Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ee27a8b9fdf28095f9f82cb5ed35802b324d0f7d.roa
File:                     ee27a8b9fdf28095f9f82cb5ed35802b324d0f7d.roa (raw, json)
Hash identifier:          P+25gyUzP2pjYgx83vbgJexyTK1YJNchG7e31vjTl30=
Subject key identifier:   0D:C6:1B:15:7C:2E:DA:66:DE:63:6E:AE:46:D9:35:34:6D:63:00:43
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04884E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ee27a8b9fdf28095f9f82cb5ed35802b324d0f7d.roa
Signing time:             Mon 02 May 2022 01:54:33 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Tue 02 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297038 (0x4884e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2023 GMT
        Subject: CN=ee27a8b9fdf28095f9f82cb5ed35802b324d0f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:e5:72:5b:ac:db:63:d6:d8:8f:84:34:0d:
                    43:a6:30:fc:6a:42:af:72:21:a6:90:50:e3:56:53:
                    02:81:25:4b:c8:f8:a3:85:51:41:cc:59:01:aa:6c:
                    ae:02:cb:47:db:33:df:25:1e:1a:8c:be:cb:70:fb:
                    dd:00:72:bf:be:8c:7b:1d:6a:db:3a:f1:97:b7:00:
                    9b:fa:22:c6:3d:f6:dc:fb:6a:3e:66:6d:58:c8:00:
                    0d:ae:dd:6b:db:63:8d:06:6c:60:f8:35:99:45:79:
                    86:60:10:25:87:b4:e4:32:c3:7b:fa:36:8a:b1:39:
                    1a:74:1f:16:4f:01:7d:b0:f0:bb:a0:01:8b:27:14:
                    64:f7:81:86:12:27:70:21:77:27:6b:ce:e3:08:44:
                    5f:90:72:f3:50:c5:3d:59:99:fa:bb:2a:9f:49:32:
                    0c:31:93:d3:dc:4e:09:db:de:46:04:ef:28:a2:c2:
                    d4:2d:4a:4b:9d:94:63:d2:8c:4d:ae:c4:53:c5:d1:
                    cd:d8:36:e5:0f:b1:87:fc:60:09:1b:37:d4:35:b7:
                    4d:42:96:d9:94:df:ed:76:05:d6:3b:f4:d8:b2:15:
                    97:32:2e:2b:a8:35:c4:66:f0:9a:82:79:5d:9b:e7:
                    ef:77:8a:60:86:56:b2:52:4e:77:2c:a9:a6:d6:57:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C6:1B:15:7C:2E:DA:66:DE:63:6E:AE:46:D9:35:34:6D:63:00:43
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ee27a8b9fdf28095f9f82cb5ed35802b324d0f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:43:76:25:df:8d:6a:70:f6:62:8a:a3:5b:7a:1a:76:7e:
         c0:05:d1:1f:18:cf:8b:1e:55:d3:76:ef:87:50:cc:df:d3:04:
         7b:10:37:65:e1:09:b7:91:cf:ad:2c:52:6f:0f:c5:c5:7a:68:
         26:be:2c:39:6d:1b:e6:08:2a:cd:95:d7:5c:30:82:65:b1:d8:
         0f:f8:5b:dd:f7:53:f1:fc:a0:d1:4a:7f:31:43:ff:0c:a3:f9:
         5d:d8:8c:3d:0e:9b:fc:03:08:80:e1:f9:e3:be:d4:66:d8:e9:
         84:78:2c:82:64:87:e7:13:9f:d0:7a:cf:64:64:2a:66:2c:d3:
         d5:81:b0:3c:2b:63:56:0b:75:52:e6:5b:66:7d:18:8f:a5:5a:
         44:10:9d:44:5e:92:78:b2:5f:1b:38:cb:f8:4e:90:04:be:67:
         fd:1d:6c:9f:7b:1b:43:fb:e5:73:39:d2:bd:d6:83:18:9b:9b:
         3c:d0:bd:ce:22:ca:76:bc:05:5c:14:6e:a0:13:a3:a2:0d:c1:
         c5:28:fa:ea:bb:9b:d3:9f:7e:c3:0b:9e:aa:e3:3e:f9:43:a7:
         9a:de:39:f2:ea:aa:09:5c:14:8a:18:ec:a9:ce:ff:7c:18:93:
         ef:0f:79:36:c9:4e:c9:36:b8:4e:0f:df:04:02:07:14:cf:a7:
         57:56:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org