Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa
File:                     8c422c51f025e00055fb55286e87a01384afe7b3.roa (raw, json)
Hash identifier:          NIKYEA0I0dax7/BZcYB6VJHLqMOoKB/nESlyTfbxAx8=
Subject key identifier:   78:38:E5:8B:81:84:55:AD:82:9C:EB:5D:A5:AE:9A:59:A0:6B:16:65
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       20A608
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa
Signing time:             Thu 23 Mar 2023 08:30:03 +0000
ROA not before:           Wed 22 Mar 2023 08:30:03 +0000
ROA not after:            Fri 21 Mar 2025 08:30:03 +0000
asID:                     21599
IP address blocks:        200.46.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139656 (0x20a608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 22 08:30:03 2023 GMT
            Not After : Mar 21 08:30:03 2025 GMT
        Subject: CN=8c422c51f025e00055fb55286e87a01384afe7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:92:6b:49:cf:de:5b:1d:ec:62:dc:ec:06:
                    2d:e0:bb:88:4b:53:be:31:fe:dc:2a:d9:5d:63:af:
                    d5:3e:88:15:60:a0:ac:22:01:d3:d2:db:f1:0d:e8:
                    a0:92:ab:83:6e:88:59:23:3e:02:d9:e0:a5:80:d1:
                    13:7b:ed:69:60:08:3c:49:59:4d:8c:28:f4:29:e3:
                    b4:a1:f9:58:95:d6:c3:84:4e:77:6e:d0:f3:0d:23:
                    b2:99:06:88:85:e1:4d:1f:98:2d:6c:f1:7f:25:c5:
                    92:c2:22:ef:77:d3:0b:e3:65:65:3e:18:a0:99:fd:
                    79:66:d6:db:cf:3e:ec:c5:04:7a:b7:3a:23:35:57:
                    3e:0d:48:ff:6c:d7:b5:b2:fe:cd:65:a3:b9:92:7f:
                    48:1f:3a:2a:0e:63:9f:c3:c9:42:e7:f3:cb:94:2d:
                    b6:eb:75:2b:96:64:67:dd:08:10:c0:87:9a:d3:61:
                    50:8e:54:f7:88:36:76:84:5b:f3:d0:c4:e1:ae:1f:
                    db:90:10:e5:43:bd:5f:ee:6a:6a:13:3b:98:1a:80:
                    09:c3:7b:b5:90:cb:1e:6a:b3:c0:a0:ec:0f:13:81:
                    ce:bb:d6:80:ca:c2:33:3f:4f:75:90:4b:31:e5:fe:
                    3a:09:b2:1a:0f:e5:aa:6e:44:9e:be:f4:99:6b:a4:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:E5:8B:81:84:55:AD:82:9C:EB:5D:A5:AE:9A:59:A0:6B:16:65
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8c422c51f025e00055fb55286e87a01384afe7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:1e:4d:b6:3a:fd:cc:2f:d0:6a:1f:87:64:1b:65:dc:90:
         96:e7:a1:9e:d6:d8:eb:a2:23:4c:82:0a:1a:d4:fb:06:1e:b5:
         3a:45:25:0a:21:25:4d:78:65:73:fe:6a:3b:05:74:40:72:cd:
         17:e9:d8:84:c0:4d:fb:c8:e6:d8:62:5a:20:ca:48:8c:9c:26:
         6b:61:34:b1:6f:e2:76:18:f4:02:d2:79:c8:3e:de:33:a9:38:
         db:39:b9:8d:78:4b:e3:c7:c3:96:56:91:df:bb:2e:ee:0b:a9:
         07:38:7f:15:10:af:7f:3d:ba:6a:a0:54:b4:90:5f:fd:32:e7:
         7f:0f:20:38:fd:64:34:63:c5:23:45:9a:7c:b6:b8:a7:28:40:
         1e:18:6d:ed:a9:e2:7f:1d:43:da:39:80:e2:d4:dc:58:73:c2:
         cd:56:fb:5e:52:9d:2e:25:96:9e:0d:ca:71:07:2a:5b:c6:73:
         8c:14:17:fe:13:36:99:8c:86:98:5b:4d:f3:4b:c2:38:1f:99:
         c0:4f:70:1e:29:43:75:48:52:40:69:72:02:bc:17:e5:a3:ef:
         74:3f:2c:fe:33:20:2c:77:24:9a:92:6f:22:62:42:b2:3e:99:
         e5:44:d8:ef:fd:8b:a4:e8:1c:3a:a3:21:b9:9f:fd:3e:65:3e:
         54:2b:47:1b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIKYIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjMwMzIy
MDgzMDAzWhcNMjUwMzIxMDgzMDAzWjAzMTEwLwYDVQQDEyg4YzQyMmM1MWYwMjVl
MDAwNTVmYjU1Mjg2ZTg3YTAxMzg0YWZlN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj9ySa0nP3lsd7GLc7AYt4LuIS1O+Mf7cKtldY6/VPogVYKCs
IgHT0tvxDeigkquDbohZIz4C2eClgNETe+1pYAg8SVlNjCj0KeO0oflYldbDhE53
btDzDSOymQaIheFNH5gtbPF/JcWSwiLvd9ML42VlPhigmf15Ztbbzz7sxQR6tzoj
NVc+DUj/bNe1sv7NZaO5kn9IHzoqDmOfw8lC5/PLlC2263UrlmRn3QgQwIea02FQ
jlT3iDZ2hFvz0MThrh/bkBDlQ71f7mpqEzuYGoAJw3u1kMsearPAoOwPE4HOu9aA
ysIzP091kEsx5f46CbIaD+WqbkSevvSZa6Qn9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHg45YuBhFWtgpzrXaWumlmgaxZlMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzhjNDIyYzUxZjAyNWUwMDA1NWZiNTUyODZlODdhMDEzODRhZmU3YjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB8gugDANBgkqhkiG9w0BAQsFAAOCAQEAXAEeTbY6/cwv0Gof
h2QbZdyQluehntbY66IjTIIKGtT7Bh61OkUlCiElTXhlc/5qOwV0QHLNF+nYhMBN
+8jm2GJaIMpIjJwma2E0sW/idhj0AtJ5yD7eM6k42zm5jXhL48fDllaR37su7gup
Bzh/FRCvfz26aqBUtJBf/TLnfw8gOP1kNGPFI0WafLa4pyhAHhht7anifx1D2jmA
4tTcWHPCzVb7XlKdLiWWng3KcQcqW8ZzjBQX/hM2mYyGmFtN80vCOB+ZwE9wHilD
dUhSQGlyArwX5aPvdD8s/jMgLHckmpJvImJCsj6Z5UTY7/2LpOgcOqMhuZ/9PmU+
VCtHGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org