Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/aaac99c3d0a08fe16e187ef9347f9ff46ef3be7b.roa
File:                     aaac99c3d0a08fe16e187ef9347f9ff46ef3be7b.roa (raw, json)
Hash identifier:          W2QBNJVB/geKO7Aag+5MmzJ+1f+klS/v/C3hF8WIso4=
Subject key identifier:   44:B2:65:A1:F0:9B:25:7E:04:C0:CC:C6:C5:6A:C3:A2:C0:B3:22:6A
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       038470
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/aaac99c3d0a08fe16e187ef9347f9ff46ef3be7b.roa
Signing time:             Thu 07 Apr 2022 05:59:37 +0000
ROA not before:           Thu 07 Apr 2022 03:00:00 +0000
ROA not after:            Fri 07 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230512 (0x38470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr  7 03:00:00 2022 GMT
            Not After : Apr  7 03:00:00 2023 GMT
        Subject: CN=aaac99c3d0a08fe16e187ef9347f9ff46ef3be7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:40:ac:da:22:60:b7:4f:07:e8:ce:da:59:
                    81:62:f2:79:53:bf:ac:56:a2:c8:66:20:6a:6d:c1:
                    74:50:dc:17:bb:5b:03:c2:1e:84:af:f2:4e:b6:56:
                    0a:9e:17:84:5b:f1:2e:f1:06:03:f8:74:c3:35:c8:
                    76:61:39:96:4b:a0:48:a9:27:65:91:ec:bd:5d:cd:
                    22:50:f6:f0:53:45:86:94:36:9b:78:a1:05:de:fd:
                    6b:1e:e4:a3:58:e8:c6:16:b9:d3:cd:23:cb:b2:da:
                    75:63:86:5c:07:55:83:10:f3:6b:c9:74:9a:e3:39:
                    ff:61:cf:62:88:1e:ab:dd:85:6b:93:0b:ef:50:7c:
                    a0:eb:f6:15:4d:84:ac:8b:39:37:95:65:f3:6a:4c:
                    89:33:27:3e:55:9d:0b:42:14:98:b1:d0:1c:d7:6d:
                    99:09:d6:82:da:87:1b:3e:0d:a1:42:be:89:38:09:
                    12:af:54:4e:39:53:70:bb:d1:67:85:39:dd:e2:76:
                    5f:62:45:25:db:9b:55:24:36:cf:df:42:a3:a2:c2:
                    ec:29:66:a5:8d:5c:0d:2a:c6:1f:98:0a:2f:dc:61:
                    b4:93:a5:c3:cb:2a:9e:30:0b:aa:5d:61:e7:77:9b:
                    cf:ea:e7:f2:7b:c0:d3:72:b0:05:f5:e7:ca:9f:3d:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:65:A1:F0:9B:25:7E:04:C0:CC:C6:C5:6A:C3:A2:C0:B3:22:6A
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/aaac99c3d0a08fe16e187ef9347f9ff46ef3be7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:be:fb:99:55:3d:8c:86:24:0a:05:f7:cf:16:42:91:00:
         d7:81:12:56:ca:91:44:71:a4:cd:b5:c6:2a:73:02:15:8c:d0:
         91:48:eb:ac:b3:0b:d1:4d:cd:a3:a2:74:ba:54:c7:cf:65:78:
         e5:98:28:f9:b6:2f:dc:f1:97:9a:44:6b:ae:b3:ff:1d:1d:9d:
         1f:6b:a1:07:5d:da:61:e1:9b:0d:4b:64:c4:58:78:f3:02:0b:
         00:e8:6c:11:d7:cd:b3:b7:f1:90:3c:7b:f3:32:98:54:6e:e1:
         f5:8d:ad:2e:96:86:22:e7:39:9b:3e:99:12:55:dd:4b:2c:e7:
         d1:d2:4c:0f:ac:51:b4:85:5a:d1:5d:7e:09:4a:74:c1:cc:52:
         45:44:ab:06:21:a6:af:34:06:be:b6:fa:7a:fc:48:50:70:93:
         6d:70:14:2b:05:6e:ed:3b:bd:ca:aa:b5:02:fd:e9:e4:9a:74:
         cb:8a:a6:c6:ac:e9:0f:2c:d6:b7:95:3a:b2:ff:e4:d7:5f:50:
         d5:03:06:90:9f:6f:3e:bd:b5:43:4c:5d:b3:95:00:8c:e1:b1:
         f7:11:9c:3a:ac:f5:70:f3:0c:55:be:eb:6f:69:0a:89:12:b3:
         d1:d9:be:af:9f:95:4b:71:c6:5a:3d:8c:dd:7c:a5:7a:3e:4a:
         a8:dc:c5:a9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA4RwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNDA3
MDMwMDAwWhcNMjMwNDA3MDMwMDAwWjAzMTEwLwYDVQQDEyhhYWFjOTljM2QwYTA4
ZmUxNmUxODdlZjkzNDdmOWZmNDZlZjNiZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlstArNoiYLdPB+jO2lmBYvJ5U7+sVqLIZiBqbcF0UNwXu1sD
wh6Er/JOtlYKnheEW/Eu8QYD+HTDNch2YTmWS6BIqSdlkey9Xc0iUPbwU0WGlDab
eKEF3v1rHuSjWOjGFrnTzSPLstp1Y4ZcB1WDEPNryXSa4zn/Yc9iiB6r3YVrkwvv
UHyg6/YVTYSsizk3lWXzakyJMyc+VZ0LQhSYsdAc122ZCdaC2ocbPg2hQr6JOAkS
r1ROOVNwu9FnhTnd4nZfYkUl25tVJDbP30KjosLsKWaljVwNKsYfmAov3GG0k6XD
yyqeMAuqXWHnd5vP6ufye8DTcrAF9efKnz2YVwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFESyZaHwmyV+BMDMxsVqw6LAsyJqMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2FhYWM5OWMzZDBhMDhmZTE2ZTE4N2VmOTM0N2Y5ZmY0NmVmM2JlN2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAleq++5lVPYyGJAoF
988WQpEA14ESVsqRRHGkzbXGKnMCFYzQkUjrrLML0U3No6J0ulTHz2V45Zgo+bYv
3PGXmkRrrrP/HR2dH2uhB13aYeGbDUtkxFh48wILAOhsEdfNs7fxkDx78zKYVG7h
9Y2tLpaGIuc5mz6ZElXdSyzn0dJMD6xRtIVa0V1+CUp0wcxSRUSrBiGmrzQGvrb6
evxIUHCTbXAUKwVu7Tu9yqq1Av3p5Jp0y4qmxqzpDyzWt5U6sv/k119Q1QMGkJ9v
Pr21Q0xds5UAjOGx9xGcOqz1cPMMVb7rb2kKiRKz0dm+r5+VS3HGWj2M3Xylej5K
qNzFqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org