Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7017dd31fa74b5e64f1376c10880a62c5d3bf0c4.roa
File:                     7017dd31fa74b5e64f1376c10880a62c5d3bf0c4.roa (raw, json)
Hash identifier:          OG0xq67DYdCGz5m+W0DEXj0Yn+vHXtFt0lSRySYsaCU=
Subject key identifier:   F5:3C:DC:75:95:8D:02:CE:31:9D:96:B1:BE:D8:63:92:3F:A1:84:18
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       082359
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7017dd31fa74b5e64f1376c10880a62c5d3bf0c4.roa
Signing time:             Wed 20 Jul 2022 01:12:09 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533337 (0x82359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=7017dd31fa74b5e64f1376c10880a62c5d3bf0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:1e:64:e4:92:20:f6:91:73:85:fc:a8:80:
                    29:0e:c8:68:55:3f:cf:b5:88:27:bb:07:0b:ad:1f:
                    d4:16:c2:2d:7c:fb:9a:73:3b:10:06:bc:e1:9d:09:
                    e1:18:84:d3:b6:fb:46:c2:be:2d:a9:bc:97:5a:36:
                    cd:40:25:55:7b:7a:9f:83:d5:29:82:97:59:84:30:
                    0b:68:70:4b:ed:b8:bf:21:d6:d0:15:73:ee:aa:a9:
                    61:e6:a0:45:c2:e1:53:02:77:0d:68:8f:bf:a5:e1:
                    8a:9d:39:a5:3c:c6:2a:f4:da:34:2e:41:bb:97:5d:
                    36:46:64:74:e5:b1:b9:df:8f:91:25:30:0e:52:82:
                    69:8b:83:e0:7b:d5:02:51:f4:7c:c0:ef:93:0a:77:
                    72:d6:12:f9:f9:81:66:4c:96:69:0e:48:7c:b5:78:
                    cb:59:70:51:70:a3:de:c8:4b:d9:43:b7:43:40:ea:
                    5e:fd:ca:88:0d:f6:2c:fe:22:7f:56:d6:9f:62:4c:
                    d5:66:b7:7d:21:7b:fd:f4:23:ea:76:a7:00:af:d6:
                    64:22:24:1b:a5:a2:65:7a:fc:f0:31:d3:e7:b9:44:
                    16:11:11:15:ad:d5:57:dc:30:cb:83:c0:1d:fd:2e:
                    72:ea:c5:ad:7a:28:e1:e6:ee:4a:a2:04:39:78:55:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3C:DC:75:95:8D:02:CE:31:9D:96:B1:BE:D8:63:92:3F:A1:84:18
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/7017dd31fa74b5e64f1376c10880a62c5d3bf0c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:27:64:3e:16:38:a5:ad:f1:9a:06:3f:de:f9:ee:b0:2b:
         2f:cb:5f:3b:a9:4a:01:95:e4:fe:75:70:0b:da:77:59:53:fa:
         a8:d1:f5:1b:79:4c:91:2f:1d:5a:91:d5:75:5c:3c:de:1a:5b:
         c0:20:b4:f4:94:6f:5a:e0:bb:e5:88:32:59:b7:be:2f:5c:03:
         0b:d5:83:ab:d6:79:78:a8:7c:66:7b:6a:5f:03:52:aa:25:e1:
         03:f9:98:46:cf:9c:aa:e7:e1:e6:b8:f2:9e:de:96:ea:08:b4:
         6f:55:62:58:a4:90:23:47:02:6a:3f:59:31:48:fd:bc:e1:78:
         f0:c1:e4:62:7f:65:d6:b5:d0:01:bb:c7:0c:1c:71:7a:2d:28:
         27:f7:3c:d5:99:24:f7:45:27:f6:38:c2:fe:30:6b:b8:ab:33:
         61:2c:5b:24:69:b3:39:4d:e5:a7:fa:3b:77:81:38:89:2d:b4:
         f6:3e:57:b0:67:af:40:9f:d7:9d:e0:f6:e8:70:7b:d8:c7:11:
         02:37:0c:f8:76:24:96:65:91:77:90:66:4c:dd:5a:ec:e4:cb:
         b3:fe:e9:3a:50:2b:5f:17:54:9a:6a:f8:89:3c:04:96:9d:60:
         b9:33:f6:31:39:e5:ac:39:35:95:28:89:1a:b5:9d:b0:1a:f5:
         2f:c3:eb:07
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCCNZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNzIw
MDMwMDAwWhcNMjMwNzIwMDMwMDAwWjAzMTEwLwYDVQQDEyg3MDE3ZGQzMWZhNzRi
NWU2NGYxMzc2YzEwODgwYTYyYzVkM2JmMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApWYeZOSSIPaRc4X8qIApDshoVT/PtYgnuwcLrR/UFsItfPua
czsQBrzhnQnhGITTtvtGwr4tqbyXWjbNQCVVe3qfg9UpgpdZhDALaHBL7bi/IdbQ
FXPuqqlh5qBFwuFTAncNaI+/peGKnTmlPMYq9No0LkG7l102RmR05bG534+RJTAO
UoJpi4Pge9UCUfR8wO+TCndy1hL5+YFmTJZpDkh8tXjLWXBRcKPeyEvZQ7dDQOpe
/cqIDfYs/iJ/VtafYkzVZrd9IXv99CPqdqcAr9ZkIiQbpaJlevzwMdPnuUQWEREV
rdVX3DDLg8Ad/S5y6sWteijh5u5KogQ5eFVbTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPU83HWVjQLOMZ2Wsb7YY5I/oYQYMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzcwMTdkZDMxZmE3NGI1ZTY0ZjEzNzZjMTA4ODBhNjJjNWQzYmYwYzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAbBcnZD4WOKWt8ZoG
P9757rArL8tfO6lKAZXk/nVwC9p3WVP6qNH1G3lMkS8dWpHVdVw83hpbwCC09JRv
WuC75YgyWbe+L1wDC9WDq9Z5eKh8ZntqXwNSqiXhA/mYRs+cqufh5rjynt6W6gi0
b1ViWKSQI0cCaj9ZMUj9vOF48MHkYn9l1rXQAbvHDBxxei0oJ/c81Zkk90Un9jjC
/jBruKszYSxbJGmzOU3lp/o7d4E4iS209j5XsGevQJ/XneD26HB72McRAjcM+HYk
lmWRd5BmTN1a7OTLs/7pOlArXxdUmmr4iTwElp1guTP2MTnlrDk1lSiJGrWdsBr1
L8PrBw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org