Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8fe26fecf125f3b035eb25a4db1f6e0f8efbc52.roa
File:                     c8fe26fecf125f3b035eb25a4db1f6e0f8efbc52.roa (raw, json)
Hash identifier:          NsFHruBOC1YmUJvHl1AtR/wA8Wco0c5wzjZIUy83dWY=
Subject key identifier:   3A:EF:C3:F8:28:09:E6:87:D1:F5:C0:8C:12:A1:0D:E2:5A:A2:EB:0C
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       BEF1
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8fe26fecf125f3b035eb25a4db1f6e0f8efbc52.roa
Signing time:             Sun 06 Feb 2022 05:22:17 +0000
ROA not before:           Sun 06 Feb 2022 03:00:00 +0000
ROA not after:            Mon 06 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48881 (0xbef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  6 03:00:00 2022 GMT
            Not After : Feb  6 03:00:00 2023 GMT
        Subject: CN=c8fe26fecf125f3b035eb25a4db1f6e0f8efbc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:76:37:9d:c3:a7:fe:a3:50:82:59:b9:e1:18:
                    cb:3e:39:93:d5:7a:8a:8b:bf:dd:df:2c:0e:95:96:
                    ef:70:98:39:e5:01:aa:92:21:42:f6:3a:6c:3c:be:
                    cd:ec:82:19:17:25:61:a3:ce:6f:39:23:f5:a4:bf:
                    53:9e:64:0a:7a:e3:8d:6c:63:d3:ae:f7:fd:39:67:
                    cf:69:3c:3b:aa:34:f9:2d:41:5b:01:3d:88:51:0e:
                    43:c3:d9:65:9c:a9:a2:e8:f8:11:4e:7e:72:87:07:
                    40:98:f8:5e:11:67:b0:e0:a7:f2:41:3e:36:de:24:
                    e6:bd:7b:30:27:2d:41:de:70:7c:3e:a3:6a:08:71:
                    4e:95:ae:0b:d8:6d:6b:33:8c:37:1c:89:8f:81:71:
                    55:0f:da:13:f9:9c:ae:39:67:1a:ba:41:43:3d:1a:
                    c7:7a:a3:a2:7a:fc:8c:76:99:92:48:59:cd:7a:43:
                    b1:c3:47:03:14:d9:5a:16:fe:2b:1f:43:ab:b5:02:
                    49:f5:36:84:a2:d1:ac:40:c5:03:9d:b9:7d:b9:b6:
                    a5:85:44:9d:3f:b5:47:58:ea:75:62:aa:07:51:0b:
                    b1:f2:2d:1e:25:ef:b2:bd:36:e2:58:e6:38:72:09:
                    1d:25:73:66:02:5a:78:0f:4f:a1:ee:7d:09:a5:c4:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:C3:F8:28:09:E6:87:D1:F5:C0:8C:12:A1:0D:E2:5A:A2:EB:0C
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c8fe26fecf125f3b035eb25a4db1f6e0f8efbc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b8:55:7d:d6:59:1a:55:38:eb:50:b0:d8:ea:1b:d9:00:85:
         5d:d9:b6:2b:2a:0d:6c:f2:9c:8f:80:05:b8:b6:d1:09:8d:28:
         fb:83:de:d0:b7:97:7a:7a:b7:4b:a2:18:93:c9:d5:2c:2a:16:
         6a:62:07:9c:03:f7:ac:cd:bb:98:19:3a:35:7a:d2:eb:6d:06:
         00:e0:a3:b3:48:6d:d9:c9:40:eb:ca:b5:e5:d5:11:d6:8d:63:
         0f:e2:01:fb:c9:69:3a:1b:54:ed:dd:83:ab:3d:df:e2:48:11:
         21:b7:04:48:18:de:f0:7b:8f:fd:70:95:73:2e:6a:73:de:99:
         29:3f:95:f8:58:59:57:ab:a3:b8:d3:94:d1:08:9c:93:de:2d:
         5e:2b:be:39:ea:02:a9:ff:f3:9e:2c:c8:0b:94:4d:83:ff:2c:
         8e:0a:1a:25:e7:68:b7:9f:a2:04:88:93:ff:93:bf:88:06:0e:
         d7:01:64:47:04:bf:cd:95:e1:ab:34:6a:f1:35:0e:74:2d:cd:
         84:d2:c4:07:60:0d:3b:03:a8:20:71:35:6a:8f:2b:5b:e8:84:
         93:a3:43:69:27:30:b7:c3:40:46:2d:ac:fd:81:f2:b2:63:66:
         a9:be:27:9a:9c:9e:8d:35:5c:cb:d1:f8:e3:a1:fd:89:86:42:
         24:cb:16:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAL7xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjA2
MDMwMDAwWhcNMjMwMjA2MDMwMDAwWjAzMTEwLwYDVQQDEyhjOGZlMjZmZWNmMTI1
ZjNiMDM1ZWIyNWE0ZGIxZjZlMGY4ZWZiYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgHY3ncOn/qNQglm54RjLPjmT1XqKi7/d3ywOlZbvcJg55QGq
kiFC9jpsPL7N7IIZFyVho85vOSP1pL9TnmQKeuONbGPTrvf9OWfPaTw7qjT5LUFb
AT2IUQ5Dw9llnKmi6PgRTn5yhwdAmPheEWew4KfyQT423iTmvXswJy1B3nB8PqNq
CHFOla4L2G1rM4w3HImPgXFVD9oT+ZyuOWcaukFDPRrHeqOievyMdpmSSFnNekOx
w0cDFNlaFv4rH0OrtQJJ9TaEotGsQMUDnbl9ubalhUSdP7VHWOp1YqoHUQux8i0e
Je+yvTbiWOY4cgkdJXNmAlp4D0+h7n0JpcS6yQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDrvw/goCeaH0fXAjBKhDeJaousMMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2M4ZmUyNmZlY2YxMjVmM2IwMzVlYjI1YTRkYjFmNmUwZjhlZmJjNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAFbhVfdZZGlU461Cw
2Oob2QCFXdm2KyoNbPKcj4AFuLbRCY0o+4Pe0LeXenq3S6IYk8nVLCoWamIHnAP3
rM27mBk6NXrS620GAOCjs0ht2clA68q15dUR1o1jD+IB+8lpOhtU7d2Dqz3f4kgR
IbcESBje8HuP/XCVcy5qc96ZKT+V+FhZV6ujuNOU0Qick94tXiu+OeoCqf/znizI
C5RNg/8sjgoaJedot5+iBIiT/5O/iAYO1wFkRwS/zZXhqzRq8TUOdC3NhNLEB2AN
OwOoIHE1ao8rW+iEk6NDaScwt8NARi2s/YHysmNmqb4nmpyejTVcy9H446H9iYZC
JMsWwA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org