Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/59fe5a5482e0c61fb51ab57210b687b4b97de7bc.roa
File:                     59fe5a5482e0c61fb51ab57210b687b4b97de7bc.roa (raw, json)
Hash identifier:          LVoAgwLZrtVebc4bCkArHXSo6nJ6eOXaXL9pic98GDU=
Subject key identifier:   0D:D1:5B:80:8B:74:48:01:2E:BA:16:09:73:A9:36:0F:CE:4D:DE:07
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       079224
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/59fe5a5482e0c61fb51ab57210b687b4b97de7bc.roa
Signing time:             Wed 06 Jul 2022 04:09:34 +0000
ROA not before:           Wed 06 Jul 2022 03:00:00 +0000
ROA not after:            Thu 06 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496164 (0x79224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul  6 03:00:00 2022 GMT
            Not After : Jul  6 03:00:00 2023 GMT
        Subject: CN=59fe5a5482e0c61fb51ab57210b687b4b97de7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:95:9a:f3:1a:ac:f4:22:11:1f:bd:7a:00:
                    46:c1:cf:cf:fe:ec:ff:36:e5:d2:ed:5f:50:59:49:
                    b8:3b:71:70:35:d7:17:f9:9c:1c:e5:22:4e:55:86:
                    cb:39:2f:96:89:0f:c9:d4:dd:5c:97:cd:1e:a4:ff:
                    48:25:fd:a0:3b:d5:46:24:7e:a0:a5:9c:c9:e0:57:
                    09:8f:e6:ea:45:38:f8:39:5a:99:2e:4d:50:19:89:
                    ae:38:a6:d2:82:76:c8:ea:84:17:b0:c9:f1:0c:17:
                    96:c7:86:1b:59:99:1a:68:6c:64:c8:e7:d0:22:30:
                    81:9a:13:89:43:6e:2d:34:fe:3f:7c:9d:25:13:5f:
                    fc:ca:e0:41:36:a3:a0:5a:35:d8:05:86:75:01:4c:
                    d1:86:02:3c:aa:27:5b:12:9c:7a:cf:df:0f:2f:c8:
                    b2:dd:31:e7:0c:d6:64:de:bd:e4:2e:4b:bd:8b:4c:
                    3c:e8:95:b1:8d:41:26:de:08:b6:8c:b5:3c:56:07:
                    6e:e8:90:04:80:87:ee:c5:ef:21:28:d5:a6:00:29:
                    ab:52:cc:24:0e:b4:d7:67:c2:87:5c:ac:4c:d0:6b:
                    b6:e3:1f:9b:79:10:aa:52:5b:8c:4f:b1:59:1a:45:
                    d8:ad:4f:0b:22:61:1f:86:4c:5b:46:ac:a6:23:ac:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D1:5B:80:8B:74:48:01:2E:BA:16:09:73:A9:36:0F:CE:4D:DE:07
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/59fe5a5482e0c61fb51ab57210b687b4b97de7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:59:a7:87:c8:34:c6:74:94:b5:72:a2:11:a6:82:68:32:93:
         f4:7b:20:56:35:b4:f5:9e:94:60:21:5f:5e:73:87:d6:52:06:
         f8:db:53:18:f0:e7:12:d3:07:69:a0:88:9b:d9:61:16:c3:b7:
         f6:c0:34:4e:98:5e:60:3a:22:dd:cc:68:22:81:e5:4e:70:8b:
         51:c4:63:1d:19:02:da:bc:35:c5:67:ec:e4:a8:2c:f8:48:f5:
         ba:40:15:5f:f3:0b:2c:42:35:1e:bd:08:3b:a9:d9:ba:83:c0:
         70:c5:bb:f7:83:06:eb:b6:55:ca:11:5e:f2:12:39:d5:68:dc:
         0f:1c:96:65:be:03:f5:c1:32:f5:9a:22:cc:0f:97:e5:ce:52:
         bc:7a:91:b3:dd:a8:82:8c:71:89:ef:20:34:82:3b:f7:5d:06:
         49:c0:cc:c8:3b:e0:3b:41:b6:06:38:46:cf:a4:9b:a9:4d:07:
         8c:e0:ca:b8:bb:a9:6a:10:4a:ee:ca:63:e8:3f:60:09:40:a5:
         62:ba:43:5c:2d:e0:72:83:5f:18:08:52:2a:82:ad:25:35:1a:
         8a:9a:fe:3e:69:78:42:b0:97:4a:a0:df:dc:98:c3:3f:8b:ef:
         6b:dd:10:4a:52:c9:4f:43:cb:d6:0d:b5:9a:c7:01:3f:93:87:
         c8:53:13:87
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB5IkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNzA2
MDMwMDAwWhcNMjMwNzA2MDMwMDAwWjAzMTEwLwYDVQQDEyg1OWZlNWE1NDgyZTBj
NjFmYjUxYWI1NzIxMGI2ODdiNGI5N2RlN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm2GVmvMarPQiER+9egBGwc/P/uz/NuXS7V9QWUm4O3FwNdcX
+Zwc5SJOVYbLOS+WiQ/J1N1cl80epP9IJf2gO9VGJH6gpZzJ4FcJj+bqRTj4OVqZ
Lk1QGYmuOKbSgnbI6oQXsMnxDBeWx4YbWZkaaGxkyOfQIjCBmhOJQ24tNP4/fJ0l
E1/8yuBBNqOgWjXYBYZ1AUzRhgI8qidbEpx6z98PL8iy3THnDNZk3r3kLku9i0w8
6JWxjUEm3gi2jLU8Vgdu6JAEgIfuxe8hKNWmACmrUswkDrTXZ8KHXKxM0Gu24x+b
eRCqUluMT7FZGkXYrU8LImEfhkxbRqymI6w00wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA3RW4CLdEgBLroWCXOpNg/OTd4HMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzU5ZmU1YTU0ODJlMGM2MWZiNTFhYjU3MjEwYjY4N2I0Yjk3ZGU3YmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAFFmnh8g0xnSUtXKi
EaaCaDKT9HsgVjW09Z6UYCFfXnOH1lIG+NtTGPDnEtMHaaCIm9lhFsO39sA0Tphe
YDoi3cxoIoHlTnCLUcRjHRkC2rw1xWfs5Kgs+Ej1ukAVX/MLLEI1Hr0IO6nZuoPA
cMW794MG67ZVyhFe8hI51WjcDxyWZb4D9cEy9ZoizA+X5c5SvHqRs92ogoxxie8g
NII7910GScDMyDvgO0G2BjhGz6SbqU0HjODKuLupahBK7spj6D9gCUClYrpDXC3g
coNfGAhSKoKtJTUaipr+Pml4QrCXSqDf3JjDP4vva90QSlLJT0PL1g21mscBP5OH
yFMThw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org