Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa
File:                     cd84e34e9fda4c3382337e0625df1bdb44926833.roa (raw, json)
Hash identifier:          k33BCqJ6guaW+SDzjL0sYw/HJ/Y1F6KbV7UzVRSjM14=
Subject key identifier:   95:58:49:E9:D7:0A:DC:BE:7C:2E:89:84:F4:CC:FD:B1:E0:97:61:9D
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       0CEE28
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa
Signing time:             Mon 31 Oct 2022 04:14:32 +0000
ROA not before:           Sun 30 Oct 2022 03:00:00 +0000
ROA not after:            Tue 31 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847400 (0xcee28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Oct 30 03:00:00 2022 GMT
            Not After : Oct 31 03:00:00 2023 GMT
        Subject: CN=cd84e34e9fda4c3382337e0625df1bdb44926833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:74:25:b3:77:79:e6:8e:61:5e:4b:38:cc:
                    b6:10:ac:b5:b8:d1:9c:11:48:7a:64:0e:15:60:7b:
                    93:db:49:0f:63:28:bd:4e:0a:78:54:95:ef:eb:9b:
                    d6:7e:8f:7f:44:c0:d5:a3:68:a1:57:83:81:df:8c:
                    38:6b:95:8d:45:34:f3:49:19:8b:ca:db:2d:42:95:
                    8d:92:4f:81:4e:c5:5b:8d:cb:81:a5:ff:a8:22:58:
                    b2:fc:6b:f6:e3:c1:c8:2a:5c:e7:ab:dc:e9:b2:4d:
                    f5:01:db:87:25:5b:f6:91:0f:64:79:50:22:1b:ff:
                    56:db:c2:16:3b:3d:76:23:a6:d5:a3:91:61:40:e4:
                    a5:cd:3c:99:dd:b5:22:78:b1:4f:07:c5:76:fc:70:
                    62:dc:fb:7a:56:f1:1f:ec:31:d4:44:27:8f:26:4f:
                    be:d7:f7:bd:1b:87:f2:b5:32:49:39:3d:d5:89:6b:
                    d1:07:5c:01:09:d8:fd:01:a0:07:1c:5d:77:25:7e:
                    52:ff:dc:75:d3:ad:95:9c:d5:ed:b6:c0:4a:a1:69:
                    4a:0b:cf:b7:de:6d:83:01:4f:b9:d5:21:f0:b8:fc:
                    03:05:43:4d:e4:a7:0d:f0:89:af:9b:73:56:12:fa:
                    51:32:31:e3:d6:d4:a0:7e:b6:a1:06:4b:de:7c:db:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:49:E9:D7:0A:DC:BE:7C:2E:89:84:F4:CC:FD:B1:E0:97:61:9D
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/cd84e34e9fda4c3382337e0625df1bdb44926833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:92:b5:1c:0c:d0:c1:3e:98:fe:38:82:ae:2f:5b:00:eb:37:
         6f:2b:07:a7:19:51:21:95:3f:57:9d:fb:75:30:56:c9:02:5a:
         bd:15:08:cf:77:9e:e9:01:f2:3a:a6:6d:5c:59:71:95:c9:09:
         7a:43:5f:72:90:65:98:31:c9:9f:f4:e5:06:85:45:8c:41:40:
         9a:90:c5:91:e3:a6:9c:b5:2a:ab:5b:07:c4:70:22:62:72:87:
         2b:3b:05:e1:6a:fc:5b:59:d7:15:cb:8d:7f:d7:c6:18:cb:6f:
         e0:2b:52:39:88:55:a4:d6:d9:ad:89:6f:ef:4c:17:e9:0b:90:
         34:a6:3a:3b:66:53:c5:1a:00:fa:92:b3:96:d3:f7:94:ef:6c:
         49:26:23:5d:6b:6f:5d:59:e8:fc:dd:5f:1d:71:ee:27:d4:5f:
         8c:bf:30:01:f7:ad:e1:4f:a1:f1:d1:89:be:b7:4b:cd:15:a4:
         23:84:2e:bb:50:05:ff:12:b4:71:21:b0:07:ba:76:5a:02:2a:
         c7:07:e3:06:23:16:e5:56:02:36:2a:9b:36:b2:7e:69:6a:bd:
         e6:cf:f8:7a:01:f4:de:25:9b:05:5e:d1:fd:e7:f7:4e:4f:c0:
         f5:0f:22:39:3c:31:3e:ee:ab:9b:b9:d5:a8:7c:9e:6b:2d:55:
         46:3c:c1:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDO4oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIxMDMw
MDMwMDAwWhcNMjMxMDMxMDMwMDAwWjAzMTEwLwYDVQQDEyhjZDg0ZTM0ZTlmZGE0
YzMzODIzMzdlMDYyNWRmMWJkYjQ0OTI2ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAreB0JbN3eeaOYV5LOMy2EKy1uNGcEUh6ZA4VYHuT20kPYyi9
Tgp4VJXv65vWfo9/RMDVo2ihV4OB34w4a5WNRTTzSRmLytstQpWNkk+BTsVbjcuB
pf+oIliy/Gv248HIKlznq9zpsk31AduHJVv2kQ9keVAiG/9W28IWOz12I6bVo5Fh
QOSlzTyZ3bUieLFPB8V2/HBi3Pt6VvEf7DHURCePJk++1/e9G4fytTJJOT3ViWvR
B1wBCdj9AaAHHF13JX5S/9x1062VnNXttsBKoWlKC8+33m2DAU+51SHwuPwDBUNN
5KcN8Imvm3NWEvpRMjHj1tSgfrahBkvefNuG5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJVYSenXCty+fC6JhPTM/bHgl2GdMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2NkODRlMzRlOWZkYTRjMzM4MjMzN2UwNjI1ZGYxYmRiNDQ5MjY4MzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAU5K1HAzQwT6Y/jiC
ri9bAOs3bysHpxlRIZU/V537dTBWyQJavRUIz3ee6QHyOqZtXFlxlckJekNfcpBl
mDHJn/TlBoVFjEFAmpDFkeOmnLUqq1sHxHAiYnKHKzsF4Wr8W1nXFcuNf9fGGMtv
4CtSOYhVpNbZrYlv70wX6QuQNKY6O2ZTxRoA+pKzltP3lO9sSSYjXWtvXVno/N1f
HXHuJ9RfjL8wAfet4U+h8dGJvrdLzRWkI4Quu1AF/xK0cSGwB7p2WgIqxwfjBiMW
5VYCNiqbNrJ+aWq95s/4egH03iWbBV7R/ef3Tk/A9Q8iOTwxPu6rm7nVqHyeay1V
RjzBoQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org