Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8d106f48360986e3285f05d23c65bdc580bc45a7.roa
File:                     8d106f48360986e3285f05d23c65bdc580bc45a7.roa (raw, json)
Hash identifier:          bi/BLUZyRj4GpZblgNUc02Sz052MbWgkDiUxBlAnKsE=
Subject key identifier:   A9:BB:36:BC:2A:FD:0D:4D:4F:90:28:84:3A:53:96:0C:32:2D:A8:57
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0C5FB1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8d106f48360986e3285f05d23c65bdc580bc45a7.roa
Signing time:             Wed 19 Oct 2022 03:41:47 +0000
ROA not before:           Tue 18 Oct 2022 03:00:00 +0000
ROA not after:            Thu 19 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810929 (0xc5fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 18 03:00:00 2022 GMT
            Not After : Oct 19 03:00:00 2023 GMT
        Subject: CN=8d106f48360986e3285f05d23c65bdc580bc45a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:4f:f6:12:7e:39:ee:e6:de:f0:2e:72:bf:
                    40:d0:e9:f4:82:7b:62:0b:15:8b:3f:6f:8c:a1:2d:
                    40:05:12:f1:90:9c:aa:9c:1f:53:d2:0d:35:e7:61:
                    ba:b9:18:8f:0e:ef:30:9f:52:9b:b6:c5:ba:41:66:
                    45:64:07:45:bd:f8:1c:d2:8b:1a:b8:34:a2:2a:7a:
                    6f:ca:c8:18:ad:56:1d:87:ba:a1:eb:3c:9f:00:53:
                    60:60:42:52:5a:8f:90:74:a9:df:e7:3a:de:1c:9b:
                    89:66:51:79:a0:e6:65:f7:c8:23:31:d1:c4:fd:31:
                    c1:2f:d6:a0:23:be:b4:fc:c0:1a:0f:0e:f4:b1:a5:
                    0d:25:7d:dc:be:e2:11:53:c2:8d:a2:2f:7c:ab:3a:
                    8a:ca:74:60:0e:5c:7c:49:57:51:41:4d:18:24:d1:
                    cd:27:ef:18:01:a4:3d:61:a5:e1:bd:74:39:21:08:
                    05:ab:5b:61:fb:e2:c6:1c:af:db:bb:42:87:ca:7e:
                    8b:f1:83:84:56:12:cc:2b:df:af:37:b2:8a:86:04:
                    91:04:33:47:f5:db:42:36:6b:58:8c:a0:c6:71:78:
                    fd:0f:20:fc:2d:a6:14:51:f9:da:43:a9:e0:49:ce:
                    55:4a:ba:d0:85:10:90:f4:32:9f:ca:e0:a1:84:3f:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:36:BC:2A:FD:0D:4D:4F:90:28:84:3A:53:96:0C:32:2D:A8:57
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/8d106f48360986e3285f05d23c65bdc580bc45a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c3:b5:c3:e4:12:ce:88:e4:50:79:b7:e3:13:42:a1:f8:f6:
         cb:9a:af:28:6f:4a:43:bd:f6:c5:1c:33:21:06:0f:cb:3d:94:
         c8:c1:d0:a5:97:da:ea:01:38:bf:ce:cd:cc:89:72:9c:ae:11:
         be:cf:e1:59:fa:6f:e6:dd:df:77:66:ce:e2:ae:4c:c8:32:4e:
         55:17:b3:d3:f1:c2:aa:ec:27:79:3f:9e:35:42:b5:10:40:98:
         be:50:15:0d:35:da:77:df:7d:48:b6:b4:56:d3:21:8d:7c:79:
         9e:8a:6a:0a:25:e5:4e:03:8e:09:07:9a:39:06:8a:b2:1a:25:
         19:2c:70:31:15:2f:fd:4f:f2:6f:59:4a:10:b1:19:1d:97:f9:
         43:4a:8d:91:cf:d6:c0:27:94:84:3a:d2:36:20:06:1a:65:92:
         74:37:1f:a3:26:f9:77:97:f9:0c:38:2b:4f:27:50:38:0c:5b:
         24:c2:f0:ec:74:9d:27:62:af:31:87:d3:6d:8b:b9:d9:64:a0:
         fb:bb:67:30:3b:a8:15:13:a7:b0:df:b2:a0:7a:da:f3:64:29:
         a3:80:21:64:7a:e1:42:fb:1a:82:68:48:8b:b2:04:e0:e5:64:
         6c:8f:98:f0:01:a5:0c:b7:ec:e7:1b:4d:56:91:28:95:e3:5b:
         ae:0d:a7:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDF+xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIxMDE4
MDMwMDAwWhcNMjMxMDE5MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZDEwNmY0ODM2MDk4
NmUzMjg1ZjA1ZDIzYzY1YmRjNTgwYmM0NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcBP9hJ+Oe7m3vAucr9A0On0gntiCxWLP2+MoS1ABRLxkJyq
nB9T0g0152G6uRiPDu8wn1KbtsW6QWZFZAdFvfgc0osauDSiKnpvysgYrVYdh7qh
6zyfAFNgYEJSWo+QdKnf5zreHJuJZlF5oOZl98gjMdHE/THBL9agI760/MAaDw70
saUNJX3cvuIRU8KNoi98qzqKynRgDlx8SVdRQU0YJNHNJ+8YAaQ9YaXhvXQ5IQgF
q1th++LGHK/bu0KHyn6L8YOEVhLMK9+vN7KKhgSRBDNH9dtCNmtYjKDGcXj9DyD8
LaYUUfnaQ6ngSc5VSrrQhRCQ9DKfyuChhD+UjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKm7Nrwq/Q1NT5AohDpTlgwyLahXMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzhkMTA2ZjQ4MzYwOTg2ZTMyODVmMDVkMjNjNjViZGM1ODBiYzQ1YTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEASsO1w+QSzojkUHm3
4xNCofj2y5qvKG9KQ732xRwzIQYPyz2UyMHQpZfa6gE4v87NzIlynK4Rvs/hWfpv
5t3fd2bO4q5MyDJOVRez0/HCquwneT+eNUK1EECYvlAVDTXad999SLa0VtMhjXx5
nopqCiXlTgOOCQeaOQaKsholGSxwMRUv/U/yb1lKELEZHZf5Q0qNkc/WwCeUhDrS
NiAGGmWSdDcfoyb5d5f5DDgrTydQOAxbJMLw7HSdJ2KvMYfTbYu52WSg+7tnMDuo
FROnsN+yoHra82Qpo4AhZHrhQvsagmhIi7IE4OVkbI+Y8AGlDLfs5xtNVpEoleNb
rg2nwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org