Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa
File:                     9db4b49dd8983393c717294a7345376f83cec039.roa (raw, json)
Hash identifier:          sB9OvlXyG/hQbYeBG9cGC4AI4ZfgS+x2zOHv13Mfx2c=
Subject key identifier:   97:9B:DA:A7:01:97:07:98:10:42:E1:6C:FF:79:FF:01:B9:46:45:95
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06461B
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa
Signing time:             Thu 09 Jun 2022 01:43:04 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411163 (0x6461b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=9db4b49dd8983393c717294a7345376f83cec039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:90:cf:86:b8:57:9b:50:e1:d5:2e:b9:89:
                    7e:15:98:4f:fb:2d:19:21:d6:80:d7:7d:25:95:df:
                    e5:90:20:42:19:8c:88:f2:b8:72:08:ef:60:9e:9a:
                    27:d6:e7:99:38:0d:27:19:fe:0f:f5:e1:bf:98:59:
                    5b:da:2c:0d:74:bd:4d:ef:8c:fa:57:a3:a0:1b:36:
                    55:16:57:a9:cb:30:ae:09:3f:6c:0e:db:e6:47:79:
                    be:aa:cf:92:ca:58:2b:c4:56:15:ec:86:2f:8f:83:
                    a9:6d:00:c3:3e:81:2f:97:bd:72:bd:f4:d9:fc:fa:
                    37:83:05:2b:e4:7c:56:e4:ac:99:8e:d7:1c:69:51:
                    d7:a2:d5:71:cc:c0:39:ff:80:7e:1a:c0:8b:56:48:
                    5a:c2:01:65:49:b2:f9:e8:84:76:1d:c1:97:03:eb:
                    9e:ee:2a:75:81:a8:e7:12:7b:83:38:bf:16:07:7b:
                    f3:c5:78:c2:67:d7:7a:5e:28:b9:92:6d:c9:4c:60:
                    7f:62:9b:71:41:0f:9f:09:b1:a6:73:a7:f6:75:11:
                    46:40:3b:01:01:74:ea:c4:0d:b4:56:2a:be:42:23:
                    b5:ee:53:2d:e5:9d:06:2d:b3:dd:76:35:b6:77:8c:
                    51:53:9f:82:3d:d6:6f:73:b8:4e:46:66:38:44:8b:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:DA:A7:01:97:07:98:10:42:E1:6C:FF:79:FF:01:B9:46:45:95
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/9db4b49dd8983393c717294a7345376f83cec039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:ce:53:62:98:db:e5:8a:c1:04:f5:ce:6f:99:d8:8a:b8:
         8e:91:c4:cc:1a:05:bd:ee:db:70:55:48:e6:36:28:60:d0:ff:
         2c:40:1a:dd:04:7f:39:cf:68:08:43:c1:ba:8f:f3:f3:cc:8f:
         73:8a:eb:55:b7:6d:7e:ea:28:a1:8d:69:42:41:f0:87:f4:5f:
         a7:df:a2:60:bd:eb:a5:67:8c:cf:31:b2:20:44:d4:46:66:d1:
         0e:4e:de:e6:5e:8a:1c:55:7b:4f:2e:ac:47:a0:3a:83:0f:2b:
         f4:53:99:20:95:bc:54:9b:86:52:fa:2d:32:48:67:74:ea:61:
         a5:83:57:45:d4:5f:39:05:7c:44:e0:e7:2e:ea:a1:fd:09:16:
         de:ef:aa:d6:00:74:e5:d8:9d:e5:bd:45:27:b2:c1:e0:bb:67:
         6f:fc:2f:8a:ed:fb:8a:e6:05:af:35:82:b6:3a:fb:41:46:91:
         e7:a7:72:6f:93:a0:29:c2:08:0c:ba:e0:f3:d1:28:10:23:f3:
         01:55:d2:a6:8d:25:7a:70:e4:39:cd:5f:9d:a6:df:f6:ab:f2:
         06:80:df:c8:6d:81:b0:03:b4:ad:cf:5e:f2:11:33:75:29:03:
         cb:b7:b1:1d:97:b8:ce:22:d9:42:76:1d:28:34:af:36:74:78:
         04:b4:ed:a6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBkYbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjA5
MDMwMDAwWhcNMjMwNjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg5ZGI0YjQ5ZGQ4OTgz
MzkzYzcxNzI5NGE3MzQ1Mzc2ZjgzY2VjMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArZGQz4a4V5tQ4dUuuYl+FZhP+y0ZIdaA130lld/lkCBCGYyI
8rhyCO9gnpon1ueZOA0nGf4P9eG/mFlb2iwNdL1N74z6V6OgGzZVFlepyzCuCT9s
DtvmR3m+qs+SylgrxFYV7IYvj4OpbQDDPoEvl71yvfTZ/Po3gwUr5HxW5KyZjtcc
aVHXotVxzMA5/4B+GsCLVkhawgFlSbL56IR2HcGXA+ue7ip1gajnEnuDOL8WB3vz
xXjCZ9d6Xii5km3JTGB/YptxQQ+fCbGmc6f2dRFGQDsBAXTqxA20Viq+QiO17lMt
5Z0GLbPddjW2d4xRU5+CPdZvc7hORmY4RIv1EwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJeb2qcBlweYEELhbP95/wG5RkWVMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1LzlkYjRiNDlkZDg5ODMzOTNjNzE3Mjk0YTczNDUzNzZmODNjZWMwMzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAVYrOU2KY2+WKwQT1
zm+Z2Iq4jpHEzBoFve7bcFVI5jYoYND/LEAa3QR/Oc9oCEPBuo/z88yPc4rrVbdt
fuoooY1pQkHwh/Rfp9+iYL3rpWeMzzGyIETURmbRDk7e5l6KHFV7Ty6sR6A6gw8r
9FOZIJW8VJuGUvotMkhndOphpYNXRdRfOQV8RODnLuqh/QkW3u+q1gB05did5b1F
J7LB4Ltnb/wviu37iuYFrzWCtjr7QUaR56dyb5OgKcIIDLrg89EoECPzAVXSpo0l
enDkOc1fnabf9qvyBoDfyG2BsAO0rc9e8hEzdSkDy7exHZe4ziLZQnYdKDSvNnR4
BLTtpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org