Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa
File:                     fed39bf16f8372847727378979c1c02557cf59ba.roa (raw, json)
Hash identifier:          mDvbRCYntj5VOi37dnXRytPjmyOKbXH6pBq4iEV2PMU=
Subject key identifier:   1C:EB:7C:8A:4E:C7:67:19:FA:72:CC:61:AE:7F:AD:D0:8E:90:DC:11
Certificate issuer:       /CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
Certificate serial:       90BA
Authority key identifier: 84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa
Signing time:             Wed 02 Feb 2022 00:28:58 +0000
ROA not before:           Wed 02 Feb 2022 03:00:00 +0000
ROA not after:            Thu 02 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        201.219.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37050 (0x90ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Validity
            Not Before: Feb  2 03:00:00 2022 GMT
            Not After : Feb  2 03:00:00 2023 GMT
        Subject: CN=fed39bf16f8372847727378979c1c02557cf59ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:9b:ac:22:ca:bd:bf:19:10:ef:c9:97:c7:
                    29:40:5b:33:3b:35:29:fd:27:8e:b3:34:58:36:a0:
                    1b:83:f7:de:22:0d:9f:19:61:6a:ab:3f:a1:88:a8:
                    ca:a1:a9:c5:5d:dd:b1:26:72:b6:32:15:21:24:3f:
                    73:82:25:7d:8f:9b:e7:9d:5e:e1:64:d3:5e:69:c8:
                    49:e4:22:c8:37:23:88:dc:05:b0:86:bb:47:9f:12:
                    ab:c3:c6:e0:f9:0c:07:76:66:23:62:cd:b5:da:a6:
                    b1:1a:74:55:56:11:01:73:bd:3f:cf:e8:38:0f:94:
                    4a:13:7c:ed:bb:ab:21:a2:ab:5f:85:47:ba:2b:f3:
                    05:37:81:98:08:a3:a9:5a:d3:b3:01:15:25:d2:41:
                    a2:4d:7e:f3:b7:c9:05:ad:4e:40:e1:b8:eb:bd:1b:
                    04:02:85:f3:be:61:d6:f4:37:2f:14:22:a3:21:f9:
                    a6:b5:1c:18:c6:27:34:4c:73:f1:b4:3b:f5:06:40:
                    80:e5:82:19:5a:20:60:f9:da:49:a5:fe:6a:7d:9c:
                    a7:fa:a8:d4:b4:06:44:27:c3:fa:f5:71:cd:71:8b:
                    9f:a2:ba:6e:f5:3a:41:eb:88:8b:04:4e:b0:c8:83:
                    55:63:41:55:00:ae:a2:ed:26:3c:6b:0f:5d:d9:6e:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:7C:8A:4E:C7:67:19:FA:72:CC:61:AE:7F:AD:D0:8E:90:DC:11
            X509v3 Authority Key Identifier:
                keyid:84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/fed39bf16f8372847727378979c1c02557cf59ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:d4:d7:04:bd:21:9b:3e:22:e9:ab:fb:cb:73:0f:c1:1f:
         bd:80:56:4b:89:52:d4:1e:f0:1f:fe:16:dc:3a:64:e9:29:09:
         7e:da:68:6c:d5:ac:d3:d1:6a:6b:88:94:b9:2c:e5:6b:2d:96:
         c7:5a:3d:80:21:76:20:9f:cd:c6:24:2b:f2:69:50:aa:e7:f6:
         8d:10:d3:95:34:16:d9:66:01:0f:ba:28:ca:b4:3c:98:57:5b:
         7e:97:51:42:a1:a7:7c:a9:a0:74:ba:bd:1c:fe:5e:c0:14:b5:
         32:5f:a6:fe:7e:8e:87:b5:49:c5:d3:c8:be:31:97:0e:2a:05:
         9b:38:66:88:de:e1:38:16:79:25:b6:81:8b:45:d8:39:58:93:
         d5:83:f4:86:4e:a7:65:91:c5:98:67:c3:1f:cd:a2:c6:59:e3:
         43:72:ec:9b:74:ca:b0:21:53:95:a2:94:20:5f:1e:b6:d9:65:
         19:84:aa:a7:45:d5:2c:7b:73:71:4a:da:08:30:46:a6:b0:5e:
         36:8f:b3:9c:54:16:3b:bb:2e:d0:08:3b:1c:61:d7:a8:b9:f4:
         49:fb:f0:b0:bc:e6:87:0b:d1:6e:3a:b2:4d:1c:2b:b3:29:55:
         09:68:21:58:42:5e:78:a0:b7:48:52:74:07:17:e1:fa:96:bb:
         86:45:c8:13
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAJC6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDlmMDFkN2Y1N2ZhMmMyZmVmMzk0ZDAwZmU5YmMyYTBkODk5YWIwHhcNMjIwMjAy
MDMwMDAwWhcNMjMwMjAyMDMwMDAwWjAzMTEwLwYDVQQDEyhmZWQzOWJmMTZmODM3
Mjg0NzcyNzM3ODk3OWMxYzAyNTU3Y2Y1OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkQybrCLKvb8ZEO/Jl8cpQFszOzUp/SeOszRYNqAbg/feIg2f
GWFqqz+hiKjKoanFXd2xJnK2MhUhJD9zgiV9j5vnnV7hZNNeachJ5CLINyOI3AWw
hrtHnxKrw8bg+QwHdmYjYs212qaxGnRVVhEBc70/z+g4D5RKE3ztu6shoqtfhUe6
K/MFN4GYCKOpWtOzARUl0kGiTX7zt8kFrU5A4bjrvRsEAoXzvmHW9DcvFCKjIfmm
tRwYxic0THPxtDv1BkCA5YIZWiBg+dpJpf5qfZyn+qjUtAZEJ8P69XHNcYuforpu
9TpB64iLBE6wyINVY0FVAK6i7SY8aw9d2W6QmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBzrfIpOx2cZ+nLMYa5/rdCOkNwRMB8GA1UdIwQYMBaAFITlh4Ohxhrwo7eu
zE8OpAiwvD1CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0OWYw
MWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWRkYzRkY2QtZmZmMS00Njk4LWJjN2MtYmU1ZWRk
YTRlNjE1L2ZlZDM5YmYxNmY4MzcyODQ3NzI3Mzc4OTc5YzFjMDI1NTdjZjU5YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZGRjNGRjZC1mZmYxLTQ2OTgtYmM3Yy1iZTVl
ZGRhNGU2MTUvYzE0OWYwMWQ3ZjU3ZmEyYzJmZWYzOTRkMDBmZTliYzJhMGQ4OTlh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnb/TANBgkqhkiG9w0BAQsFAAOCAQEAWt7U1wS9IZs+Iumr
+8tzD8EfvYBWS4lS1B7wH/4W3Dpk6SkJftpobNWs09Fqa4iUuSzlay2Wx1o9gCF2
IJ/NxiQr8mlQquf2jRDTlTQW2WYBD7ooyrQ8mFdbfpdRQqGnfKmgdLq9HP5ewBS1
Ml+m/n6Oh7VJxdPIvjGXDioFmzhmiN7hOBZ5JbaBi0XYOViT1YP0hk6nZZHFmGfD
H82ixlnjQ3Lsm3TKsCFTlaKUIF8ettllGYSqp0XVLHtzcUraCDBGprBeNo+znFQW
O7su0Ag7HGHXqLn0SfvwsLzmhwvRbjqyTRwrsylVCWghWEJeeKC3SFJ0Bxfh+pa7
hkXIEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org