Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a929317ec3633987644d169626644c7ff8fd117f.roa
File:                     a929317ec3633987644d169626644c7ff8fd117f.roa (raw, json)
Hash identifier:          Tcz+X1l+kTzaSfRn2eGXCf6lOKPchNeEumshVUV/l2c=
Subject key identifier:   95:AC:F7:D6:D5:33:65:39:91:77:B3:27:EA:72:B2:CC:62:A6:54:97
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0344FF
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a929317ec3633987644d169626644c7ff8fd117f.roa
Signing time:             Sat 02 Apr 2022 01:10:26 +0000
ROA not before:           Sat 02 Apr 2022 03:00:00 +0000
ROA not after:            Sun 02 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214271 (0x344ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  2 03:00:00 2022 GMT
            Not After : Apr  2 03:00:00 2023 GMT
        Subject: CN=a929317ec3633987644d169626644c7ff8fd117f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:51:a9:81:1a:4f:70:72:81:84:ba:d6:c6:4c:
                    6b:84:46:aa:a2:4a:a3:fc:a5:71:d6:7c:eb:01:ac:
                    3d:79:81:cb:20:75:81:1c:04:33:ab:74:ca:4e:45:
                    ce:23:bb:75:f9:29:63:cd:05:ac:f1:83:ad:4d:a0:
                    6e:e7:31:74:59:e0:37:8b:eb:7d:02:1f:6f:2b:c0:
                    99:0e:87:fe:95:7f:8f:89:9f:32:92:67:27:1d:26:
                    aa:c1:22:bf:8e:b1:c1:0e:21:cb:e8:a0:ac:8f:bb:
                    96:86:2d:20:5c:cf:4c:44:ef:4a:24:58:8b:7c:59:
                    e9:8e:06:73:cf:72:4c:e9:2a:a1:cc:88:f8:6a:c8:
                    04:8a:dc:e8:ea:c1:eb:c5:03:fd:df:3b:55:2e:06:
                    23:85:40:3f:42:7c:6f:33:7f:6c:31:2a:dd:76:76:
                    17:97:4a:f1:29:41:14:c1:62:7f:9a:8e:52:f2:31:
                    f0:0d:66:e5:46:11:df:fa:e8:d6:4f:a2:ff:99:94:
                    f7:95:a1:bb:27:39:6f:8f:d2:52:4e:cc:7f:bc:ae:
                    1f:54:2c:94:3d:42:96:cb:05:00:57:0f:65:af:71:
                    c5:52:dd:22:ac:7a:0c:be:ad:fa:26:ef:f3:c9:fe:
                    ae:1c:dc:2b:5a:65:4f:41:25:44:2b:d1:4b:ae:36:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:F7:D6:D5:33:65:39:91:77:B3:27:EA:72:B2:CC:62:A6:54:97
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/a929317ec3633987644d169626644c7ff8fd117f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:4a:55:5c:eb:c6:0d:77:d1:03:6f:66:b1:69:84:fc:c1:
         e1:df:75:8f:cc:10:0a:9c:4b:93:1f:c2:3e:3d:6b:59:cd:3f:
         8a:d2:af:4b:c6:6e:53:7b:77:e7:c3:89:42:ab:6d:2b:4e:09:
         ec:fb:f5:07:f2:61:5f:e6:1b:f8:69:66:d1:39:dc:b8:f5:e3:
         22:b4:6f:db:66:e8:37:d5:34:f9:24:3f:89:42:1f:4d:8e:63:
         85:d4:77:8a:62:1a:c9:ca:64:db:eb:4e:10:a3:c2:1a:84:43:
         98:7a:9f:6d:72:ce:af:07:70:81:b3:2b:0a:61:9d:13:fd:b4:
         a6:9d:e2:1e:d2:79:7e:96:7e:d2:07:cc:37:44:6d:49:19:5f:
         b1:18:e7:da:55:73:58:ae:7e:52:62:ca:9c:98:52:fc:3c:18:
         fd:00:13:12:7a:ae:52:a7:91:b3:89:d8:85:45:7a:e7:af:81:
         3d:89:2a:92:59:83:1a:80:90:77:61:a1:fa:6c:54:89:68:a6:
         bf:ee:35:b7:d3:dc:e3:5f:b1:07:21:44:12:5f:70:6f:09:56:
         92:1e:7d:ae:d6:e2:d8:68:9c:f5:37:8d:53:31:f8:3a:28:00:
         06:67:01:fb:c3:1b:3d:88:47:54:7f:f9:bc:8a:49:a0:b5:47:
         9d:d1:5e:51
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA0T/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNDAy
MDMwMDAwWhcNMjMwNDAyMDMwMDAwWjAzMTEwLwYDVQQDEyhhOTI5MzE3ZWMzNjMz
OTg3NjQ0ZDE2OTYyNjY0NGM3ZmY4ZmQxMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8VGpgRpPcHKBhLrWxkxrhEaqokqj/KVx1nzrAaw9eYHLIHWB
HAQzq3TKTkXOI7t1+SljzQWs8YOtTaBu5zF0WeA3i+t9Ah9vK8CZDof+lX+PiZ8y
kmcnHSaqwSK/jrHBDiHL6KCsj7uWhi0gXM9MRO9KJFiLfFnpjgZzz3JM6SqhzIj4
asgEitzo6sHrxQP93ztVLgYjhUA/QnxvM39sMSrddnYXl0rxKUEUwWJ/mo5S8jHw
DWblRhHf+ujWT6L/mZT3laG7Jzlvj9JSTsx/vK4fVCyUPUKWywUAVw9lr3HFUt0i
rHoMvq36Ju/zyf6uHNwrWmVPQSVEK9FLrjZhkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJWs99bVM2U5kXezJ+pyssxiplSXMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2E5MjkzMTdlYzM2MzM5ODc2NDRkMTY5NjI2NjQ0YzdmZjhmZDExN2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAFExKVVzrxg130QNv
ZrFphPzB4d91j8wQCpxLkx/CPj1rWc0/itKvS8ZuU3t358OJQqttK04J7Pv1B/Jh
X+Yb+Glm0TncuPXjIrRv22boN9U0+SQ/iUIfTY5jhdR3imIaycpk2+tOEKPCGoRD
mHqfbXLOrwdwgbMrCmGdE/20pp3iHtJ5fpZ+0gfMN0RtSRlfsRjn2lVzWK5+UmLK
nJhS/DwY/QATEnquUqeRs4nYhUV656+BPYkqklmDGoCQd2Gh+mxUiWimv+41t9Pc
41+xByFEEl9wbwlWkh59rtbi2Gic9TeNUzH4OigABmcB+8MbPYhHVH/5vIpJoLVH
ndFeUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org