Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad4733907bfb42e0a4dbb7ff5bca7cf98f5e2c4a.roa
File:                     ad4733907bfb42e0a4dbb7ff5bca7cf98f5e2c4a.roa (raw, json)
Hash identifier:          F3hQ0prI83ydkJkPsKPGaXRRu2SKh14ycEYDnguP+2w=
Subject key identifier:   7B:08:8F:92:4E:FF:2F:6B:21:B2:72:89:BD:1E:79:64:8B:24:9F:3D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       08ED11
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad4733907bfb42e0a4dbb7ff5bca7cf98f5e2c4a.roa
Signing time:             Mon 08 Aug 2022 05:41:54 +0000
ROA not before:           Mon 08 Aug 2022 03:00:00 +0000
ROA not after:            Tue 08 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584977 (0x8ed11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Aug  8 03:00:00 2022 GMT
            Not After : Aug  8 03:00:00 2023 GMT
        Subject: CN=ad4733907bfb42e0a4dbb7ff5bca7cf98f5e2c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:c2:35:b6:64:eb:bf:22:e4:03:e8:6e:63:
                    46:86:76:61:55:b8:45:87:77:6c:72:39:bf:60:6b:
                    58:f3:bd:2c:b7:71:60:0d:6d:4b:ba:5f:48:3f:67:
                    f1:12:46:fb:5a:5a:aa:81:5f:a0:aa:4c:6c:5e:c6:
                    3c:0d:94:30:c5:4f:db:df:0b:1a:73:ce:a2:66:e7:
                    5b:57:7d:81:bf:cb:7a:15:e2:70:85:c4:88:d8:da:
                    a0:6a:d1:1b:b9:f7:9f:a8:2a:56:b2:0e:88:d4:80:
                    e5:95:41:82:a7:6f:9b:3b:46:03:cb:dd:36:62:41:
                    fb:5d:d0:45:1e:b4:22:39:66:e5:fb:1b:48:2c:ee:
                    7d:f4:65:b9:44:86:a3:e1:ae:29:5e:63:c5:3b:c9:
                    05:b1:f1:f3:2a:3e:ea:b9:f8:c7:1d:ae:a8:02:2f:
                    50:5d:ae:66:86:68:e7:64:76:3e:28:cc:d3:5b:16:
                    e9:70:b2:43:9b:f1:e4:62:e6:d1:c1:09:51:ac:9a:
                    99:17:ab:fc:dc:e7:04:03:d3:86:3d:14:4b:8e:0f:
                    9d:28:16:61:60:41:f7:24:0d:a8:8b:ba:4e:e5:36:
                    aa:23:dd:16:69:ff:4c:ba:d6:4f:a4:e6:0e:9b:c8:
                    41:ef:4f:b4:23:3d:7e:83:cd:f8:d8:f9:49:af:60:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:8F:92:4E:FF:2F:6B:21:B2:72:89:BD:1E:79:64:8B:24:9F:3D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/ad4733907bfb42e0a4dbb7ff5bca7cf98f5e2c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:f8:9b:21:f2:dd:36:39:4f:99:f9:7a:9b:7a:72:8d:77:
         67:2a:12:4b:27:9a:e3:6e:2e:55:ac:61:84:f3:70:dc:00:79:
         40:18:04:0d:a6:a2:d0:65:32:85:70:19:78:57:e9:31:0d:15:
         05:f5:09:77:fc:1e:95:7d:6c:dd:17:a4:a0:ca:eb:8e:05:3c:
         77:94:7e:b5:57:ca:33:7f:d0:87:3e:7d:69:78:6e:9c:ff:6f:
         c3:1c:d5:ed:84:d8:8f:0b:61:5d:75:05:1b:2f:14:2e:76:a5:
         e1:7f:48:46:2c:4d:6e:11:00:c8:6d:04:e1:58:4c:08:cc:46:
         29:59:a6:77:b4:8c:34:84:19:ff:99:2e:1f:3e:e2:93:2c:be:
         40:58:75:65:b1:82:3b:d3:5a:06:c6:6b:86:a3:14:04:bc:23:
         13:43:5c:77:90:cb:72:b0:e4:29:3c:4f:a5:23:14:50:75:2b:
         35:7b:df:18:a0:33:39:ee:b1:83:bd:d0:e4:3f:99:32:af:c9:
         c6:b2:32:31:14:d8:c3:73:7b:97:c0:30:a7:78:f4:0a:a7:aa:
         f9:75:e6:86:2b:e2:02:b6:49:8a:59:51:2d:63:35:20:8b:8e:
         86:d5:7f:e8:7a:3e:59:5c:1b:6f:8a:0c:04:a6:b7:d1:a7:91:
         f3:35:f8:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCO0RMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwODA4
MDMwMDAwWhcNMjMwODA4MDMwMDAwWjAzMTEwLwYDVQQDEyhhZDQ3MzM5MDdiZmI0
MmUwYTRkYmI3ZmY1YmNhN2NmOThmNWUyYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjZXCNbZk678i5APobmNGhnZhVbhFh3dscjm/YGtY870st3Fg
DW1Lul9IP2fxEkb7WlqqgV+gqkxsXsY8DZQwxU/b3wsac86iZudbV32Bv8t6FeJw
hcSI2NqgatEbufefqCpWsg6I1IDllUGCp2+bO0YDy902YkH7XdBFHrQiOWbl+xtI
LO599GW5RIaj4a4pXmPFO8kFsfHzKj7qufjHHa6oAi9QXa5mhmjnZHY+KMzTWxbp
cLJDm/HkYubRwQlRrJqZF6v83OcEA9OGPRRLjg+dKBZhYEH3JA2oi7pO5TaqI90W
af9MutZPpOYOm8hB70+0Iz1+g8342PlJr2DgpQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHsIj5JO/y9rIbJyib0eeWSLJJ89MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2FkNDczMzkwN2JmYjQyZTBhNGRiYjdmZjViY2E3Y2Y5OGY1ZTJjNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEATfD4myHy3TY5T5n5
ept6co13ZyoSSyea424uVaxhhPNw3AB5QBgEDaai0GUyhXAZeFfpMQ0VBfUJd/we
lX1s3RekoMrrjgU8d5R+tVfKM3/Qhz59aXhunP9vwxzV7YTYjwthXXUFGy8ULnal
4X9IRixNbhEAyG0E4VhMCMxGKVmmd7SMNIQZ/5kuHz7ikyy+QFh1ZbGCO9NaBsZr
hqMUBLwjE0Ncd5DLcrDkKTxPpSMUUHUrNXvfGKAzOe6xg73Q5D+ZMq/JxrIyMRTY
w3N7l8Awp3j0Cqeq+XXmhiviArZJillRLWM1IIuOhtV/6Ho+WVwbb4oMBKa30aeR
8zX4Og==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org