Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa
File:                     a8fe174f97884761c1ffd921d7151465b88c89b1.roa (raw, json)
Hash identifier:          tvLESUHNfFRAL82piguFhuYMC91/y5R+2E8Ye6DDTMM=
Subject key identifier:   D0:F7:2B:EF:29:37:23:B6:D0:42:B8:7B:D0:A4:A9:BE:7C:B3:DB:37
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       20BC8C
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa
Signing time:             Fri 24 Mar 2023 08:30:50 +0000
ROA not before:           Thu 23 Mar 2023 08:30:50 +0000
ROA not after:            Sat 22 Mar 2025 08:30:50 +0000
asID:                     21599
IP address blocks:        200.46.0.0/17 maxlen: 24
                          200.46.128.0/19 maxlen: 24
                          200.46.160.0/20 maxlen: 24
                          200.46.176.0/20 maxlen: 24
                          200.46.192.0/20 maxlen: 24
                          200.46.208.0/20 maxlen: 24
                          200.46.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145420 (0x20bc8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 23 08:30:50 2023 GMT
            Not After : Mar 22 08:30:50 2025 GMT
        Subject: CN=a8fe174f97884761c1ffd921d7151465b88c89b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:05:4b:45:d7:e0:62:c2:35:42:d1:08:e5:
                    41:81:da:63:f4:31:3e:c4:c8:2f:77:ad:2a:3f:36:
                    02:27:4a:18:24:1b:93:23:88:8b:c7:3c:e7:eb:27:
                    8f:2f:63:12:25:0f:cd:e0:5a:64:a4:5b:ae:8a:a3:
                    10:c1:5a:92:a5:82:1a:53:09:62:cc:50:a2:8d:df:
                    cb:19:5e:07:fc:09:ba:0d:54:cf:d9:43:fc:29:74:
                    6e:97:56:44:a3:5c:15:e6:16:62:68:f9:1f:0f:ed:
                    92:f8:9d:8c:9d:0e:03:b9:6c:0b:c7:e9:57:49:22:
                    f6:b1:17:27:07:f7:a2:70:e4:14:c1:80:22:1f:ae:
                    c9:69:08:2a:dc:63:18:d6:f2:fe:ac:47:d6:83:1c:
                    2f:15:36:4e:ca:8a:70:ea:77:84:43:04:ec:05:3a:
                    03:a7:83:aa:eb:fc:b4:77:a4:f0:8f:0c:07:44:6a:
                    68:f6:aa:93:44:a0:2b:a7:64:fc:b9:6a:03:08:ab:
                    8d:4a:e9:dc:dc:2d:5c:3b:41:74:fd:7f:90:cd:bf:
                    e0:4a:e7:79:67:f0:09:f5:01:81:05:34:e8:47:b6:
                    ca:31:8a:d2:99:06:a1:a5:4b:60:52:d6:ab:71:92:
                    36:6a:94:f6:ec:b6:0a:cf:4f:ea:77:11:8f:3d:88:
                    4b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F7:2B:EF:29:37:23:B6:D0:42:B8:7B:D0:A4:A9:BE:7C:B3:DB:37
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a8fe174f97884761c1ffd921d7151465b88c89b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:8c:c9:3e:01:9f:ca:1a:5d:b8:01:38:35:d4:2f:5e:ac:
         71:6f:25:bb:60:76:51:25:38:a3:36:e4:cf:c8:4c:29:22:e3:
         21:43:0c:9b:f0:03:39:37:14:3d:31:05:1d:ee:e0:4f:2e:db:
         a7:33:93:23:bc:17:c2:25:37:ae:e5:7a:45:a1:f8:ba:5f:fc:
         6f:24:21:cf:4c:3a:c2:46:c4:81:df:9c:a1:32:ca:52:08:8c:
         1d:fc:71:2d:b4:0d:5f:5d:76:bb:f0:e7:35:bf:aa:11:13:83:
         89:42:08:6b:49:a7:c7:c2:ae:08:84:5e:80:e3:db:6e:65:6c:
         4a:00:04:d1:27:56:df:15:d0:d1:bf:e4:c8:32:d4:18:3f:ba:
         66:c6:bf:ec:ba:8e:62:19:31:90:d0:70:48:42:e6:3c:1e:a0:
         a3:7e:36:f1:64:ec:85:ec:8c:41:5a:16:69:dc:12:47:28:e1:
         d9:23:5c:d4:08:f2:3f:0f:19:45:a4:d1:fc:5a:19:79:95:56:
         0e:96:45:d0:5a:e7:fa:cc:ec:cf:06:48:3a:de:85:8c:da:dd:
         73:70:ba:3d:c0:d8:f6:8d:cc:8e:24:f1:fc:2f:b0:7d:a3:07:
         1c:ac:4d:8b:99:b0:01:8f:d1:ef:96:d8:7b:8d:dd:28:7a:58:
         76:42:7e:ab
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDILyMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjMwMzIz
MDgzMDUwWhcNMjUwMzIyMDgzMDUwWjAzMTEwLwYDVQQDEyhhOGZlMTc0Zjk3ODg0
NzYxYzFmZmQ5MjFkNzE1MTQ2NWI4OGM4OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnrsFS0XX4GLCNULRCOVBgdpj9DE+xMgvd60qPzYCJ0oYJBuT
I4iLxzzn6yePL2MSJQ/N4FpkpFuuiqMQwVqSpYIaUwlizFCijd/LGV4H/Am6DVTP
2UP8KXRul1ZEo1wV5hZiaPkfD+2S+J2MnQ4DuWwLx+lXSSL2sRcnB/eicOQUwYAi
H67JaQgq3GMY1vL+rEfWgxwvFTZOyopw6neEQwTsBToDp4Oq6/y0d6TwjwwHRGpo
9qqTRKArp2T8uWoDCKuNSunc3C1cO0F0/X+Qzb/gSud5Z/AJ9QGBBTToR7bKMYrS
mQahpUtgUtarcZI2apT27LYKz0/qdxGPPYhLiQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFND3K+8pNyO20EK4e9Ckqb58s9s3MB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwL2E4ZmUxNzRmOTc4ODQ3NjFjMWZmZDkyMWQ3MTUxNDY1Yjg4Yzg5YjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAMguMA0GCSqGSIb3DQEBCwUAA4IBAQA9BYzJPgGfyhpduAE4
NdQvXqxxbyW7YHZRJTijNuTPyEwpIuMhQwyb8AM5NxQ9MQUd7uBPLtunM5MjvBfC
JTeu5XpFofi6X/xvJCHPTDrCRsSB35yhMspSCIwd/HEttA1fXXa78Oc1v6oRE4OJ
QghrSafHwq4IhF6A49tuZWxKAATRJ1bfFdDRv+TIMtQYP7pmxr/suo5iGTGQ0HBI
QuY8HqCjfjbxZOyF7IxBWhZp3BJHKOHZI1zUCPI/DxlFpNH8Whl5lVYOlkXQWuf6
zOzPBkg63oWM2t1zcLo9wNj2jcyOJPH8L7B9owccrE2LmbABj9Hvlth7jd0oelh2
Qn6r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org