Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b480fb05c9f838bbc6d913f82b22b18a2446c44f.roa
File:                     b480fb05c9f838bbc6d913f82b22b18a2446c44f.roa (raw, json)
Hash identifier:          8NhHCtsCEtYU4AJOrzBvDoYtxmGoQCCrA+jDoF5N5sw=
Subject key identifier:   81:06:61:B3:99:5A:4C:A2:B6:45:88:93:0C:E1:A5:C3:83:0C:41:3D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       88D2
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b480fb05c9f838bbc6d913f82b22b18a2446c44f.roa
Signing time:             Tue 01 Feb 2022 03:56:04 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Wed 01 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35026 (0x88d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2023 GMT
        Subject: CN=b480fb05c9f838bbc6d913f82b22b18a2446c44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:8e:41:76:20:74:17:9b:42:9a:e2:2e:a5:
                    c8:b0:14:0e:4a:fa:4f:83:9f:a3:6c:91:1c:22:d9:
                    9a:13:1f:1d:ff:03:43:e9:3a:e3:a7:86:57:73:75:
                    29:19:1b:b1:5a:c4:af:86:f4:4e:67:13:81:86:8a:
                    57:73:61:3e:d0:64:05:ba:ee:44:de:46:fe:0a:28:
                    0e:82:7a:30:e4:37:6d:c7:f7:fa:cb:bc:92:c2:ff:
                    dd:45:de:0a:6a:65:9f:b9:ab:3e:2e:d1:ab:4e:6f:
                    f4:36:b4:5d:d0:47:08:26:b8:3b:96:0c:84:63:e4:
                    53:8d:df:f1:29:cf:a1:7d:74:3b:9e:fd:bf:b2:24:
                    8c:49:07:cd:de:f9:e8:91:a3:37:2f:72:fd:42:59:
                    75:20:1e:87:a4:fd:2e:a2:8f:bf:a7:8b:18:39:bf:
                    00:94:4b:6e:34:af:d4:da:47:10:4b:a0:a3:a6:39:
                    35:0c:07:bc:6a:30:b7:ea:24:d1:99:d8:9f:41:c3:
                    a6:1a:3f:02:b4:92:72:25:b6:4e:a5:78:83:12:3e:
                    8f:f5:31:3b:12:a7:9e:2d:23:d7:2a:42:04:28:fd:
                    85:61:c4:36:e0:65:04:f3:b2:1b:2b:f3:ab:b4:fe:
                    de:51:ae:90:98:46:5c:e5:65:ba:82:43:95:a1:fb:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:61:B3:99:5A:4C:A2:B6:45:88:93:0C:E1:A5:C3:83:0C:41:3D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/b480fb05c9f838bbc6d913f82b22b18a2446c44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:4e:62:df:f0:4d:ff:8c:45:af:ae:b9:bf:e5:a7:52:d8:
         00:a4:a6:ed:5f:eb:51:6e:5d:5d:f8:55:ea:2a:57:df:18:98:
         db:cd:bf:44:52:65:bf:a3:de:99:44:d3:0a:6f:9d:4b:46:0f:
         ca:22:b3:95:31:ea:ba:0a:a9:e2:86:04:e5:a5:06:c9:d2:42:
         63:4d:42:68:e5:10:3d:c2:69:7f:b5:04:5c:d2:33:a9:76:c0:
         e5:e4:57:72:12:c9:c3:94:39:66:49:11:66:5b:e3:e0:6b:f5:
         0e:fb:45:2b:ec:f6:25:91:05:f4:4a:2e:b1:b4:0d:bd:4a:31:
         99:c3:5f:16:3c:b5:5a:24:cb:03:5d:4a:86:06:df:33:fb:18:
         a3:da:84:3a:10:72:e8:cd:cf:77:d4:3d:80:3a:61:94:61:60:
         6f:61:88:a1:69:9b:b9:54:51:b6:7f:bf:0c:9b:44:6b:9f:3c:
         d1:24:a0:ac:2e:1c:28:3f:60:a5:3a:6c:33:d0:81:fc:01:e7:
         b5:de:c0:95:f1:c8:9b:af:f8:cf:60:6b:12:52:70:5a:11:b4:
         d2:6a:23:34:bf:a1:fe:16:76:14:56:c1:96:1c:bf:31:f7:a3:
         ee:68:3d:80:15:3c:b1:a2:76:1b:fd:7c:89:a9:c4:1c:12:dd:
         a1:bd:0f:0a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAIjSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjAx
MDMwMDAwWhcNMjMwMjAxMDMwMDAwWjAzMTEwLwYDVQQDEyhiNDgwZmIwNWM5Zjgz
OGJiYzZkOTEzZjgyYjIyYjE4YTI0NDZjNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmI2OQXYgdBebQpriLqXIsBQOSvpPg5+jbJEcItmaEx8d/wND
6Trjp4ZXc3UpGRuxWsSvhvROZxOBhopXc2E+0GQFuu5E3kb+CigOgnow5Ddtx/f6
y7ySwv/dRd4KamWfuas+LtGrTm/0NrRd0EcIJrg7lgyEY+RTjd/xKc+hfXQ7nv2/
siSMSQfN3vnokaM3L3L9Qll1IB6HpP0uoo+/p4sYOb8AlEtuNK/U2kcQS6Cjpjk1
DAe8ajC36iTRmdifQcOmGj8CtJJyJbZOpXiDEj6P9TE7EqeeLSPXKkIEKP2FYcQ2
4GUE87IbK/OrtP7eUa6QmEZc5WW6gkOVofssGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIEGYbOZWkyitkWIkwzhpcODDEE9MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2I0ODBmYjA1YzlmODM4YmJjNmQ5MTNmODJiMjJiMThhMjQ0NmM0NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAHXVOYt/wTf+MRa+u
ub/lp1LYAKSm7V/rUW5dXfhV6ipX3xiY282/RFJlv6PemUTTCm+dS0YPyiKzlTHq
ugqp4oYE5aUGydJCY01CaOUQPcJpf7UEXNIzqXbA5eRXchLJw5Q5ZkkRZlvj4Gv1
DvtFK+z2JZEF9EousbQNvUoxmcNfFjy1WiTLA11KhgbfM/sYo9qEOhBy6M3Pd9Q9
gDphlGFgb2GIoWmbuVRRtn+/DJtEa5880SSgrC4cKD9gpTpsM9CB/AHntd7AlfHI
m6/4z2BrElJwWhG00mojNL+h/hZ2FFbBlhy/Mfej7mg9gBU8saJ2G/18ianEHBLd
ob0PCg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org