Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa
File:                     8972c1911a87f372e21ba37b2fcd1745e94d9821.roa (raw, json)
Hash identifier:          fzDr/RYn7pP8yXpkytmXTZyYln1hk/TzJNaqRsclPZs=
Subject key identifier:   B9:65:E1:E7:80:ED:28:DC:9B:71:12:8E:0C:E0:6A:B8:29:E6:D1:52
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01BE50
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa
Signing time:             Sun 27 Feb 2022 00:44:09 +0000
ROA not before:           Sun 27 Feb 2022 03:00:00 +0000
ROA not after:            Mon 27 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114256 (0x1be50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb 27 03:00:00 2022 GMT
            Not After : Feb 27 03:00:00 2023 GMT
        Subject: CN=8972c1911a87f372e21ba37b2fcd1745e94d9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:aa:fe:23:51:ff:a9:91:d5:28:a2:97:9d:
                    ca:80:b6:61:11:f0:1a:7e:c8:3b:ad:0a:b6:a4:c2:
                    f9:56:de:40:dc:b5:2b:9f:aa:4b:47:3d:db:09:50:
                    a6:91:0b:d6:f2:fc:8f:37:66:cd:45:27:4f:e6:2b:
                    c6:71:51:11:c6:98:32:de:b6:3a:13:d4:53:64:4e:
                    be:1b:9e:cf:0d:de:17:9b:7a:2b:80:ac:06:58:e8:
                    24:c6:90:b5:fa:7c:ef:e2:d5:01:19:ec:1e:cf:02:
                    90:6f:13:1c:57:31:f5:7d:dd:b7:d3:a9:6f:cb:e3:
                    d2:a2:3c:f7:99:19:80:29:58:76:00:d9:23:fb:cc:
                    eb:09:42:2a:59:dd:9f:cc:91:d9:1a:f8:1a:60:e0:
                    75:31:5e:28:8b:20:9f:3b:9c:cc:46:6c:e4:6e:7f:
                    fb:ca:42:f7:08:78:ba:04:33:b4:ee:87:99:5d:95:
                    92:e0:1d:cf:68:b9:13:2a:07:be:b2:2b:86:37:3f:
                    d6:56:79:9b:16:47:95:af:35:cb:9c:dc:f1:2c:6d:
                    49:40:44:ff:ef:ad:61:34:70:2b:4a:a5:63:67:47:
                    04:c0:f3:89:9d:ba:b4:f5:85:48:de:ae:75:ff:78:
                    96:30:51:5a:ee:25:39:20:d4:fb:68:e7:90:2a:0a:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:E1:E7:80:ED:28:DC:9B:71:12:8E:0C:E0:6A:B8:29:E6:D1:52
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8972c1911a87f372e21ba37b2fcd1745e94d9821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:30:42:f3:a8:af:1c:ee:b7:07:82:2f:5c:99:c8:68:5e:02:
         4b:b2:e5:84:c9:9a:00:58:6c:4e:33:0a:6b:98:7c:07:2a:7c:
         f9:c3:33:8d:c9:6f:62:cc:58:1e:af:2f:07:26:be:5f:c5:fb:
         12:cb:89:24:85:dc:e8:d7:ab:ff:d4:bd:5c:ef:d6:30:0b:46:
         df:fc:d5:f5:2e:51:95:4e:43:de:4e:de:59:d0:22:e8:29:21:
         74:92:95:65:59:be:59:1d:91:5d:75:bf:c1:cd:01:ae:f8:68:
         5e:1e:68:aa:7c:bb:9b:a7:28:e5:d0:82:f1:a1:ef:36:19:0d:
         79:f6:3d:f1:23:15:03:ee:68:55:5f:47:dd:53:db:a1:6b:72:
         d9:13:ba:0b:47:6c:d5:7f:27:5f:d7:ee:7f:29:31:a5:b6:e1:
         11:dc:f3:6c:4b:86:fe:87:af:57:b9:f2:ce:7c:d6:a9:3c:01:
         54:b6:cf:53:d3:e8:00:fe:1b:42:eb:89:31:cd:09:62:d1:30:
         cd:d9:9c:62:97:ea:21:46:e5:9b:fc:84:07:df:ac:b4:b0:47:
         27:5d:19:09:49:bf:d6:ea:d8:60:b7:5e:b0:02:b4:ca:e4:fd:
         ba:02:df:f9:81:be:0a:79:18:76:82:08:99:18:56:6a:52:75:
         bf:00:3a:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAb5QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjI3
MDMwMDAwWhcNMjMwMjI3MDMwMDAwWjAzMTEwLwYDVQQDEyg4OTcyYzE5MTFhODdm
MzcyZTIxYmEzN2IyZmNkMTc0NWU5NGQ5ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiTeq/iNR/6mR1Siil53KgLZhEfAafsg7rQq2pML5Vt5A3LUr
n6pLRz3bCVCmkQvW8vyPN2bNRSdP5ivGcVERxpgy3rY6E9RTZE6+G57PDd4Xm3or
gKwGWOgkxpC1+nzv4tUBGewezwKQbxMcVzH1fd2306lvy+PSojz3mRmAKVh2ANkj
+8zrCUIqWd2fzJHZGvgaYOB1MV4oiyCfO5zMRmzkbn/7ykL3CHi6BDO07oeZXZWS
4B3PaLkTKge+siuGNz/WVnmbFkeVrzXLnNzxLG1JQET/761hNHArSqVjZ0cEwPOJ
nbq09YVI3q51/3iWMFFa7iU5INT7aOeQKgq1tQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLll4eeA7Sjcm3ESjgzgargp5tFSMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1Lzg5NzJjMTkxMWE4N2YzNzJlMjFiYTM3YjJmY2QxNzQ1ZTk0ZDk4MjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAaDBC86ivHO63B4Iv
XJnIaF4CS7LlhMmaAFhsTjMKa5h8Byp8+cMzjclvYsxYHq8vBya+X8X7EsuJJIXc
6Ner/9S9XO/WMAtG3/zV9S5RlU5D3k7eWdAi6CkhdJKVZVm+WR2RXXW/wc0Brvho
Xh5oqny7m6co5dCC8aHvNhkNefY98SMVA+5oVV9H3VPboWty2RO6C0ds1X8nX9fu
fykxpbbhEdzzbEuG/oevV7nyznzWqTwBVLbPU9PoAP4bQuuJMc0JYtEwzdmcYpfq
IUblm/yEB9+stLBHJ10ZCUm/1urYYLdesAK0yuT9ugLf+YG+CnkYdoIImRhWalJ1
vwA6TA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org