Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/36119bfdf7b20602a46096f93703e89204dae734.roa
File:                     36119bfdf7b20602a46096f93703e89204dae734.roa (raw, json)
Hash identifier:          QbEJ8tkSsyMXpO6JMCsKEbtRtj2N59u5ZceB4Y3mjsU=
Subject key identifier:   16:45:78:C4:42:09:48:ED:86:5B:55:A1:50:E8:18:D1:7F:A3:8E:52
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       040950
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/36119bfdf7b20602a46096f93703e89204dae734.roa
Signing time:             Wed 20 Apr 2022 07:42:26 +0000
ROA not before:           Wed 20 Apr 2022 03:00:00 +0000
ROA not after:            Thu 20 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264528 (0x40950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 20 03:00:00 2022 GMT
            Not After : Apr 20 03:00:00 2023 GMT
        Subject: CN=36119bfdf7b20602a46096f93703e89204dae734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:71:bc:07:b8:1f:88:1a:8d:d6:65:ba:4c:
                    4d:77:74:5d:fe:f5:96:8d:be:c7:6b:9b:43:e8:99:
                    bf:6f:eb:ab:85:24:6f:68:e0:fd:7f:a6:27:98:fb:
                    b5:7b:74:a3:46:16:10:ec:5f:84:47:4a:b0:4d:1c:
                    4f:f2:59:2f:c5:bf:d7:bd:7f:95:ab:85:aa:44:20:
                    29:de:1b:c6:5d:59:c2:71:d3:bb:31:4c:d3:0f:ba:
                    4c:47:bd:8a:00:15:d4:07:d1:52:57:38:ad:9f:30:
                    2a:ed:fd:df:cd:88:c6:72:db:05:92:a7:9d:b0:ef:
                    d6:bd:41:63:1e:cf:e7:18:8a:7c:3f:cc:c5:ef:84:
                    42:01:d6:18:11:47:a3:de:58:32:71:79:e3:22:99:
                    8a:e8:e1:e5:87:32:5e:a5:03:16:fa:79:f3:3c:49:
                    eb:19:72:85:40:1b:85:d8:c0:bd:ca:c2:c5:9e:0f:
                    b4:5f:c7:09:2b:e6:45:f0:68:60:0c:5d:f9:dd:99:
                    4a:36:ca:9a:32:5e:ef:b6:23:31:b4:6c:1a:f1:02:
                    67:8e:a8:f3:32:44:e5:77:cc:a2:ef:a2:c5:9a:2a:
                    d5:9c:07:26:f3:aa:d2:21:ec:b8:e9:34:89:70:3e:
                    e3:b0:dc:46:be:a1:55:4e:f5:ce:25:1a:f8:d0:91:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:78:C4:42:09:48:ED:86:5B:55:A1:50:E8:18:D1:7F:A3:8E:52
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/36119bfdf7b20602a46096f93703e89204dae734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:72:e1:4c:06:4a:2d:2c:27:58:e0:b6:23:b4:88:de:c5:62:
         01:70:f6:00:5b:07:2b:3c:91:65:08:07:9b:e0:f1:17:0d:72:
         16:0f:f8:f0:f8:60:39:7a:a8:86:b9:d0:d9:33:02:e3:36:2b:
         e6:11:ae:d7:44:c9:70:ab:2a:b5:5c:08:fd:a7:d5:b3:65:8c:
         84:3b:b1:1c:7e:2e:e9:30:52:03:c9:9e:41:3f:f6:0a:31:1b:
         e0:60:1d:f1:80:a9:4b:d3:72:6b:90:49:fa:61:a3:6b:c4:80:
         05:50:52:8f:49:d4:07:75:d4:0b:07:4c:43:26:fd:28:b0:1d:
         6e:63:c3:f9:11:c1:a2:02:22:69:0a:3c:20:a8:b5:65:22:47:
         1c:be:a8:e1:06:ac:f4:4c:c5:a6:45:13:3c:1a:80:e6:e5:70:
         1b:54:a0:0b:d5:e3:44:2f:b1:05:75:76:ea:76:b6:79:22:e9:
         35:04:be:ea:96:a2:32:7f:6b:01:dd:ee:cf:6f:3b:f3:c2:96:
         eb:8e:d9:d6:b8:b3:e7:91:35:2f:fe:90:85:d2:05:9b:da:63:
         17:a0:a7:31:8c:8a:41:53:ef:6c:38:63:d6:f6:83:a5:6f:5c:
         a5:4d:6c:72:e3:4c:ca:6f:68:d7:c9:13:be:be:48:5d:96:d2:
         6b:0d:d1:51
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBAlQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNDIw
MDMwMDAwWhcNMjMwNDIwMDMwMDAwWjAzMTEwLwYDVQQDEygzNjExOWJmZGY3YjIw
NjAyYTQ2MDk2ZjkzNzAzZTg5MjA0ZGFlNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhQxxvAe4H4gajdZlukxNd3Rd/vWWjb7Ha5tD6Jm/b+urhSRv
aOD9f6YnmPu1e3SjRhYQ7F+ER0qwTRxP8lkvxb/XvX+Vq4WqRCAp3hvGXVnCcdO7
MUzTD7pMR72KABXUB9FSVzitnzAq7f3fzYjGctsFkqedsO/WvUFjHs/nGIp8P8zF
74RCAdYYEUej3lgycXnjIpmK6OHlhzJepQMW+nnzPEnrGXKFQBuF2MC9ysLFng+0
X8cJK+ZF8GhgDF353ZlKNsqaMl7vtiMxtGwa8QJnjqjzMkTld8yi76LFmirVnAcm
86rSIey46TSJcD7jsNxGvqFVTvXOJRr40JGWuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBZFeMRCCUjthltVoVDoGNF/o45SMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzM2MTE5YmZkZjdiMjA2MDJhNDYwOTZmOTM3MDNlODkyMDRkYWU3MzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAFnLhTAZKLSwnWOC2
I7SI3sViAXD2AFsHKzyRZQgHm+DxFw1yFg/48PhgOXqohrnQ2TMC4zYr5hGu10TJ
cKsqtVwI/afVs2WMhDuxHH4u6TBSA8meQT/2CjEb4GAd8YCpS9Nya5BJ+mGja8SA
BVBSj0nUB3XUCwdMQyb9KLAdbmPD+RHBogIiaQo8IKi1ZSJHHL6o4Qas9EzFpkUT
PBqA5uVwG1SgC9XjRC+xBXV26na2eSLpNQS+6paiMn9rAd3uz28788KW647Z1riz
55E1L/6QhdIFm9pjF6CnMYyKQVPvbDhj1vaDpW9cpU1scuNMym9o18kTvr5IXZbS
aw3RUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org