:1d:
         2d:5c:92:0f:0f:3c:40:4e:77:f9:16:b2:ee:1a:b3:48:8b:30:
         e9:13:8d:4b:f6:d6:47:8e:0b:75:c4:a1:06:1c:ae:89:fd:e7:
         47:57:8e:67:d6:e7:56:0d:a0:c8:46:ea:94:e0:0a:f6:bb:d5:
         a2:65:0c:93:d2:88:4e:67:ef:6f:5a:c4:92:f3:5d:87:ba:bb:
         3d:dd:8a:0b:62:44:9a:bd:d4:b5:e7:7b:27:a2:91:6c:8e:e4:
         52:d2:6e:2b:e1:02:20:08:3b:92:7d:b5:1f:99:50:2b:83:bd:
         dd:70:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org