Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/19c50423d73ff3174cd129c3705f9ae00ab601ee.roa
File:                     19c50423d73ff3174cd129c3705f9ae00ab601ee.roa (raw, json)
Hash identifier:          XN8JeF+mN16AOEzsuI44DtBpNXa6egcbKAHUGLu23lg=
Subject key identifier:   3F:D6:97:9C:FC:3C:10:BA:EF:AD:A8:08:4E:19:1C:52:EC:44:20:81
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       144BB5
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/19c50423d73ff3174cd129c3705f9ae00ab601ee.roa
Signing time:             Tue 16 Nov 2021 21:20:36 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 16 Nov 2023 03:00:00 +0000
asID:                     10476
IP address blocks:        200.108.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330101 (0x144bb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 16 03:00:00 2023 GMT
        Subject: CN=19c50423d73ff3174cd129c3705f9ae00ab601ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:d0:02:1d:2f:a9:95:df:33:0e:c7:46:d3:
                    e1:19:39:99:0e:0e:eb:6a:4b:67:6d:58:b5:dd:77:
                    9b:19:04:e5:da:bb:92:9c:6b:f7:2c:6e:5b:db:74:
                    04:2b:84:36:85:7c:c1:17:67:8b:ba:2a:7a:10:e9:
                    e9:6d:da:4e:ab:01:81:40:15:4c:4c:5b:f6:7b:a0:
                    9c:25:2c:f7:b5:f3:8b:7c:c2:5d:6d:08:4a:d8:24:
                    f8:7e:03:fb:c5:e6:e3:00:54:b9:2c:b5:19:4a:81:
                    cf:47:b8:7b:69:6a:f2:8f:42:80:0d:dd:00:65:59:
                    59:8f:32:1f:c8:a7:d1:f4:71:fc:57:42:a5:1c:23:
                    79:85:92:fc:d2:a5:25:a8:9f:d3:ae:7b:d0:35:2c:
                    a7:9c:97:78:98:18:95:1d:2d:b2:4b:ef:7f:69:85:
                    44:46:91:fd:aa:58:9f:bb:30:b8:28:56:cb:2a:58:
                    62:8f:d2:df:39:59:08:be:36:f2:87:b8:1a:a0:c2:
                    54:c3:f4:8a:a5:21:f2:61:60:36:74:29:da:7f:f7:
                    51:fa:a5:23:7c:f1:62:3c:4e:4f:da:9f:fb:12:30:
                    12:78:67:43:01:10:55:73:95:26:a5:16:8d:bf:57:
                    cd:61:c9:6a:d4:11:dc:1c:7e:30:e3:f0:33:85:d9:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:97:9C:FC:3C:10:BA:EF:AD:A8:08:4E:19:1C:52:EC:44:20:81
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/19c50423d73ff3174cd129c3705f9ae00ab601ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:63:03:d0:3b:14:90:39:7b:ed:24:ce:98:3f:6e:49:49:
         ee:6f:c7:34:2b:a5:a8:b1:9f:ea:2b:f1:e4:bc:d2:7f:79:6f:
         27:b5:a4:79:88:6b:d8:52:be:96:33:8c:61:90:7c:06:48:78:
         5c:08:7f:c6:b3:42:51:1c:25:5a:f5:96:07:cf:4f:ee:3c:ee:
         3c:9d:da:3b:8b:a8:53:46:fd:33:ad:41:0b:11:4b:85:40:bf:
         07:3d:70:cb:9a:68:7d:ee:11:4b:b4:26:bc:22:19:71:75:6f:
         1c:f5:b3:ed:8d:bc:7a:a2:b5:33:a3:21:ab:77:41:21:46:32:
         3d:99:c7:60:90:1d:ad:38:c5:69:be:40:90:39:a8:bc:00:e2:
         9f:b6:9e:f8:ba:b5:f3:a0:b4:7a:7d:83:58:6e:24:c7:56:75:
         d6:47:f7:03:8c:ad:47:a0:6f:0c:ba:8f:63:d4:fc:72:c5:7c:
         18:c5:14:28:9d:b5:72:61:d8:85:fd:3e:9f:35:77:48:c9:3d:
         92:cc:3e:a9:33:51:d9:b4:2e:8c:2e:b8:1a:d1:7d:8c:64:07:
         35:80:4c:95:e2:1b:3c:ea:aa:e5:02:ae:b2:2c:83:f4:31:6c:
         18:f5:76:c2:e4:64:c0:c4:f1:84:e2:04:df:09:87:4b:b7:14:
         96:f0:46:1d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFEu1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjExMTE2
MDMwMDAwWhcNMjMxMTE2MDMwMDAwWjAzMTEwLwYDVQQDEygxOWM1MDQyM2Q3M2Zm
MzE3NGNkMTI5YzM3MDVmOWFlMDBhYjYwMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiJzQAh0vqZXfMw7HRtPhGTmZDg7raktnbVi13XebGQTl2ruS
nGv3LG5b23QEK4Q2hXzBF2eLuip6EOnpbdpOqwGBQBVMTFv2e6CcJSz3tfOLfMJd
bQhK2CT4fgP7xebjAFS5LLUZSoHPR7h7aWryj0KADd0AZVlZjzIfyKfR9HH8V0Kl
HCN5hZL80qUlqJ/TrnvQNSynnJd4mBiVHS2yS+9/aYVERpH9qlifuzC4KFbLKlhi
j9LfOVkIvjbyh7gaoMJUw/SKpSHyYWA2dCnaf/dR+qUjfPFiPE5P2p/7EjASeGdD
ARBVc5UmpRaNv1fNYclq1BHcHH4w4/AzhdklEQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD/Wl5z8PBC6762oCE4ZHFLsRCCBMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzE5YzUwNDIzZDczZmYzMTc0Y2QxMjljMzcwNWY5YWUwMGFiNjAxZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAchsLDANBgkqhkiG9w0BAQsFAAOCAQEAe29jA9A7FJA5e+0k
zpg/bklJ7m/HNCulqLGf6ivx5LzSf3lvJ7WkeYhr2FK+ljOMYZB8Bkh4XAh/xrNC
URwlWvWWB89P7jzuPJ3aO4uoU0b9M61BCxFLhUC/Bz1wy5pofe4RS7QmvCIZcXVv
HPWz7Y28eqK1M6Mhq3dBIUYyPZnHYJAdrTjFab5AkDmovADin7ae+Lq186C0en2D
WG4kx1Z11kf3A4ytR6BvDLqPY9T8csV8GMUUKJ21cmHYhf0+nzV3SMk9ksw+qTNR
2bQujC64GtF9jGQHNYBMleIbPOqq5QKusiyD9DFsGPV2wuRkwMTxhOIE3wmHS7cU
lvBGHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org