Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa
File:                     2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa (raw, json)
Hash identifier:          co/6ESv8KP8ScnwZzkRWRBjcgFViHCjap+UPiJwJsR8=
Subject key identifier:   86:8F:AE:C6:93:C0:49:88:71:0E:D2:FD:8F:29:1F:A6:9F:4B:E4:C8
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       04611C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa
Signing time:             Thu 28 Apr 2022 03:21:17 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Fri 28 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287004 (0x4611c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2023 GMT
        Subject: CN=2738643e2713ca12cd3c9363e3b8d3707570ed0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:9d:c4:42:95:27:4b:8d:42:59:c9:a4:37:
                    30:2a:09:d8:9b:80:d4:c0:5a:87:b8:b5:20:5d:63:
                    e4:d5:72:31:6d:65:00:72:d2:89:bc:04:04:9f:4a:
                    5b:a2:25:7d:5c:73:56:f4:f7:b3:d3:a4:ee:c6:97:
                    d1:e0:8a:d6:85:9e:42:5c:2a:60:d5:7e:9b:e4:66:
                    d3:9b:d3:90:66:b0:81:2a:16:21:b1:b5:6f:cb:e0:
                    42:df:85:c8:b3:d4:be:49:cd:0e:96:89:87:b8:c0:
                    15:f1:4b:8d:d6:ad:f6:60:80:38:55:eb:06:12:ec:
                    66:36:ac:f7:83:71:8c:0f:71:ea:88:a8:69:e5:3b:
                    17:22:31:fa:5d:e5:e8:3f:8c:9d:dd:d8:61:c6:fc:
                    cd:10:77:18:f2:97:6b:04:ba:45:b9:7d:14:e0:cf:
                    1b:6a:34:5d:3e:fd:38:3b:db:8b:d9:9e:a5:92:83:
                    e7:52:41:da:57:c7:d5:b5:8b:e3:2f:be:6d:d4:96:
                    8d:94:da:25:43:5c:58:8b:9d:24:d2:2c:cb:ad:50:
                    c9:d4:32:6a:09:91:9c:90:c7:74:8f:e3:38:65:77:
                    d5:ae:30:75:2a:16:95:f5:ad:99:10:47:6e:e4:4f:
                    30:8e:27:69:ef:c5:7e:05:44:0a:75:ef:20:cb:a7:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:AE:C6:93:C0:49:88:71:0E:D2:FD:8F:29:1F:A6:9F:4B:E4:C8
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/2738643e2713ca12cd3c9363e3b8d3707570ed0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e3:1f:74:67:f7:46:59:7c:95:57:15:8d:cf:c0:c3:c7:a2:
         fa:fa:29:9c:b7:e0:78:1e:09:aa:88:09:bb:33:11:db:dd:09:
         4a:c1:a5:e3:e1:f4:32:a3:79:70:df:b2:e1:46:2c:71:41:d1:
         11:ab:9e:39:0e:ae:95:4c:da:32:c8:70:3d:ef:ee:b2:d4:66:
         4d:e3:be:92:10:5b:dd:dc:f2:04:e4:87:a8:73:bb:aa:ca:c2:
         81:fb:c1:0a:c4:dc:ec:22:44:7a:28:1e:70:83:46:b6:54:95:
         d5:2f:ce:4c:e2:4c:7e:ed:2e:9a:1e:36:ab:d1:31:d7:e9:bb:
         66:28:12:46:d7:60:d7:f4:8b:3b:91:a3:c9:d7:7d:9c:d2:fe:
         f2:23:48:e5:3d:70:c7:e6:32:37:28:5e:57:bb:9d:5d:1d:31:
         a4:93:53:7c:12:62:f5:08:6a:e9:cb:ce:8b:99:2e:0c:65:95:
         c0:ba:0c:36:75:37:0c:08:bd:17:5d:f5:4b:69:cb:ec:c5:44:
         03:35:40:f1:5e:1b:7d:7b:a4:8c:3e:cc:c5:c9:53:c6:08:0f:
         5c:52:78:7e:3b:57:87:72:f5:fa:ea:cd:d9:60:1b:3a:03:8b:
         07:ce:2a:5d:eb:3a:4f:51:b3:a7:a2:ad:81:51:7f:11:8d:92:
         ff:14:b4:82
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBGEcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNDI4
MDMwMDAwWhcNMjMwNDI4MDMwMDAwWjAzMTEwLwYDVQQDEygyNzM4NjQzZTI3MTNj
YTEyY2QzYzkzNjNlM2I4ZDM3MDc1NzBlZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsdOdxEKVJ0uNQlnJpDcwKgnYm4DUwFqHuLUgXWPk1XIxbWUA
ctKJvAQEn0pboiV9XHNW9Pez06TuxpfR4IrWhZ5CXCpg1X6b5GbTm9OQZrCBKhYh
sbVvy+BC34XIs9S+Sc0OlomHuMAV8UuN1q32YIA4VesGEuxmNqz3g3GMD3HqiKhp
5TsXIjH6XeXoP4yd3dhhxvzNEHcY8pdrBLpFuX0U4M8bajRdPv04O9uL2Z6lkoPn
UkHaV8fVtYvjL75t1JaNlNolQ1xYi50k0izLrVDJ1DJqCZGckMd0j+M4ZXfVrjB1
KhaV9a2ZEEdu5E8wjidp78V+BUQKde8gy6dIoQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIaPrsaTwEmIcQ7S/Y8pH6afS+TIMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzI3Mzg2NDNlMjcxM2NhMTJjZDNjOTM2M2UzYjhkMzcwNzU3MGVkMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAm+MfdGf3Rll8lVcV
jc/Aw8ei+vopnLfgeB4JqogJuzMR290JSsGl4+H0MqN5cN+y4UYscUHREaueOQ6u
lUzaMshwPe/ustRmTeO+khBb3dzyBOSHqHO7qsrCgfvBCsTc7CJEeigecINGtlSV
1S/OTOJMfu0umh42q9Ex1+m7ZigSRtdg1/SLO5Gjydd9nNL+8iNI5T1wx+YyNyhe
V7udXR0xpJNTfBJi9Qhq6cvOi5kuDGWVwLoMNnU3DAi9F131S2nL7MVEAzVA8V4b
fXukjD7MxclTxggPXFJ4fjtXh3L1+urN2WAbOgOLB84qXes6T1Gzp6KtgVF/EY2S
/xS0gg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org