Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa
File:                     f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa (raw, json)
Hash identifier:          Phsr9Pf1B6RiYXy/4JzWyvSydrxXuyz0q0Z6RHUv1Hk=
Subject key identifier:   2F:1B:65:56:52:61:CB:61:D0:AE:9B:94:93:3B:35:8C:44:DE:17:B7
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       041A72
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa
Signing time:             Fri 22 Apr 2022 09:25:24 +0000
ROA not before:           Fri 22 Apr 2022 03:00:00 +0000
ROA not after:            Sat 22 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268914 (0x41a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Apr 22 03:00:00 2022 GMT
            Not After : Apr 22 03:00:00 2023 GMT
        Subject: CN=f0311f42743fb0e2668d52468d59b0aaf5aac11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:b2:59:04:d3:95:d5:51:89:7d:68:81:68:
                    b2:fb:4d:5f:52:39:a7:6e:d5:48:da:2e:70:e2:53:
                    38:61:a4:b1:be:ff:46:64:d1:38:aa:28:53:4c:9b:
                    3c:84:66:a7:d4:9a:cf:d3:62:82:30:28:ac:e6:71:
                    e3:bf:92:9b:8e:94:21:bd:d1:3c:97:a0:86:98:51:
                    6d:5d:c0:fd:9e:73:9d:b4:35:25:c3:fc:9a:2a:b9:
                    77:4c:00:bc:24:34:65:15:31:18:4c:1b:08:0d:8c:
                    93:ed:94:8e:98:1d:e0:63:89:d6:c1:6f:57:25:5e:
                    12:05:82:70:e3:6a:28:28:c0:2e:3c:f1:b6:4a:a3:
                    50:ef:40:58:ec:21:ba:f6:5d:f0:c4:81:f8:13:4d:
                    06:55:c8:ad:d8:9f:b8:19:1f:f0:9d:d6:26:d2:13:
                    be:cb:b0:91:a8:a6:cb:1d:df:50:c5:e7:8a:df:5d:
                    ad:15:de:21:c0:32:65:08:47:c9:0e:07:92:42:71:
                    0d:75:10:33:51:f6:34:7e:b5:e4:2c:26:1d:88:5d:
                    5c:97:b4:d2:ad:69:96:ab:23:77:b5:0f:d4:65:d3:
                    7a:44:85:20:fd:0b:35:94:bc:6c:d8:af:af:3c:57:
                    4b:71:c5:62:de:a2:2c:60:dd:09:61:91:72:98:de:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:65:56:52:61:CB:61:D0:AE:9B:94:93:3B:35:8C:44:DE:17:B7
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/f0311f42743fb0e2668d52468d59b0aaf5aac11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:83:c9:b8:a0:64:40:eb:34:2b:0e:d8:67:3c:11:34:f6:
         9e:91:82:a1:58:24:1d:5c:74:38:a9:90:70:12:2b:bf:43:28:
         45:f0:4e:7b:b4:64:2d:da:aa:76:9b:10:55:90:9f:c6:02:a8:
         45:ce:fa:81:ac:62:69:85:93:0f:cc:fb:45:41:7e:86:d2:33:
         69:d1:96:67:0f:ec:34:cc:20:32:c5:9d:61:aa:22:ec:67:81:
         6f:07:ae:78:37:a8:60:05:5b:4d:03:7c:d8:71:5e:10:ea:b8:
         db:a1:3c:19:85:c6:8f:a6:9c:54:23:53:17:f5:04:a3:a7:cb:
         1d:cb:73:9d:65:ce:87:55:ad:cf:9d:e6:56:98:a8:a9:0b:3a:
         2f:04:cc:b7:a6:c7:a0:46:af:ba:cc:40:1c:a3:9a:4f:ee:2a:
         9b:cb:3b:d1:14:75:e4:12:aa:71:30:89:e4:ca:73:6f:ff:98:
         7d:8d:6c:87:c2:cb:9c:87:74:a0:12:db:77:16:42:78:b9:cb:
         dd:81:68:83:6c:e2:2f:de:4c:ed:00:66:c2:3d:8f:c9:9c:b0:
         86:36:29:56:48:ac:93:be:97:97:d0:9c:a1:e8:b4:d5:bd:ec:
         04:40:db:47:32:db:94:e8:cf:2f:ef:03:d4:b4:81:4a:91:75:
         f0:68:b9:3b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBBpyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwNDIy
MDMwMDAwWhcNMjMwNDIyMDMwMDAwWjAzMTEwLwYDVQQDEyhmMDMxMWY0Mjc0M2Zi
MGUyNjY4ZDUyNDY4ZDU5YjBhYWY1YWFjMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsXCyWQTTldVRiX1ogWiy+01fUjmnbtVI2i5w4lM4YaSxvv9G
ZNE4qihTTJs8hGan1JrP02KCMCis5nHjv5KbjpQhvdE8l6CGmFFtXcD9nnOdtDUl
w/yaKrl3TAC8JDRlFTEYTBsIDYyT7ZSOmB3gY4nWwW9XJV4SBYJw42ooKMAuPPG2
SqNQ70BY7CG69l3wxIH4E00GVcit2J+4GR/wndYm0hO+y7CRqKbLHd9QxeeK312t
Fd4hwDJlCEfJDgeSQnENdRAzUfY0frXkLCYdiF1cl7TSrWmWqyN3tQ/UZdN6RIUg
/Qs1lLxs2K+vPFdLccVi3qIsYN0JYZFymN49cwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC8bZVZSYcth0K6blJM7NYxE3he3MB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2YwMzExZjQyNzQzZmIwZTI2NjhkNTI0NjhkNTliMGFhZjVhYWMxMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAM16DybigZEDrNCsO
2Gc8ETT2npGCoVgkHVx0OKmQcBIrv0MoRfBOe7RkLdqqdpsQVZCfxgKoRc76gaxi
aYWTD8z7RUF+htIzadGWZw/sNMwgMsWdYaoi7GeBbweueDeoYAVbTQN82HFeEOq4
26E8GYXGj6acVCNTF/UEo6fLHctznWXOh1Wtz53mVpioqQs6LwTMt6bHoEavusxA
HKOaT+4qm8s70RR15BKqcTCJ5Mpzb/+YfY1sh8LLnId0oBLbdxZCeLnL3YFog2zi
L95M7QBmwj2PyZywhjYpVkisk76Xl9Ccoei01b3sBEDbRzLblOjPL+8D1LSBSpF1
8Gi5Ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org