Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/545814a85e77d699aae779e2f816d9b8538e72b4.roa
File:                     545814a85e77d699aae779e2f816d9b8538e72b4.roa (raw, json)
Hash identifier:          KXXQ/dCsneRv5bJQRYVacuK5JzjJ166OCJPjXh8snFk=
Subject key identifier:   F6:9B:67:77:4D:65:14:FA:62:84:56:BF:7D:5D:27:47:20:95:51:3E
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       080AEE
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/545814a85e77d699aae779e2f816d9b8538e72b4.roa
Signing time:             Sun 17 Jul 2022 01:06:13 +0000
ROA not before:           Sun 17 Jul 2022 03:00:00 +0000
ROA not after:            Mon 17 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527086 (0x80aee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 17 03:00:00 2022 GMT
            Not After : Jul 17 03:00:00 2023 GMT
        Subject: CN=545814a85e77d699aae779e2f816d9b8538e72b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:82:3e:9d:e4:3f:98:34:d0:52:95:4b:b2:
                    0d:8d:0f:b3:d1:0e:c8:82:2f:5b:dd:52:18:2b:d8:
                    26:fd:92:af:71:f0:6d:59:d9:90:70:75:74:9c:b4:
                    f3:3e:61:49:4b:14:b6:24:89:b0:de:e0:ae:46:16:
                    40:4e:65:9a:89:ea:56:00:e5:9e:7d:3d:7e:17:61:
                    12:b1:1d:fa:bf:44:29:ca:be:2d:30:ae:bb:3b:46:
                    bb:68:37:2e:d0:a2:21:fb:2b:10:bc:4f:23:02:2a:
                    7d:58:a0:46:a9:32:70:0a:f7:b5:25:f3:d3:ab:6d:
                    a6:9d:3a:c4:01:70:a3:27:34:63:81:09:6d:85:fb:
                    30:99:f7:54:07:11:bf:f5:00:bb:0e:47:f0:db:75:
                    ae:bf:11:ff:83:ed:bf:f9:95:a9:2c:a7:2d:ce:b7:
                    83:37:21:f4:7f:17:38:e1:2e:14:54:36:08:ee:57:
                    55:3a:aa:15:01:fb:1b:70:d7:5a:a6:06:f1:ae:42:
                    a0:93:b9:30:50:ed:8d:a6:a7:bf:06:3b:6d:47:5d:
                    96:3d:0a:c9:06:b2:54:c9:20:05:df:90:1d:e2:ad:
                    ca:d9:a5:3c:d1:0f:84:85:95:cb:64:c8:cf:1e:29:
                    2a:f8:1d:7b:7c:1c:85:aa:0b:ef:0c:1c:6b:a2:88:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:67:77:4D:65:14:FA:62:84:56:BF:7D:5D:27:47:20:95:51:3E
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/545814a85e77d699aae779e2f816d9b8538e72b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:32:be:49:e2:56:ca:ad:2a:18:e8:1b:ee:40:d4:51:3d:
         2e:8e:34:81:c5:2e:0e:2c:11:72:4e:29:89:ce:b9:62:ec:e2:
         35:b3:6f:d8:00:02:61:ba:c1:04:af:6f:60:01:c4:a0:ff:ac:
         3e:4d:1d:0f:eb:37:37:d4:a3:77:de:ef:e1:97:98:82:59:8b:
         5a:1b:99:e1:db:68:45:1e:6f:5f:db:34:ab:8b:42:6a:fb:a2:
         db:b0:61:5a:c6:ae:a6:38:66:9c:fd:25:9c:8e:bd:f2:a4:b0:
         e9:f7:c7:f9:47:ce:29:11:0a:89:00:2a:18:48:7a:c1:90:cd:
         70:11:53:af:43:e1:99:0e:26:f8:77:dd:a9:67:21:9d:a3:ed:
         a7:46:99:d2:16:32:77:e2:b8:c3:10:c5:9c:60:1e:4a:fd:0d:
         ff:ad:fa:52:25:f3:24:11:b8:8e:d0:20:e6:9c:3c:92:a2:0f:
         af:69:9b:4f:62:77:df:a7:90:cd:f2:d4:e5:c1:af:5d:7f:19:
         8e:1d:9b:1a:2f:c2:01:e1:ea:bd:c3:2e:42:32:ac:98:af:07:
         2e:15:94:d9:89:86:da:86:28:55:76:2b:18:38:01:33:ae:b4:
         e7:b9:4f:05:a3:b9:54:0c:2f:4b:13:43:d7:55:fd:7d:15:c2:
         ee:98:72:23
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCAruMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNzE3
MDMwMDAwWhcNMjMwNzE3MDMwMDAwWjAzMTEwLwYDVQQDEyg1NDU4MTRhODVlNzdk
Njk5YWFlNzc5ZTJmODE2ZDliODUzOGU3MmI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy6eCPp3kP5g00FKVS7INjQ+z0Q7Igi9b3VIYK9gm/ZKvcfBt
WdmQcHV0nLTzPmFJSxS2JImw3uCuRhZATmWaiepWAOWefT1+F2ESsR36v0Qpyr4t
MK67O0a7aDcu0KIh+ysQvE8jAip9WKBGqTJwCve1JfPTq22mnTrEAXCjJzRjgQlt
hfswmfdUBxG/9QC7Dkfw23WuvxH/g+2/+ZWpLKctzreDNyH0fxc44S4UVDYI7ldV
OqoVAfsbcNdapgbxrkKgk7kwUO2Npqe/BjttR12WPQrJBrJUySAF35Ad4q3K2aU8
0Q+EhZXLZMjPHikq+B17fByFqgvvDBxroohxQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPabZ3dNZRT6YoRWv31dJ0cglVE+MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzU0NTgxNGE4NWU3N2Q2OTlhYWU3NzllMmY4MTZkOWI4NTM4ZTcyYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAT28yvkniVsqtKhjo
G+5A1FE9Lo40gcUuDiwRck4pic65YuziNbNv2AACYbrBBK9vYAHEoP+sPk0dD+s3
N9Sjd97v4ZeYglmLWhuZ4dtoRR5vX9s0q4tCavui27BhWsaupjhmnP0lnI698qSw
6ffH+UfOKREKiQAqGEh6wZDNcBFTr0PhmQ4m+HfdqWchnaPtp0aZ0hYyd+K4wxDF
nGAeSv0N/636UiXzJBG4jtAg5pw8kqIPr2mbT2J336eQzfLU5cGvXX8Zjh2bGi/C
AeHqvcMuQjKsmK8HLhWU2YmG2oYoVXYrGDgBM66057lPBaO5VAwvSxND11X9fRXC
7phyIw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org