Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/76eac67938914990a61b4dc16fbcc58e919ef4b2.roa
File:                     76eac67938914990a61b4dc16fbcc58e919ef4b2.roa (raw, json)
Hash identifier:          hMqEAA3NHdDJOvWFFtfrh8a5VELootKrSdDKq7vHQYw=
Subject key identifier:   06:6E:8C:17:C6:EA:5F:94:D7:7A:CA:69:25:14:EB:21:12:62:69:06
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       E74C
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/76eac67938914990a61b4dc16fbcc58e919ef4b2.roa
Signing time:             Wed 09 Feb 2022 00:32:59 +0000
ROA not before:           Wed 09 Feb 2022 03:00:00 +0000
ROA not after:            Thu 09 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59212 (0xe74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  9 03:00:00 2022 GMT
            Not After : Feb  9 03:00:00 2023 GMT
        Subject: CN=76eac67938914990a61b4dc16fbcc58e919ef4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:2f:19:4e:85:62:5a:84:3d:11:64:67:6d:
                    25:cc:10:56:43:95:8e:2b:7a:97:d5:dc:ac:0a:8b:
                    8e:11:11:75:8e:55:50:f4:5c:04:64:16:fe:48:68:
                    27:af:56:08:33:70:a7:a8:7c:b4:81:c4:1d:3d:9e:
                    76:fd:23:83:84:0c:04:b4:b7:8d:5f:5c:f8:f0:96:
                    63:4a:ba:50:49:26:94:a2:48:e5:cf:53:28:02:89:
                    cd:84:08:87:78:4f:6c:cc:a0:67:42:41:cf:5a:e5:
                    bf:86:2c:81:40:e7:a5:0d:71:2e:3e:ee:23:40:ad:
                    6f:20:37:05:b2:fe:af:02:87:38:ab:a4:bd:b1:9d:
                    e4:fe:e7:54:df:8e:9c:a6:97:1b:0f:ba:0a:25:29:
                    9c:9a:74:52:35:2e:ae:89:0f:3b:bc:26:b3:4b:c2:
                    d0:8e:bf:f0:e7:c9:cd:a5:38:31:9c:03:f2:3f:45:
                    9a:3c:8b:e3:75:cb:61:28:68:23:25:8a:e4:23:f8:
                    46:4b:30:e1:ff:0d:5e:05:8a:47:a6:7c:21:84:72:
                    22:17:4b:27:44:9b:0b:94:57:6d:3a:28:e0:19:91:
                    6b:a4:1c:93:b3:f7:73:bd:85:5d:b4:dc:af:7e:23:
                    c6:78:c0:0b:df:33:71:ac:4b:7e:3c:45:d3:84:8f:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:8C:17:C6:EA:5F:94:D7:7A:CA:69:25:14:EB:21:12:62:69:06
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/76eac67938914990a61b4dc16fbcc58e919ef4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:90:ad:c7:03:5c:6a:d3:b8:d7:ae:00:15:ff:ec:81:3e:93:
         92:69:53:62:82:16:0a:e1:99:08:51:45:ff:ca:24:45:a1:98:
         a7:1c:c6:42:b9:5c:35:19:1b:1c:18:2b:12:2e:f6:2b:32:a5:
         2b:55:28:ea:45:d0:c5:bd:0d:d7:a6:be:14:4a:cf:9e:aa:f5:
         17:ed:f4:cb:03:42:6f:ac:f8:da:8b:1d:84:0a:bc:13:92:af:
         d0:31:10:2d:26:a0:98:96:58:5c:ae:e1:53:fc:a8:7e:27:88:
         63:1c:46:27:d8:04:39:a2:94:93:58:2c:20:ef:1f:e7:c8:9d:
         75:86:df:bc:b6:4a:ee:be:46:40:6f:71:38:7b:60:3b:f3:38:
         1e:d8:36:7a:32:5b:3a:8c:eb:33:a5:30:e3:ad:f0:b9:80:07:
         88:08:a3:4a:8b:a7:4b:15:13:4d:29:e9:19:20:b5:e2:a7:62:
         87:24:9c:bb:99:e5:87:59:49:f1:16:e3:69:87:3b:93:f7:a3:
         98:c7:94:be:a3:88:6e:14:37:ce:37:f6:1b:51:04:ab:ee:7e:
         60:42:2f:2e:84:71:a7:a2:c1:b8:dd:19:fd:72:83:6b:3d:fe:
         8a:aa:91:b4:bf:c1:ec:f3:fc:8b:38:98:d2:76:a1:ec:4d:3f:
         36:15:b4:b2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOdMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjA5
MDMwMDAwWhcNMjMwMjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg3NmVhYzY3OTM4OTE0
OTkwYTYxYjRkYzE2ZmJjYzU4ZTkxOWVmNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmq0vGU6FYlqEPRFkZ20lzBBWQ5WOK3qX1dysCouOERF1jlVQ
9FwEZBb+SGgnr1YIM3CnqHy0gcQdPZ52/SODhAwEtLeNX1z48JZjSrpQSSaUokjl
z1MoAonNhAiHeE9szKBnQkHPWuW/hiyBQOelDXEuPu4jQK1vIDcFsv6vAoc4q6S9
sZ3k/udU346cppcbD7oKJSmcmnRSNS6uiQ87vCazS8LQjr/w58nNpTgxnAPyP0Wa
PIvjdcthKGgjJYrkI/hGSzDh/w1eBYpHpnwhhHIiF0snRJsLlFdtOijgGZFrpByT
s/dzvYVdtNyvfiPGeMAL3zNxrEt+PEXThI8JDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAZujBfG6l+U13rKaSUU6yESYmkGMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1Lzc2ZWFjNjc5Mzg5MTQ5OTBhNjFiNGRjMTZmYmNjNThlOTE5ZWY0YjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAbJCtxwNcatO4164A
Ff/sgT6TkmlTYoIWCuGZCFFF/8okRaGYpxzGQrlcNRkbHBgrEi72KzKlK1Uo6kXQ
xb0N16a+FErPnqr1F+30ywNCb6z42osdhAq8E5Kv0DEQLSagmJZYXK7hU/yofieI
YxxGJ9gEOaKUk1gsIO8f58iddYbfvLZK7r5GQG9xOHtgO/M4Htg2ejJbOozrM6Uw
463wuYAHiAijSounSxUTTSnpGSC14qdihyScu5nlh1lJ8RbjaYc7k/ejmMeUvqOI
bhQ3zjf2G1EEq+5+YEIvLoRxp6LBuN0Z/XKDaz3+iqqRtL/B7PP8iziY0nah7E0/
NhW0sg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org