Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/07ea218e1e7bba56b09e53ae1fa1bf4c228ecb5e.roa
File:                     07ea218e1e7bba56b09e53ae1fa1bf4c228ecb5e.roa (raw, json)
Hash identifier:          twV3HczG0bEjPLSof/Z1ucqYrqFAVq+8X/jmtEltnL0=
Subject key identifier:   EB:4E:92:5C:70:35:85:DD:19:E2:42:48:6A:AE:A3:B5:70:17:94:78
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0A6D19
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/07ea218e1e7bba56b09e53ae1fa1bf4c228ecb5e.roa
Signing time:             Thu 08 Sep 2022 02:08:44 +0000
ROA not before:           Thu 08 Sep 2022 03:00:00 +0000
ROA not after:            Fri 08 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683289 (0xa6d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep  8 03:00:00 2022 GMT
            Not After : Sep  8 03:00:00 2023 GMT
        Subject: CN=07ea218e1e7bba56b09e53ae1fa1bf4c228ecb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:49:67:52:ac:83:02:0b:02:68:5c:ca:74:
                    16:d2:dd:88:3f:e2:6a:da:f9:79:c4:b4:26:40:72:
                    4b:41:15:7c:01:b9:83:e7:43:c1:6a:55:27:a3:1d:
                    8a:c2:af:3f:8e:cd:26:7a:5a:f8:65:c9:dc:c0:d3:
                    b2:ce:65:3c:f6:e1:3b:c7:27:54:95:d8:b0:ce:ec:
                    07:c2:f5:7d:15:c1:b3:8b:46:66:4f:06:d8:54:17:
                    6f:fb:16:e9:75:77:5e:7d:00:02:a2:0c:e6:91:04:
                    2b:41:b0:a2:6c:4c:6f:60:a5:a3:71:f5:a3:45:8f:
                    b7:f2:25:76:28:35:3e:7a:b7:30:8e:15:8c:00:5c:
                    5c:5f:45:c5:cd:55:8a:b1:53:14:04:25:15:ae:a1:
                    8f:9e:e6:0d:a3:a7:94:d7:e8:9c:18:4e:a6:9e:88:
                    4e:24:13:6a:77:de:f0:f5:eb:c8:90:8a:7e:f0:c5:
                    cb:a4:3e:49:d9:e1:09:16:c8:17:d2:13:a8:f7:92:
                    77:66:e7:fc:5d:a6:8b:3b:66:df:a6:10:06:62:15:
                    2a:fa:07:fd:a4:79:cb:ad:19:92:72:fa:10:cf:fc:
                    df:92:0e:06:b1:53:74:7b:81:9a:9a:2a:52:6d:d8:
                    c3:97:44:59:00:13:45:9f:fe:7d:6f:dd:13:e9:e7:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4E:92:5C:70:35:85:DD:19:E2:42:48:6A:AE:A3:B5:70:17:94:78
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/07ea218e1e7bba56b09e53ae1fa1bf4c228ecb5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:25:08:2e:8b:66:0e:8d:43:0c:ab:d0:da:56:76:1d:c1:58:
         be:33:72:15:db:16:d2:46:6d:e3:ea:c1:59:4f:4a:cf:03:82:
         21:4c:dd:64:78:ca:c3:e7:c5:59:04:06:78:df:82:42:31:fd:
         9a:01:94:74:18:72:16:3a:1f:88:e5:38:10:dc:c7:71:89:21:
         ca:ba:e9:ff:02:ab:9a:0c:02:55:4e:c7:ba:ba:d9:b5:19:69:
         11:79:3d:c2:13:57:6b:bd:d9:fe:e0:7f:db:39:73:c2:81:cc:
         24:81:72:e3:64:b2:28:47:b0:98:69:90:67:34:f3:4b:95:12:
         7d:a0:d0:76:e4:84:3b:56:4a:0e:59:f3:b6:50:11:e8:b3:13:
         2d:1a:b6:cb:64:dc:5e:b1:ca:c3:35:72:27:a0:8a:89:83:4a:
         c5:49:f3:e3:e8:22:63:f9:a9:ba:0a:50:6f:29:ae:6c:62:b3:
         77:43:18:06:d7:eb:75:37:c9:0d:8d:54:98:b6:ac:d4:22:2c:
         97:c3:50:3c:9f:c7:1f:c3:02:64:78:d2:33:11:9e:56:5b:a1:
         56:6c:44:91:82:11:f7:66:4f:47:5a:51:26:24:31:02:db:ea:
         5b:91:e7:1f:54:3c:40:5a:9d:02:e3:b8:59:42:ce:e3:c0:5c:
         9f:4a:6e:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCm0ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwOTA4
MDMwMDAwWhcNMjMwOTA4MDMwMDAwWjAzMTEwLwYDVQQDEygwN2VhMjE4ZTFlN2Ji
YTU2YjA5ZTUzYWUxZmExYmY0YzIyOGVjYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkMhJZ1KsgwILAmhcynQW0t2IP+Jq2vl5xLQmQHJLQRV8AbmD
50PBalUnox2Kwq8/js0melr4ZcncwNOyzmU89uE7xydUldiwzuwHwvV9FcGzi0Zm
TwbYVBdv+xbpdXdefQACogzmkQQrQbCibExvYKWjcfWjRY+38iV2KDU+ercwjhWM
AFxcX0XFzVWKsVMUBCUVrqGPnuYNo6eU1+icGE6mnohOJBNqd97w9evIkIp+8MXL
pD5J2eEJFsgX0hOo95J3Zuf8XaaLO2bfphAGYhUq+gf9pHnLrRmScvoQz/zfkg4G
sVN0e4GamipSbdjDl0RZABNFn/59b90T6ef/3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOtOklxwNYXdGeJCSGquo7VwF5R4MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzA3ZWEyMThlMWU3YmJhNTZiMDllNTNhZTFmYTFiZjRjMjI4ZWNiNWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAVCUILotmDo1DDKvQ
2lZ2HcFYvjNyFdsW0kZt4+rBWU9KzwOCIUzdZHjKw+fFWQQGeN+CQjH9mgGUdBhy
FjofiOU4ENzHcYkhyrrp/wKrmgwCVU7HurrZtRlpEXk9whNXa73Z/uB/2zlzwoHM
JIFy42SyKEewmGmQZzTzS5USfaDQduSEO1ZKDlnztlAR6LMTLRq2y2TcXrHKwzVy
J6CKiYNKxUnz4+giY/mpugpQbymubGKzd0MYBtfrdTfJDY1UmLas1CIsl8NQPJ/H
H8MCZHjSMxGeVluhVmxEkYIR92ZPR1pRJiQxAtvqW5HnH1Q8QFqdAuO4WULO48Bc
n0puBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org