Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2212948531683b8b907729c4e82622fa21907ea.roa
File:                     e2212948531683b8b907729c4e82622fa21907ea.roa (raw, json)
Hash identifier:          Ofe0mj2NoyVbbnu/4Knp25t3rnS4Aq7q2/+HcMlQ2NY=
Subject key identifier:   8D:AD:A2:18:7E:8D:6E:E8:CC:0A:9C:3E:C0:B1:55:1A:19:A5:43:80
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       06991E
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2212948531683b8b907729c4e82622fa21907ea.roa
Signing time:             Thu 16 Jun 2022 00:21:25 +0000
ROA not before:           Thu 16 Jun 2022 03:00:00 +0000
ROA not after:            Fri 16 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432414 (0x6991e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Jun 16 03:00:00 2022 GMT
            Not After : Jun 16 03:00:00 2023 GMT
        Subject: CN=e2212948531683b8b907729c4e82622fa21907ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:4a:41:a6:b3:b0:1c:35:05:5c:78:a3:86:
                    11:22:9d:b4:8b:8a:f5:5b:12:dc:b9:39:2a:38:c6:
                    de:df:1b:6b:a0:de:d9:fa:b0:1f:95:2e:c9:c6:cb:
                    23:e6:3b:7a:59:08:54:5a:c9:15:cb:f0:dc:29:af:
                    d6:d9:f4:d1:4b:90:e1:b9:46:69:d1:39:78:a5:6d:
                    c8:1e:b3:29:ae:aa:ad:47:73:5f:e5:e1:b7:80:e4:
                    e1:39:a3:0a:c8:a7:70:b4:c3:de:e6:56:f6:2a:4e:
                    83:93:d2:f9:d9:f7:f7:c4:bb:62:0e:d5:08:9b:b2:
                    ab:aa:1d:e8:fd:44:35:49:3f:f1:0b:13:bf:26:25:
                    89:e6:a3:da:72:72:f9:9a:96:63:be:0f:01:fa:ea:
                    bc:23:d1:93:64:86:4a:33:35:ac:bd:ac:92:f3:83:
                    93:bb:98:80:b8:0a:cd:37:e8:28:af:57:86:49:ff:
                    01:74:0c:a3:7c:39:38:27:12:28:d7:ca:10:86:74:
                    03:78:7f:ce:33:5f:b8:c5:72:d4:b8:05:4c:a0:fe:
                    42:60:8b:37:26:43:87:0e:cc:0c:0a:00:ec:4c:4f:
                    00:98:66:da:aa:ee:71:9e:84:2b:b7:24:24:d8:b8:
                    c6:b2:d6:09:19:f5:32:9b:3c:6e:39:5c:c4:d1:a9:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:A2:18:7E:8D:6E:E8:CC:0A:9C:3E:C0:B1:55:1A:19:A5:43:80
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/e2212948531683b8b907729c4e82622fa21907ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:96:e3:10:b1:3f:84:13:6b:a0:10:3b:09:c0:e0:7a:4c:8c:
         db:3c:a2:96:56:6f:cd:dc:f6:30:de:92:d0:75:92:7c:3e:71:
         06:b7:1b:c8:9b:51:90:8d:28:51:91:cb:90:8d:17:12:30:3a:
         9a:bf:3b:44:da:45:e2:eb:5d:4f:96:9e:ca:ef:a6:63:13:51:
         64:e0:96:0b:65:88:7b:9f:44:be:45:69:5c:63:e2:82:ad:56:
         d7:51:7d:6e:a1:4d:7f:15:af:d4:f7:f8:39:c8:56:21:d3:8e:
         00:ea:92:2c:90:36:87:80:aa:4a:6b:ff:7b:36:13:96:c1:3e:
         8e:2c:6e:89:9d:b5:2e:7a:6c:15:18:4a:c8:9a:f2:68:2c:87:
         26:da:6a:47:8b:7d:b1:1e:9a:8a:0e:78:d7:78:02:ed:ce:ab:
         d5:a7:2e:5f:a5:e1:b2:ff:16:11:60:c4:61:2a:84:27:73:4a:
         f7:42:ea:ee:3c:69:84:f2:71:77:c1:f3:ba:6e:2f:48:d0:f2:
         67:96:04:83:ad:c7:30:3c:e8:b8:d2:07:d4:b9:6e:b7:0d:59:
         4c:04:33:62:15:82:d9:04:14:e4:56:0c:2a:0b:30:4a:5a:84:
         e3:8d:f3:a2:a6:a5:61:b5:ca:93:68:06:a5:db:83:d1:1c:bc:
         05:69:02:30
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBpkeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNjE2
MDMwMDAwWhcNMjMwNjE2MDMwMDAwWjAzMTEwLwYDVQQDEyhlMjIxMjk0ODUzMTY4
M2I4YjkwNzcyOWM0ZTgyNjIyZmEyMTkwN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAghZKQaazsBw1BVx4o4YRIp20i4r1WxLcuTkqOMbe3xtroN7Z
+rAflS7Jxssj5jt6WQhUWskVy/DcKa/W2fTRS5DhuUZp0Tl4pW3IHrMprqqtR3Nf
5eG3gOThOaMKyKdwtMPe5lb2Kk6Dk9L52ff3xLtiDtUIm7Krqh3o/UQ1ST/xCxO/
JiWJ5qPacnL5mpZjvg8B+uq8I9GTZIZKMzWsvayS84OTu5iAuArNN+gor1eGSf8B
dAyjfDk4JxIo18oQhnQDeH/OM1+4xXLUuAVMoP5CYIs3JkOHDswMCgDsTE8AmGba
qu5xnoQrtyQk2LjGstYJGfUymzxuOVzE0am0nQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI2tohh+jW7ozAqcPsCxVRoZpUOAMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2UyMjEyOTQ4NTMxNjgzYjhiOTA3NzI5YzRlODI2MjJmYTIxOTA3ZWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAV5bjELE/hBNroBA7
CcDgekyM2zyillZvzdz2MN6S0HWSfD5xBrcbyJtRkI0oUZHLkI0XEjA6mr87RNpF
4utdT5aeyu+mYxNRZOCWC2WIe59EvkVpXGPigq1W11F9bqFNfxWv1Pf4OchWIdOO
AOqSLJA2h4CqSmv/ezYTlsE+jixuiZ21LnpsFRhKyJryaCyHJtpqR4t9sR6aig54
13gC7c6r1acuX6Xhsv8WEWDEYSqEJ3NK90Lq7jxphPJxd8Hzum4vSNDyZ5YEg63H
MDzouNIH1Llutw1ZTAQzYhWC2QQU5FYMKgswSlqE443zoqalYbXKk2gGpduD0Ry8
BWkCMA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-fra.rpki-client.org