Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e7c66461fe35646d518e41dd41e858695725f360.roa
File:                     e7c66461fe35646d518e41dd41e858695725f360.roa (raw, json)
Hash identifier:          BCoMxFLxqryPUBjDbSSi+ZqLNs3YB2F5LaEcIQ/DUg4=
Subject key identifier:   ED:A4:04:75:73:98:AC:87:36:C8:35:DE:02:A0:6F:E8:E6:3F:AA:84
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       062E49
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e7c66461fe35646d518e41dd41e858695725f360.roa
Signing time:             Tue 07 Jun 2022 02:27:43 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Wed 07 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405065 (0x62e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2023 GMT
        Subject: CN=e7c66461fe35646d518e41dd41e858695725f360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:fd:c6:d6:d8:29:cc:14:7b:e9:38:7e:ec:
                    f9:b1:96:e4:89:99:25:8f:a1:45:13:b0:68:22:84:
                    03:06:21:8e:e2:e3:e9:52:14:37:75:3c:b2:7a:4e:
                    fa:c4:d7:7f:b4:72:e9:ab:0a:31:c9:2e:e6:ac:bc:
                    3b:57:86:c1:c4:5e:d9:a1:c9:2b:c4:5d:6d:12:e4:
                    e9:fa:31:c4:e9:91:8c:fa:9f:94:fb:02:cb:ea:e3:
                    69:be:fb:95:d7:14:79:dd:1d:2c:6d:28:31:c9:0c:
                    fc:78:a6:28:79:e7:70:51:d1:e1:01:57:ad:86:4c:
                    65:68:01:f1:0c:7f:7b:1c:dc:04:18:57:57:cf:3f:
                    b3:ce:04:71:d8:ec:91:66:26:0a:da:72:dc:c0:c1:
                    00:39:bd:b2:0a:9d:4d:0b:4d:f6:8d:e0:dd:9c:45:
                    0b:ff:50:c0:7a:dd:0b:5d:9d:15:02:be:24:51:2c:
                    7a:ee:e1:55:f9:e0:6a:60:e7:a8:6d:eb:e3:0a:5c:
                    c1:c2:e0:47:35:ef:41:1b:b9:80:1a:d1:09:db:6d:
                    4e:64:49:3d:1a:72:6a:e9:e4:92:7e:09:cf:ad:d4:
                    06:53:1b:6d:ab:a2:94:df:46:40:58:ae:16:ab:03:
                    7a:9f:9c:12:c7:e3:4f:24:58:5a:bd:89:e0:c8:cd:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:04:75:73:98:AC:87:36:C8:35:DE:02:A0:6F:E8:E6:3F:AA:84
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e7c66461fe35646d518e41dd41e858695725f360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d0:e6:cc:30:20:c3:6c:ea:b4:47:02:81:5e:ae:e6:be:f2:
         30:42:01:5c:f1:25:ec:6b:3f:ee:fa:1a:f4:10:39:08:26:8e:
         8c:08:4d:84:98:dc:fe:c7:bf:31:17:a7:f3:63:7b:70:83:55:
         a3:7c:63:49:98:bc:66:8d:00:7e:27:93:99:28:f1:f0:ce:8a:
         a2:b6:0c:9f:5e:41:88:87:b6:7b:2c:78:de:f4:4f:1c:cf:e0:
         a0:7d:5b:d9:f4:a0:6c:d9:3a:6b:1f:b8:8e:7f:c8:1e:06:c1:
         87:35:b8:3e:33:f6:14:14:3f:70:34:aa:6f:09:96:8a:f5:9b:
         84:b7:b5:55:bc:ab:02:2f:02:fe:89:c5:f6:2e:5a:58:2b:ad:
         9d:2e:cc:db:25:59:d8:ce:4e:29:0c:3a:e1:33:3c:58:04:a2:
         19:50:72:b6:03:f5:b9:df:ba:4a:d1:82:b3:1c:3b:9d:80:24:
         01:b5:87:62:6b:b5:b3:ab:ad:a6:31:9e:c4:7f:f1:5c:70:eb:
         9b:31:fa:8b:ea:54:f5:11:d4:b9:69:45:3e:93:ea:c0:bf:23:
         4d:ec:fb:cc:e4:31:96:1d:f8:f3:db:f6:55:18:9b:8f:a8:d9:
         8b:90:f5:d0:16:cf:8b:17:90:ed:62:a9:42:85:25:1a:df:7e:
         1b:05:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org