Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/ecc3634533153c7d4bdc3c2362b1f6cca9405480.roa
File:                     ecc3634533153c7d4bdc3c2362b1f6cca9405480.roa (raw, json)
Hash identifier:          7HzNDaGeFvGsqMNVDLkhHHfMqDUbO4MXXTOSEuMM4fA=
Subject key identifier:   22:FF:36:D9:E9:91:2C:1A:E2:BE:DC:8D:22:D4:E8:40:C4:FC:8E:E8
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       16F469
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/ecc3634533153c7d4bdc3c2362b1f6cca9405480.roa
Signing time:             Thu 25 May 2023 19:16:12 +0000
ROA not before:           Wed 24 May 2023 19:16:12 +0000
ROA not after:            Sun 25 May 2025 19:16:12 +0000
asID:                     52266
IP address blocks:        201.219.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504361 (0x16f469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: May 24 19:16:12 2023 GMT
            Not After : May 25 19:16:12 2025 GMT
        Subject: CN=ecc3634533153c7d4bdc3c2362b1f6cca9405480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:ed:16:0c:35:01:8e:9c:f9:d5:28:2e:87:
                    93:b0:97:f1:b7:30:86:11:87:80:07:e1:ae:74:45:
                    d3:6d:8e:aa:cf:9d:a3:6a:6b:5f:a8:1d:8a:df:69:
                    8d:db:ed:26:86:b6:52:8a:ad:97:f0:c5:9e:ae:4e:
                    7e:7c:0b:59:cf:0b:07:e2:28:09:42:08:2c:b8:57:
                    31:85:62:03:d4:7b:44:3a:9d:3b:73:79:e1:4f:35:
                    f0:95:31:63:dd:d0:31:c0:f2:93:f4:bc:b4:4e:a8:
                    55:20:32:3d:63:9e:c1:7b:6a:53:f5:a1:0f:b1:88:
                    f6:33:d7:7e:80:06:ab:c0:0c:d9:c7:eb:09:1a:2d:
                    ba:08:b9:86:d0:72:3e:49:da:f5:db:99:7a:d9:ac:
                    9b:76:c3:d7:8f:df:84:73:83:fe:97:64:ff:e9:34:
                    6d:35:0a:83:91:8c:7b:00:b3:b8:58:bb:47:79:d5:
                    fc:f0:64:bd:ab:4d:96:54:c7:38:b1:3a:da:d1:b8:
                    0c:6a:fd:b1:7d:90:0a:e8:18:03:fa:bb:71:04:a4:
                    ec:f8:14:8c:d6:c9:1f:19:80:82:42:c2:fa:b4:16:
                    6a:2c:99:45:89:97:80:28:01:e2:7d:77:87:c9:7e:
                    b6:9d:bc:f7:78:9f:de:f6:7f:35:84:dc:bd:46:24:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:36:D9:E9:91:2C:1A:E2:BE:DC:8D:22:D4:E8:40:C4:FC:8E:E8
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/ecc3634533153c7d4bdc3c2362b1f6cca9405480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:18:0f:da:53:fb:17:65:ce:a0:0b:6c:d9:41:81:27:5e:c9:
         c4:e4:c8:2f:83:c3:0a:9d:d6:62:d8:fb:a0:ce:d1:19:0a:f1:
         be:07:77:ee:dd:34:a3:14:c7:6d:1d:b7:ce:d5:d1:90:f0:3a:
         c7:93:e1:fc:af:50:4d:35:bd:e4:43:79:7e:4e:2d:a3:7c:73:
         b6:9d:6c:a4:49:ef:77:d0:35:8a:08:38:81:80:a4:7f:de:c9:
         3a:4e:8e:3c:7f:a7:73:67:24:25:f5:f0:54:ea:4a:9a:ed:3d:
         54:4e:ae:0d:76:d8:0b:49:1d:14:52:e6:ff:81:82:68:b3:32:
         34:36:3e:48:ca:35:cb:54:99:c4:ae:71:58:ba:06:3d:46:42:
         89:c4:b9:01:9f:ec:db:f3:8b:1a:ff:7b:ec:01:5e:8b:00:cb:
         fd:d3:d9:b7:65:bc:05:42:0f:99:4d:8f:0d:21:b2:cd:0a:b9:
         a2:6d:ea:96:63:2d:01:d3:ec:e4:f8:9e:0c:be:0a:f3:29:e8:
         6a:db:07:d9:75:20:26:0e:49:57:bb:09:cf:6d:49:a2:ee:ad:
         22:2e:f0:f9:29:59:21:f6:9c:04:45:f1:12:e9:72:c8:d3:36:
         0f:7c:87:5d:9d:ff:d5:17:28:ac:bb:ae:79:15:e9:56:83:3e:
         3f:60:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org