Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa
File:                     d6b2cec2c0979ba3eaeef330333107618d67905c.roa (raw, json)
Hash identifier:          S1ZR/xllyfpomIFevLtEj+H0HEtdbD1VGAhCqC7InbU=
Subject key identifier:   F4:BD:EC:AA:9E:C7:8C:B6:0E:C2:AD:BD:2C:D1:A2:D3:AD:D1:6F:68
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       044110
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa
Signing time:             Tue 26 Apr 2022 00:07:32 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Wed 26 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278800 (0x44110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2023 GMT
        Subject: CN=d6b2cec2c0979ba3eaeef330333107618d67905c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:91:17:49:1b:d2:dd:6b:df:57:ed:c9:d6:
                    b0:93:c5:88:e8:47:11:93:09:77:dc:b1:d8:53:03:
                    f7:c7:2b:1e:52:5b:fd:58:89:b9:5b:48:d6:e0:44:
                    97:df:29:fb:2b:dc:fc:a8:0e:0e:8c:ad:8f:43:bd:
                    f6:30:c8:a6:e7:32:8b:2a:85:37:95:f2:c5:a1:0f:
                    b5:cb:8b:8a:eb:6a:f2:7f:f4:80:0f:b4:e0:81:1f:
                    3f:7a:23:8b:b1:30:18:db:1b:ef:d4:66:b5:a4:66:
                    84:7f:7b:db:a7:bc:70:ee:42:03:9e:88:6f:1e:9b:
                    05:da:c5:7c:9a:e8:13:fd:d3:d7:fc:e3:d7:9d:92:
                    1b:fe:dc:21:67:a2:5e:58:18:43:03:5b:c6:b6:7c:
                    d0:ea:2f:91:ef:44:37:84:c4:08:3a:17:e2:3b:4a:
                    6d:f2:5b:7d:aa:c4:7c:fd:3f:de:17:56:c0:1d:09:
                    94:7d:95:cb:68:a7:90:3b:71:a1:ee:2e:1a:00:0c:
                    40:2d:31:95:45:fb:d9:92:55:03:04:a4:f1:b7:b9:
                    97:c7:c6:ff:f2:79:89:ea:d2:36:81:a7:ce:b1:95:
                    1d:dc:36:33:ae:96:65:29:88:9f:6f:41:53:a9:3f:
                    0c:6e:d3:06:a1:55:a5:0b:f8:e6:32:83:13:63:68:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:EC:AA:9E:C7:8C:B6:0E:C2:AD:BD:2C:D1:A2:D3:AD:D1:6F:68
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/d6b2cec2c0979ba3eaeef330333107618d67905c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:bd:4f:53:48:49:4a:e4:df:4d:9d:1b:44:01:2c:14:ed:
         21:9c:45:5f:a1:13:bb:51:3e:43:a4:dc:d9:4a:91:63:b8:c2:
         f3:f9:f9:68:be:0a:9f:c2:b5:2e:2f:28:d5:80:c4:ac:4f:81:
         17:ed:bc:e9:57:5f:ea:c1:b8:da:5f:17:7c:e9:62:0e:f3:8f:
         54:87:29:43:58:39:5c:37:1e:a0:8c:44:e6:f3:4d:75:e1:33:
         3c:ff:9d:03:cf:a8:1a:1b:dd:c5:eb:8b:3e:48:cb:09:f2:03:
         cd:35:29:30:c8:20:5b:f1:34:76:7e:da:a6:ed:3a:b3:1c:64:
         69:2a:9a:37:fa:2a:19:81:bd:03:50:ea:0a:f8:a6:50:c9:bc:
         a9:fb:4a:31:9e:38:c5:ee:0a:60:16:e2:cc:c1:a6:03:f5:43:
         d1:68:be:47:d4:8e:0d:a4:9b:88:c6:eb:70:cb:cc:ef:e7:43:
         bd:f3:e1:36:c2:de:8b:84:4f:8e:99:8f:4c:21:34:91:88:02:
         a9:5e:b5:29:5f:f2:6e:c8:29:6e:26:d2:82:0b:94:d9:87:62:
         0f:90:81:30:8a:eb:5e:54:01:b4:5d:c9:85:65:62:4e:4e:40:
         1c:18:a6:5d:60:91:7e:ce:80:df:6a:60:c3:d5:0e:49:a1:dd:
         7b:05:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org