Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4fc07b974811421ec1c7e1e235333f73490ef0c1.roa
File:                     4fc07b974811421ec1c7e1e235333f73490ef0c1.roa (raw, json)
Hash identifier:          g5G9UBKHiAqG8lJaFAc66+BtpJ+jFQJ/EKom4QKUlyk=
Subject key identifier:   36:66:48:AF:F8:62:B9:8B:FB:C1:26:1A:BE:85:FC:C4:A2:A9:21:5E
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       053BBE
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4fc07b974811421ec1c7e1e235333f73490ef0c1.roa
Signing time:             Thu 19 May 2022 05:03:54 +0000
ROA not before:           Thu 19 May 2022 03:00:00 +0000
ROA not after:            Fri 19 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342974 (0x53bbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 19 03:00:00 2022 GMT
            Not After : May 19 03:00:00 2023 GMT
        Subject: CN=4fc07b974811421ec1c7e1e235333f73490ef0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:9f:4d:3c:ce:9d:fa:0e:58:20:64:cd:5d:
                    af:5c:30:94:6e:e0:c2:f0:83:56:b7:e3:aa:f1:63:
                    51:2b:ce:0a:bd:83:83:c0:d1:7c:b5:6d:c2:2a:32:
                    72:26:af:cc:e2:a8:33:f6:35:1f:04:54:b9:a7:63:
                    cf:d9:3b:c8:e7:89:bf:a3:bb:44:21:ff:dc:86:2d:
                    c0:e6:66:8c:2d:ba:b8:a7:09:ed:5a:52:f1:d0:00:
                    f4:72:d4:51:f8:eb:66:56:67:b4:19:62:b0:91:ec:
                    08:66:27:66:47:fe:9d:c9:a8:cd:af:de:16:83:b3:
                    47:0a:89:e1:df:f7:e1:5d:f1:f0:6b:83:0e:91:e4:
                    87:74:a9:02:de:b5:f1:be:fe:5a:ab:33:5e:84:3a:
                    27:d8:36:14:40:3b:97:0c:af:95:ff:e5:1c:94:4f:
                    2f:9b:d1:bc:18:69:28:73:69:29:cc:21:0d:ea:33:
                    8f:70:07:8c:85:07:02:39:e8:5d:43:4b:2c:cb:54:
                    f3:f4:23:f8:a4:8c:75:88:69:a9:c5:3a:ae:40:41:
                    3b:29:76:93:c7:92:34:5b:cb:9d:b8:c3:4c:63:1e:
                    63:e8:11:09:54:21:e4:8c:3c:06:60:68:35:cd:f0:
                    f8:8e:a0:1a:71:40:b4:45:dd:ab:b3:62:24:a7:6b:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:48:AF:F8:62:B9:8B:FB:C1:26:1A:BE:85:FC:C4:A2:A9:21:5E
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/4fc07b974811421ec1c7e1e235333f73490ef0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:ec:9d:14:93:d3:fb:78:9e:45:9d:41:98:65:9d:47:58:
         34:8f:24:5c:89:88:ce:86:5d:94:39:b5:95:32:9e:be:b0:4a:
         1a:f0:6e:50:ed:7c:13:ed:5b:32:b8:d1:7c:00:68:34:9f:10:
         55:4d:76:64:cc:13:ac:a3:e9:c1:ac:48:07:29:87:2e:fd:4e:
         bd:f7:97:b1:75:d2:ba:45:39:7f:40:31:dd:d6:f5:3d:b9:1b:
         55:d7:77:9f:66:89:2e:09:59:09:c5:e2:62:22:c0:72:40:f6:
         16:a6:e5:93:29:dd:5c:aa:46:bb:f2:50:fd:d8:79:2a:24:10:
         f0:2e:78:be:58:ec:4e:4e:6c:e0:c2:e1:88:1d:dd:5a:1f:6f:
         88:15:4f:23:a4:4f:1d:2e:0a:be:ee:99:41:1a:ea:e3:52:7b:
         69:45:59:dd:12:4b:22:7a:1a:cf:57:9a:84:22:bb:94:57:9b:
         06:38:c9:32:b9:e4:11:63:ac:e7:88:d9:82:8d:fc:7c:84:b3:
         01:f1:10:9e:2b:1b:e8:a4:4c:60:e0:2d:53:ba:2c:e0:ce:8c:
         f8:50:9d:02:c5:9f:d6:1f:3c:00:81:a2:d9:32:76:63:00:9d:
         69:74:61:f2:f3:8e:31:a9:c0:1f:fe:a1:47:e8:31:38:3a:72:
         c4:05:5e:36
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBTu+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNTE5
MDMwMDAwWhcNMjMwNTE5MDMwMDAwWjAzMTEwLwYDVQQDEyg0ZmMwN2I5NzQ4MTE0
MjFlYzFjN2UxZTIzNTMzM2Y3MzQ5MGVmMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo4qfTTzOnfoOWCBkzV2vXDCUbuDC8INWt+Oq8WNRK84KvYOD
wNF8tW3CKjJyJq/M4qgz9jUfBFS5p2PP2TvI54m/o7tEIf/chi3A5maMLbq4pwnt
WlLx0AD0ctRR+OtmVme0GWKwkewIZidmR/6dyajNr94Wg7NHConh3/fhXfHwa4MO
keSHdKkC3rXxvv5aqzNehDon2DYUQDuXDK+V/+UclE8vm9G8GGkoc2kpzCEN6jOP
cAeMhQcCOehdQ0ssy1Tz9CP4pIx1iGmpxTquQEE7KXaTx5I0W8uduMNMYx5j6BEJ
VCHkjDwGYGg1zfD4jqAacUC0Rd2rs2Ikp2tM9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDZmSK/4YrmL+8EmGr6F/MSiqSFeMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzRmYzA3Yjk3NDgxMTQyMWVjMWM3ZTFlMjM1MzMzZjczNDkwZWYwYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAi+nsnRST0/t4nkWd
QZhlnUdYNI8kXImIzoZdlDm1lTKevrBKGvBuUO18E+1bMrjRfABoNJ8QVU12ZMwT
rKPpwaxIBymHLv1OvfeXsXXSukU5f0Ax3db1PbkbVdd3n2aJLglZCcXiYiLAckD2
FqblkyndXKpGu/JQ/dh5KiQQ8C54vljsTk5s4MLhiB3dWh9viBVPI6RPHS4Kvu6Z
QRrq41J7aUVZ3RJLInoaz1eahCK7lFebBjjJMrnkEWOs54jZgo38fISzAfEQnisb
6KRMYOAtU7os4M6M+FCdAsWf1h88AIGi2TJ2YwCdaXRh8vOOManAH/6hR+gxODpy
xAVeNg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org