Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0545c88ff53c52e63f55d76bd95eba262351e0ba.roa
File:                     0545c88ff53c52e63f55d76bd95eba262351e0ba.roa (raw, json)
Hash identifier:          13Au4xOqK7iUOE6gjeno/n2sCxs77q7LSvcWq5NZ+54=
Subject key identifier:   E5:EC:A7:C6:6B:18:8A:89:D9:39:F4:6E:EB:C6:65:09:59:79:38:06
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04A7E8
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0545c88ff53c52e63f55d76bd95eba262351e0ba.roa
Signing time:             Thu 05 May 2022 04:54:50 +0000
ROA not before:           Thu 05 May 2022 03:00:00 +0000
ROA not after:            Fri 05 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305128 (0x4a7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May  5 03:00:00 2022 GMT
            Not After : May  5 03:00:00 2023 GMT
        Subject: CN=0545c88ff53c52e63f55d76bd95eba262351e0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:35:c2:e8:b0:92:a1:1a:57:0d:06:b5:89:
                    91:48:2d:33:3e:6d:70:f2:43:e5:d2:59:b5:aa:85:
                    55:2e:75:36:a3:54:39:0a:78:5f:8b:c8:e7:0c:4c:
                    cb:04:51:18:f4:4c:0e:80:b6:05:ca:dc:f3:d3:bd:
                    5b:2a:64:bf:0c:4e:c1:0d:ac:47:0e:1a:b0:d7:7a:
                    cc:14:b9:cc:0e:72:c9:45:7d:80:d2:07:dd:df:4a:
                    45:c7:3e:27:f1:5a:ef:52:dc:dc:00:30:a2:4c:01:
                    c1:1a:b0:a2:90:76:4d:32:a3:86:ad:1f:d9:74:d2:
                    f1:09:85:47:04:fc:b1:a6:2b:4d:70:c3:fe:02:d5:
                    d3:0f:9c:4a:6e:43:4d:66:22:23:07:81:8b:bd:91:
                    5e:c0:51:06:76:94:15:bb:39:ae:70:23:3a:22:2c:
                    26:69:c4:33:53:34:d7:97:26:25:50:91:50:7f:9e:
                    16:6e:be:79:f6:0c:e7:d0:0b:23:04:17:71:c4:56:
                    b7:45:0e:93:d3:bc:ed:cb:0d:b9:27:d2:f7:da:f8:
                    68:bc:0b:37:23:68:d7:07:b0:61:0f:7e:bd:6c:51:
                    03:bd:d3:7f:03:03:ee:f4:66:f2:06:94:67:37:bf:
                    50:7a:40:8b:6e:1f:0d:5d:69:fe:2e:5c:3b:a2:81:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:A7:C6:6B:18:8A:89:D9:39:F4:6E:EB:C6:65:09:59:79:38:06
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/0545c88ff53c52e63f55d76bd95eba262351e0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:24:2e:50:fc:bf:98:ca:85:c1:51:bd:ad:0d:06:1e:14:
         fa:5e:00:6f:08:14:29:cc:78:9f:fb:0c:4d:f2:82:45:b1:79:
         0c:c5:b3:f4:bf:b1:5d:36:4b:78:e1:72:ec:43:d2:c6:4f:85:
         98:06:bb:eb:84:51:18:66:ee:3b:1d:57:be:00:43:41:7c:f4:
         12:e2:10:9c:e1:12:9d:2a:be:63:84:3a:21:9d:25:bb:05:23:
         ed:11:d6:69:66:38:33:87:52:26:54:ca:c4:cf:69:32:b7:5f:
         ec:a5:08:42:57:88:0b:1e:f8:0b:92:6e:a6:10:0e:f6:4b:bb:
         3d:ef:66:f1:46:b2:89:e5:db:91:3b:d5:4e:6f:67:a0:4c:0b:
         16:3c:4f:87:2b:0d:cb:3b:18:d5:61:19:8b:53:01:b8:23:df:
         2d:ab:82:74:99:f5:0c:cf:9e:5a:2d:5a:36:ca:44:47:8a:c1:
         19:56:84:80:5c:e0:aa:46:96:8b:ba:2c:53:e2:19:2a:16:58:
         6f:b3:c1:ff:c5:f6:45:ba:d2:ef:75:0e:4f:a6:51:11:51:bd:
         4a:92:3f:11:d6:85:84:13:42:35:56:bf:18:d6:24:6b:0c:cf:
         40:8c:a8:eb:d3:6f:69:49:00:3d:82:e2:57:6f:92:da:0f:bb:
         ff:9d:37:46
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBKfoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNTA1
MDMwMDAwWhcNMjMwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEygwNTQ1Yzg4ZmY1M2M1
MmU2M2Y1NWQ3NmJkOTVlYmEyNjIzNTFlMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiMk1wuiwkqEaVw0GtYmRSC0zPm1w8kPl0lm1qoVVLnU2o1Q5
Cnhfi8jnDEzLBFEY9EwOgLYFytzz071bKmS/DE7BDaxHDhqw13rMFLnMDnLJRX2A
0gfd30pFxz4n8VrvUtzcADCiTAHBGrCikHZNMqOGrR/ZdNLxCYVHBPyxpitNcMP+
AtXTD5xKbkNNZiIjB4GLvZFewFEGdpQVuzmucCM6IiwmacQzUzTXlyYlUJFQf54W
br559gzn0AsjBBdxxFa3RQ6T07ztyw25J9L32vhovAs3I2jXB7BhD369bFEDvdN/
AwPu9GbyBpRnN79QekCLbh8NXWn+Llw7ooGsnwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOXsp8ZrGIqJ2Tn0buvGZQlZeTgGMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzA1NDVjODhmZjUzYzUyZTYzZjU1ZDc2YmQ5NWViYTI2MjM1MWUwYmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAHUEkLlD8v5jKhcFR
va0NBh4U+l4AbwgUKcx4n/sMTfKCRbF5DMWz9L+xXTZLeOFy7EPSxk+FmAa764RR
GGbuOx1XvgBDQXz0EuIQnOESnSq+Y4Q6IZ0luwUj7RHWaWY4M4dSJlTKxM9pMrdf
7KUIQleICx74C5JuphAO9ku7Pe9m8UayieXbkTvVTm9noEwLFjxPhysNyzsY1WEZ
i1MBuCPfLauCdJn1DM+eWi1aNspER4rBGVaEgFzgqkaWi7osU+IZKhZYb7PB/8X2
RbrS73UOT6ZREVG9SpI/EdaFhBNCNVa/GNYkawzPQIyo69NvaUkAPYLiV2+S2g+7
/503Rg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org