Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7ed300d33367a15275f405b0cd0da2663ff9add5.roa
File:                     7ed300d33367a15275f405b0cd0da2663ff9add5.roa (raw, json)
Hash identifier:          OuG9G84KQyO+bAPa3SHE/S+Vy5fkfr+zzuCp0+g7FOc=
Subject key identifier:   F0:1D:94:FF:1E:B6:51:48:B9:C3:C8:8D:4C:51:BC:5B:65:D0:E0:28
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E3BD6
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7ed300d33367a15275f405b0cd0da2663ff9add5.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27802
IP address blocks:        200.46.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932822 (0xe3bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=7ed300d33367a15275f405b0cd0da2663ff9add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:42:97:08:41:2b:fc:95:a0:2d:6b:89:72:
                    b3:98:aa:61:97:41:bf:2b:d4:60:98:30:53:62:86:
                    1a:20:69:ae:ea:b0:ec:a9:b0:59:1b:a9:14:03:fb:
                    fd:ff:49:37:43:ab:8f:70:b6:f0:6c:0d:31:fd:07:
                    b0:ef:46:ba:2b:d3:73:47:a5:b4:56:7e:b4:97:f3:
                    ab:51:86:a0:1b:91:65:b7:fd:9c:0f:77:82:a1:da:
                    1b:33:98:d1:6b:54:eb:9b:9c:06:15:40:23:22:ee:
                    82:7e:f7:33:bd:6e:0c:c5:33:d9:97:a0:a0:3b:36:
                    ea:19:5a:74:63:d9:40:80:5d:62:8f:f1:37:32:01:
                    c0:61:39:d4:7d:fa:a7:95:54:4c:6d:27:47:47:c7:
                    ce:c0:a4:04:a4:98:b6:bb:4d:2b:a7:94:5d:2d:12:
                    ba:6f:6c:23:d2:ef:60:0c:83:95:55:21:13:18:40:
                    24:22:98:02:85:a0:99:cc:59:85:14:c2:a2:93:52:
                    88:bb:58:2d:b0:db:ab:b8:58:e6:97:d9:f5:81:c5:
                    cc:58:42:67:d1:72:e4:53:b0:0e:81:02:84:a0:69:
                    77:5f:df:c4:58:1c:f7:da:6e:55:80:fe:28:21:f9:
                    09:87:bc:60:e3:8f:56:24:dd:8d:b3:c3:fc:b9:6b:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:94:FF:1E:B6:51:48:B9:C3:C8:8D:4C:51:BC:5B:65:D0:E0:28
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7ed300d33367a15275f405b0cd0da2663ff9add5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1f:e9:a5:9c:60:9f:34:20:e0:fd:2b:6d:08:31:62:17:ca:
         02:91:19:0e:56:e0:b1:00:c5:d7:26:21:36:b0:d8:a3:04:bc:
         00:60:5d:44:92:ad:95:46:7e:f8:21:93:55:9d:e6:b6:ae:16:
         4a:d3:51:e7:31:a6:9b:f7:ef:b3:81:c2:d9:5a:ff:19:14:79:
         3a:e1:17:1c:71:50:83:40:bd:55:b1:53:ca:20:e8:e5:31:9f:
         71:24:de:cb:18:95:4f:ad:57:db:7a:54:c9:b0:e7:28:2c:c5:
         0d:19:64:55:ae:b1:9d:83:4d:06:8f:5d:b9:71:de:5c:7a:4c:
         25:94:86:a3:41:ae:33:0f:f7:66:1b:62:60:e4:ab:39:e6:5a:
         f7:2c:3e:7b:fe:db:e9:89:5c:ce:13:96:e4:2b:55:95:82:d3:
         d0:33:26:46:99:13:84:3a:8c:4d:e8:f5:f9:42:6f:95:00:a5:
         73:e6:cd:20:78:4d:2f:49:3a:b8:da:86:e0:65:21:ae:a4:da:
         de:fa:be:ef:c1:24:de:f2:02:91:cc:38:03:4e:18:a6:c5:33:
         e5:33:4d:4a:4e:db:7a:7b:c4:f2:e5:68:bd:db:0f:55:74:51:
         d0:45:d3:c2:6b:ff:8a:fb:ae:89:5e:b7:cb:cd:da:38:2e:d0:
         86:d7:c0:bb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjvWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjEwMzI0
MTQ0NTA5WhcNMjYwMzI0MTQ0NTA5WjAzMTEwLwYDVQQDEyg3ZWQzMDBkMzMzNjdh
MTUyNzVmNDA1YjBjZDBkYTI2NjNmZjlhZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr6VClwhBK/yVoC1riXKzmKphl0G/K9RgmDBTYoYaIGmu6rDs
qbBZG6kUA/v9/0k3Q6uPcLbwbA0x/Qew70a6K9NzR6W0Vn60l/OrUYagG5Flt/2c
D3eCodobM5jRa1Trm5wGFUAjIu6CfvczvW4MxTPZl6CgOzbqGVp0Y9lAgF1ij/E3
MgHAYTnUffqnlVRMbSdHR8fOwKQEpJi2u00rp5RdLRK6b2wj0u9gDIOVVSETGEAk
IpgChaCZzFmFFMKik1KIu1gtsNuruFjml9n1gcXMWEJn0XLkU7AOgQKEoGl3X9/E
WBz32m5VgP4oIfkJh7xg449WJN2Ns8P8uWuJcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPAdlP8etlFIucPIjUxRvFtl0OAoMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzdlZDMwMGQzMzM2N2ExNTI3NWY0MDViMGNkMGRhMjY2M2ZmOWFkZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgu8jANBgkqhkiG9w0BAQsFAAOCAQEABx/ppZxgnzQg4P0r
bQgxYhfKApEZDlbgsQDF1yYhNrDYowS8AGBdRJKtlUZ++CGTVZ3mtq4WStNR5zGm
m/fvs4HC2Vr/GRR5OuEXHHFQg0C9VbFTyiDo5TGfcSTeyxiVT61X23pUybDnKCzF
DRlkVa6xnYNNBo9duXHeXHpMJZSGo0GuMw/3ZhtiYOSrOeZa9yw+e/7b6YlczhOW
5CtVlYLT0DMmRpkThDqMTej1+UJvlQClc+bNIHhNL0k6uNqG4GUhrqTa3vq+78Ek
3vICkcw4A04YpsUz5TNNSk7benvE8uVovdsPVXRR0EXTwmv/ivuuiV63y83aOC7Q
htfAuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org