Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1504be9aae3e731a1810550913b969459caca44.roa
File:                     e1504be9aae3e731a1810550913b969459caca44.roa (raw, json)
Hash identifier:          jLW4IUtLjr0t8IHfxX9CPpwkwW7eq7uoyvdU8rqnCLs=
Subject key identifier:   94:5C:C0:9E:CF:1D:9E:A9:48:9F:F5:BE:15:A7:2F:D1:39:F7:0F:E9
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       05018E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1504be9aae3e731a1810550913b969459caca44.roa
Signing time:             Sat 14 May 2022 03:27:31 +0000
ROA not before:           Sat 14 May 2022 03:00:00 +0000
ROA not after:            Sun 14 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328078 (0x5018e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: May 14 03:00:00 2022 GMT
            Not After : May 14 03:00:00 2023 GMT
        Subject: CN=e1504be9aae3e731a1810550913b969459caca44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:bb:80:1d:e7:b9:f9:51:2e:9c:10:fb:e5:
                    f4:e7:dc:22:be:11:e4:38:fa:26:31:90:29:e2:5e:
                    d2:3a:cc:07:a0:6c:ef:c3:87:7c:74:7a:7f:10:70:
                    47:80:34:03:07:1a:38:66:2f:f2:ee:51:11:43:25:
                    6e:4c:07:bb:16:9f:71:4a:fa:47:f2:fa:a1:2a:b9:
                    7c:c7:b5:07:06:9b:ee:ee:f7:23:e2:b5:f5:f3:2c:
                    93:aa:ac:5b:bc:9a:8c:89:41:16:56:70:c2:be:de:
                    e8:e6:b6:3e:95:cc:f3:c2:06:cb:3c:93:b8:07:98:
                    56:b3:01:b6:a6:c3:c6:d3:1a:dc:b3:8f:7c:cf:20:
                    be:3f:77:7a:82:52:0f:96:ce:5b:f9:20:c3:9b:bb:
                    03:96:91:47:70:1e:7b:44:5d:69:1e:58:c1:92:c6:
                    a5:2a:a5:b3:6b:1a:f4:55:f4:08:d9:a7:d4:de:75:
                    88:15:dc:11:71:ad:d6:e5:d8:da:7b:de:eb:cb:4a:
                    e4:c9:47:79:63:35:6d:f1:38:1d:8b:17:06:c9:b6:
                    ea:a4:03:86:dc:bf:8c:36:b2:4a:bc:e3:91:13:fa:
                    a6:3b:9d:82:dc:66:87:8c:e8:34:80:57:c0:6f:8a:
                    d3:6e:5a:3e:57:f8:91:4b:77:a4:db:62:77:32:45:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5C:C0:9E:CF:1D:9E:A9:48:9F:F5:BE:15:A7:2F:D1:39:F7:0F:E9
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e1504be9aae3e731a1810550913b969459caca44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:59:0a:11:1c:74:81:7f:78:a9:0d:a4:67:35:c8:09:a7:fb:
         95:3f:7b:9f:ff:62:76:70:93:dc:08:8b:2e:f6:a8:c7:11:a0:
         3c:00:49:56:4b:c4:05:92:bc:31:8c:a1:c1:81:a0:7c:bb:9f:
         eb:e3:c9:0d:3d:2e:e4:b2:f2:23:6b:05:0d:24:02:81:1a:ba:
         86:08:46:59:7d:1e:b1:df:b8:b1:82:fa:31:ec:e8:f0:ac:c2:
         ed:7f:44:a4:dc:2a:df:5f:e1:15:68:e3:f4:3a:c7:c8:5a:c2:
         1c:9f:b3:e7:24:bd:a2:ab:ce:bc:46:c8:80:29:7e:d3:21:d4:
         6c:bb:db:11:6b:34:95:87:d4:08:52:c5:be:6a:ce:5a:28:97:
         e9:4f:99:77:44:eb:56:53:e9:f7:cd:80:52:12:97:93:63:07:
         3a:b4:b7:a8:e9:50:e5:b5:b8:b2:34:ff:f5:5d:7d:b3:e5:90:
         1f:5c:70:62:13:08:41:57:72:12:d3:94:06:ba:22:4d:61:35:
         93:f1:c5:2e:21:bd:a0:3f:94:49:39:0d:1d:90:84:a4:01:f6:
         4e:be:72:ce:35:47:c0:be:fb:5c:64:ce:48:f8:ff:11:9f:9c:
         28:06:49:f2:a3:eb:d8:be:cd:16:0d:f7:1c:d7:16:89:fd:e3:
         c8:ab:c5:b3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBQGOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNTE0
MDMwMDAwWhcNMjMwNTE0MDMwMDAwWjAzMTEwLwYDVQQDEyhlMTUwNGJlOWFhZTNl
NzMxYTE4MTA1NTA5MTNiOTY5NDU5Y2FjYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg7+7gB3nuflRLpwQ++X059wivhHkOPomMZAp4l7SOswHoGzv
w4d8dHp/EHBHgDQDBxo4Zi/y7lERQyVuTAe7Fp9xSvpH8vqhKrl8x7UHBpvu7vcj
4rX18yyTqqxbvJqMiUEWVnDCvt7o5rY+lczzwgbLPJO4B5hWswG2psPG0xrcs498
zyC+P3d6glIPls5b+SDDm7sDlpFHcB57RF1pHljBksalKqWzaxr0VfQI2afU3nWI
FdwRca3W5djae97ry0rkyUd5YzVt8TgdixcGybbqpAOG3L+MNrJKvOORE/qmO52C
3GaHjOg0gFfAb4rTblo+V/iRS3ek22J3MkVooQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJRcwJ7PHZ6pSJ/1vhWnL9E59w/pMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2UxNTA0YmU5YWFlM2U3MzFhMTgxMDU1MDkxM2I5Njk0NTljYWNhNDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAmlkKERx0gX94qQ2k
ZzXICaf7lT97n/9idnCT3AiLLvaoxxGgPABJVkvEBZK8MYyhwYGgfLuf6+PJDT0u
5LLyI2sFDSQCgRq6hghGWX0esd+4sYL6Mezo8KzC7X9EpNwq31/hFWjj9DrHyFrC
HJ+z5yS9oqvOvEbIgCl+0yHUbLvbEWs0lYfUCFLFvmrOWiiX6U+Zd0TrVlPp982A
UhKXk2MHOrS3qOlQ5bW4sjT/9V19s+WQH1xwYhMIQVdyEtOUBroiTWE1k/HFLiG9
oD+USTkNHZCEpAH2Tr5yzjVHwL77XGTOSPj/EZ+cKAZJ8qPr2L7NFg33HNcWif3j
yKvFsw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org