Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa
File:                     9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa (raw, json)
Hash identifier:          Nc3DkQeKEkIwt1Z39GBXmOmjU+p+HLBVikrKKRQVb/s=
Subject key identifier:   68:A6:4B:2A:D5:2B:36:78:D0:2B:A3:CE:05:29:C8:24:7A:65:CE:56
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       01FCF1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa
Signing time:             Sat 05 Mar 2022 03:27:20 +0000
ROA not before:           Sat 05 Mar 2022 03:00:00 +0000
ROA not after:            Sun 05 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130289 (0x1fcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Mar  5 03:00:00 2022 GMT
            Not After : Mar  5 03:00:00 2023 GMT
        Subject: CN=9a8b03c78a7771c68e0a72a4c3d45904148e6d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:37:cf:6d:cb:fd:07:3c:22:d7:82:f9:15:
                    c4:41:75:63:34:96:5f:f9:4c:65:ea:4a:28:ee:b5:
                    cc:42:21:62:85:1b:b5:08:51:58:8e:f8:b4:52:b8:
                    0c:5f:a6:30:f7:eb:74:cc:68:35:46:a8:c7:ad:6a:
                    7b:f9:10:5b:fe:95:d6:50:57:7c:a3:c9:2f:5a:7a:
                    b6:ff:71:27:5e:4c:d9:4d:7b:d7:38:d8:a7:e1:cb:
                    51:04:14:c3:18:21:fa:a3:fb:76:0c:1d:e3:3f:be:
                    de:60:7b:06:f2:38:72:72:e4:77:ab:cb:92:88:ee:
                    21:a0:a4:17:88:14:d8:a6:a3:ee:7f:c5:00:5f:94:
                    46:2b:36:76:cb:61:db:4e:0a:84:66:78:a6:70:14:
                    a5:34:66:73:f6:3a:3b:30:b2:60:4a:a7:8a:8a:ab:
                    e6:f4:5f:ce:70:00:01:49:69:72:f6:b0:36:47:9c:
                    ed:36:e6:57:ed:f8:11:d0:51:9c:e7:b7:3b:9b:95:
                    07:c1:63:5e:3f:e4:3e:77:a7:a6:9b:f9:5f:a8:2b:
                    d4:11:de:91:c2:cc:6d:0d:a5:d8:96:fc:b9:db:c2:
                    5c:49:9e:0f:6f:de:71:1f:a3:a7:91:75:83:cc:0e:
                    93:15:76:f2:95:43:17:8c:ab:18:a7:f1:b5:23:3f:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A6:4B:2A:D5:2B:36:78:D0:2B:A3:CE:05:29:C8:24:7A:65:CE:56
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9a8b03c78a7771c68e0a72a4c3d45904148e6d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:ce:dd:ac:13:a7:32:c2:cf:65:3e:05:94:30:60:05:c6:
         30:c3:ee:2d:e2:0f:3b:36:0d:e5:92:df:42:f2:0b:bf:b9:ac:
         a9:8d:2c:d7:70:d6:be:28:ba:bb:5f:47:64:52:8e:0f:ab:27:
         ce:ab:db:26:da:22:3b:ec:4d:b6:f8:b4:13:f0:f7:ac:b4:70:
         de:87:43:6f:16:79:72:d4:61:72:5c:33:e7:82:68:ed:05:4b:
         bc:63:2b:e1:45:c9:3e:3a:e3:f4:16:29:b9:c2:cc:2a:9c:3a:
         a8:34:25:80:5e:c2:61:14:e1:18:49:6d:fc:ee:b4:23:52:e8:
         90:ee:c9:e3:97:d9:a5:72:51:3e:e2:dd:f4:db:bb:f4:a4:f0:
         9b:eb:8d:64:d1:04:cf:77:1d:89:0b:53:25:8f:e9:47:7b:06:
         18:5c:e4:a4:82:2c:5e:17:49:19:d6:33:a6:ea:a6:99:25:a7:
         0d:a1:30:ca:fe:d5:91:8f:c1:d8:fe:ea:61:eb:f0:6e:0a:1e:
         e3:ec:91:59:f2:2b:9c:67:8d:86:3f:a5:62:8d:85:e1:81:e1:
         6b:65:24:d5:e9:8a:d4:77:5d:ac:36:41:51:cd:7d:ba:05:66:
         ae:be:92:5a:c2:d0:0f:be:01:a1:89:0d:c0:93:cf:a5:57:7f:
         a9:98:ca:9c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAfzxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMzA1
MDMwMDAwWhcNMjMwMzA1MDMwMDAwWjAzMTEwLwYDVQQDEyg5YThiMDNjNzhhNzc3
MWM2OGUwYTcyYTRjM2Q0NTkwNDE0OGU2ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxjk3z23L/Qc8IteC+RXEQXVjNJZf+Uxl6koo7rXMQiFihRu1
CFFYjvi0UrgMX6Yw9+t0zGg1RqjHrWp7+RBb/pXWUFd8o8kvWnq2/3EnXkzZTXvX
ONin4ctRBBTDGCH6o/t2DB3jP77eYHsG8jhycuR3q8uSiO4hoKQXiBTYpqPuf8UA
X5RGKzZ2y2HbTgqEZnimcBSlNGZz9jo7MLJgSqeKiqvm9F/OcAABSWly9rA2R5zt
NuZX7fgR0FGc57c7m5UHwWNeP+Q+d6emm/lfqCvUEd6RwsxtDaXYlvy528JcSZ4P
b95xH6OnkXWDzA6TFXbylUMXjKsYp/G1Iz+XnQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGimSyrVKzZ40CujzgUpyCR6Zc5WMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzlhOGIwM2M3OGE3NzcxYzY4ZTBhNzJhNGMzZDQ1OTA0MTQ4ZTZkMDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAXzLO3awTpzLCz2U+
BZQwYAXGMMPuLeIPOzYN5ZLfQvILv7msqY0s13DWvii6u19HZFKOD6snzqvbJtoi
O+xNtvi0E/D3rLRw3odDbxZ5ctRhclwz54Jo7QVLvGMr4UXJPjrj9BYpucLMKpw6
qDQlgF7CYRThGElt/O60I1LokO7J45fZpXJRPuLd9Nu79KTwm+uNZNEEz3cdiQtT
JY/pR3sGGFzkpIIsXhdJGdYzpuqmmSWnDaEwyv7VkY/B2P7qYevwbgoe4+yRWfIr
nGeNhj+lYo2F4YHha2Uk1emK1HddrDZBUc19ugVmrr6SWsLQD74BoYkNwJPPpVd/
qZjKnA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org