Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19cd6541683f50cafa1b541df3390c653e26db56.roa
File:                     19cd6541683f50cafa1b541df3390c653e26db56.roa (raw, json)
Hash identifier:          J6tUd22EXmol0pxi9E7sKfx0303BC2zt6UAI+ifYm5A=
Subject key identifier:   CE:7C:B4:AF:A1:5C:19:01:01:DF:5F:E1:4E:57:F6:7D:C2:C2:DF:2B
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0B2853
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19cd6541683f50cafa1b541df3390c653e26db56.roa
Signing time:             Fri 23 Sep 2022 05:46:26 +0000
ROA not before:           Fri 23 Sep 2022 03:00:00 +0000
ROA not after:            Sat 23 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731219 (0xb2853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Sep 23 03:00:00 2022 GMT
            Not After : Sep 23 03:00:00 2023 GMT
        Subject: CN=19cd6541683f50cafa1b541df3390c653e26db56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:bc:b2:59:fe:41:e1:4a:86:42:17:ea:ca:
                    6a:82:bc:fe:86:fe:b9:fb:d6:64:48:31:18:c3:5f:
                    52:3e:ce:5f:49:f0:57:24:8a:19:56:74:a2:c1:87:
                    f2:8e:28:1f:07:05:fd:05:86:ac:38:a3:c6:26:5b:
                    e8:f5:61:f4:fc:23:75:8b:ab:b5:25:c5:a6:5e:95:
                    1f:d0:e0:45:00:04:1e:e0:12:3e:7b:9a:a1:61:f9:
                    3c:c1:33:2a:11:4b:d8:fd:ce:4d:6c:07:56:36:1d:
                    5a:1a:8d:49:a3:df:da:bf:08:3a:03:30:5b:0f:47:
                    d7:e8:86:38:a6:f5:22:cb:51:0c:b1:c7:43:79:e9:
                    6d:58:7f:46:46:d3:07:f8:5b:8a:3c:6c:04:23:ea:
                    10:f3:21:8d:04:a8:12:64:a6:31:4c:19:58:85:8d:
                    65:d9:eb:90:fa:0f:f9:d0:e7:e2:29:f2:9a:9a:9a:
                    9f:a4:7b:ab:d7:7d:29:c3:77:f9:1d:af:4c:19:08:
                    36:05:d4:c8:07:45:aa:ff:20:4d:c0:98:ac:cd:dd:
                    92:e6:e7:6e:ed:6d:c5:c8:61:ae:30:2c:fc:fc:1f:
                    12:0c:81:ad:bf:25:91:24:9c:70:56:63:b4:30:fa:
                    31:9a:db:b2:b4:1b:0e:b5:7c:41:68:32:cf:5a:f3:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:B4:AF:A1:5C:19:01:01:DF:5F:E1:4E:57:F6:7D:C2:C2:DF:2B
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/19cd6541683f50cafa1b541df3390c653e26db56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:73:b1:0c:ee:d7:64:3c:da:07:cf:06:a8:ec:d9:58:4c:
         10:b4:9b:93:10:a3:13:6d:ac:c0:65:53:dd:da:ed:41:00:d3:
         10:3f:d4:ff:af:9c:7c:bd:d9:8d:f5:75:18:44:d4:5d:65:1b:
         71:c0:9e:f4:6d:71:04:29:0b:28:28:9b:b7:29:f2:57:bd:f3:
         41:6f:39:fd:c2:4c:f3:06:fd:a6:0f:1a:74:f8:9e:4b:cc:53:
         3a:34:41:6b:d1:f4:60:32:f3:a6:2f:e7:78:5d:fd:e5:e6:69:
         96:2d:b5:40:79:37:7d:dc:9f:cb:8f:f1:8b:f6:59:95:58:8b:
         8f:44:a1:3e:73:b0:d5:2f:f4:7e:cb:85:f3:10:be:55:d7:c4:
         53:84:c5:60:30:a2:6f:d9:72:ed:81:c1:5d:42:59:bb:82:04:
         92:82:b2:0e:eb:25:21:57:84:2d:4f:3c:77:24:f9:1a:f2:46:
         ba:3e:16:2f:c2:61:23:35:1d:04:1d:fd:58:07:ee:bd:43:a8:
         00:78:41:a5:80:70:04:c1:a8:93:41:80:f6:b4:98:6f:7d:4e:
         50:f1:97:17:b6:4b:9c:3c:34:18:c3:bb:ac:a2:75:61:f7:46:
         0f:67:99:fd:4d:a2:23:58:8f:08:4a:69:0b:e9:c0:66:23:2a:
         f9:41:7f:fd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCyhTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwOTIz
MDMwMDAwWhcNMjMwOTIzMDMwMDAwWjAzMTEwLwYDVQQDEygxOWNkNjU0MTY4M2Y1
MGNhZmExYjU0MWRmMzM5MGM2NTNlMjZkYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0K+8sln+QeFKhkIX6spqgrz+hv65+9ZkSDEYw19SPs5fSfBX
JIoZVnSiwYfyjigfBwX9BYasOKPGJlvo9WH0/CN1i6u1JcWmXpUf0OBFAAQe4BI+
e5qhYfk8wTMqEUvY/c5NbAdWNh1aGo1Jo9/avwg6AzBbD0fX6IY4pvUiy1EMscdD
eeltWH9GRtMH+FuKPGwEI+oQ8yGNBKgSZKYxTBlYhY1l2euQ+g/50OfiKfKampqf
pHur130pw3f5Ha9MGQg2BdTIB0Wq/yBNwJiszd2S5udu7W3FyGGuMCz8/B8SDIGt
vyWRJJxwVmO0MPoxmtuytBsOtXxBaDLPWvNO9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM58tK+hXBkBAd9f4U5X9n3Cwt8rMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzE5Y2Q2NTQxNjgzZjUwY2FmYTFiNTQxZGYzMzkwYzY1M2UyNmRiNTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAWqJzsQzu12Q82gfP
Bqjs2VhMELSbkxCjE22swGVT3drtQQDTED/U/6+cfL3ZjfV1GETUXWUbccCe9G1x
BCkLKCibtynyV73zQW85/cJM8wb9pg8adPieS8xTOjRBa9H0YDLzpi/neF395eZp
li21QHk3fdyfy4/xi/ZZlViLj0ShPnOw1S/0fsuF8xC+VdfEU4TFYDCib9ly7YHB
XUJZu4IEkoKyDuslIVeELU88dyT5GvJGuj4WL8JhIzUdBB39WAfuvUOoAHhBpYBw
BMGok0GA9rSYb31OUPGXF7ZLnDw0GMO7rKJ1YfdGD2eZ/U2iI1iPCEppC+nAZiMq
+UF//Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org