Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/e190675b751ab8b6b8f6552a33a421d79508dd16.roa
File:                     e190675b751ab8b6b8f6552a33a421d79508dd16.roa (raw, json)
Hash identifier:          9Y5aP4TtPupjmE8EyMybrm+UiCnEPRmDPTAasex8Eqc=
Subject key identifier:   36:78:AD:26:C8:BE:98:F2:5F:2A:1D:DC:21:C8:A7:CE:02:1B:08:1D
Certificate issuer:       /CN=a736ecb08742dd36c47f8758266a50eba82e7909
Certificate serial:       15E7DD
Authority key identifier: F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/e190675b751ab8b6b8f6552a33a421d79508dd16.roa
Signing time:             Tue 05 Apr 2022 13:27:13 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Fri 05 Apr 2024 03:00:00 +0000
asID:                     264633
IP address blocks:        200.10.141.0/24 maxlen: 24
                          2801:11:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435613 (0x15e7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a736ecb08742dd36c47f8758266a50eba82e7909
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2024 GMT
        Subject: CN=e190675b751ab8b6b8f6552a33a421d79508dd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:e4:a0:f5:47:75:65:71:d7:5d:3c:c7:92:
                    94:ec:59:2b:4e:fd:3c:35:b2:5c:70:63:ca:51:05:
                    98:2c:7c:1f:2a:2e:87:03:b9:56:ac:7f:82:78:ca:
                    ec:2e:b5:11:f3:96:43:00:e2:31:35:64:42:6f:ff:
                    ec:2c:12:46:b3:67:26:b8:ad:03:da:94:37:53:54:
                    07:89:37:b2:6a:b5:7f:00:d3:e2:63:30:4c:ae:1d:
                    b2:ce:21:bd:ab:3f:37:ac:9f:81:b7:39:60:42:86:
                    d0:ca:5b:92:b2:a6:82:ad:8b:9f:94:6f:9c:d1:f8:
                    c5:83:bc:ad:0e:6a:e6:a1:96:d3:bf:d8:6b:06:df:
                    c7:b3:96:15:7d:81:c3:01:50:34:63:c5:0d:e8:26:
                    8d:77:b1:66:5e:b0:72:e2:59:90:24:17:73:c1:f4:
                    85:95:88:3e:db:3b:5b:ef:94:6f:64:9d:8e:b1:78:
                    f0:89:04:eb:7e:ae:33:e9:66:56:bb:ec:73:56:82:
                    37:2e:4a:1a:47:f5:bd:ee:09:d9:5f:8f:7c:de:7d:
                    04:1c:3e:23:95:1f:dd:ea:53:a9:84:4e:aa:91:e0:
                    66:df:39:ed:20:05:aa:07:10:7b:5c:bd:dd:50:b3:
                    9a:67:f2:0f:14:8e:87:72:77:73:33:65:fc:17:e2:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:AD:26:C8:BE:98:F2:5F:2A:1D:DC:21:C8:A7:CE:02:1B:08:1D
            X509v3 Authority Key Identifier:
                keyid:F6:EB:DC:97:F8:05:97:89:02:10:A8:21:FE:99:74:D8:A1:7F:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a736ecb08742dd36c47f8758266a50eba82e7909.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/e190675b751ab8b6b8f6552a33a421d79508dd16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b986e1e-54df-4fca-a08d-5f964ad79fdc/a736ecb08742dd36c47f8758266a50eba82e7909.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.141.0/24
                IPv6:
                  2801:11:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:14:ab:e8:8b:53:00:3d:1a:1e:21:c9:db:bb:3b:9f:20:
         67:13:00:bc:0c:1f:03:a6:90:60:49:1a:68:76:e7:f2:c5:55:
         ad:cf:5a:d3:ef:1c:0d:44:95:f2:17:26:bf:69:a5:2c:83:e6:
         12:29:fb:54:2c:15:f0:c1:66:cd:b8:6c:a5:3f:f4:13:3c:64:
         b2:d9:b5:13:e7:30:12:ee:c0:09:68:d5:05:22:fc:95:98:bc:
         18:c3:81:76:49:12:4f:90:ef:0e:e3:9e:ff:3f:fa:9f:b0:09:
         6e:e8:c4:08:8c:d9:68:e9:13:ca:e3:02:81:87:46:90:f3:06:
         2a:47:94:cd:40:79:06:ae:97:73:31:ec:90:a0:8e:54:e9:a4:
         3e:39:1e:c4:be:f3:fa:aa:af:8c:07:f9:3a:8c:67:18:90:15:
         53:d2:a3:83:65:52:07:57:c6:fd:68:5e:1e:78:8d:14:f9:61:
         51:54:19:00:c8:0b:35:0d:3a:76:35:23:31:8d:72:03:25:f1:
         7d:69:6b:7a:ee:75:86:eb:95:08:b3:ad:fd:c2:bc:61:5e:ff:
         6c:f1:c6:ec:bd:9a:f1:3b:fa:65:56:ae:e2:64:0c:cf:08:02:
         9e:7b:ae:f0:19:97:02:2f:e4:2f:f4:fe:01:56:33:21:04:34:
         89:98:75:79
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDFefdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MzZlY2IwODc0MmRkMzZjNDdmODc1ODI2NmE1MGViYTgyZTc5MDkwHhcNMjIwNDA1
MDMwMDAwWhcNMjQwNDA1MDMwMDAwWjAzMTEwLwYDVQQDEyhlMTkwNjc1Yjc1MWFi
OGI2YjhmNjU1MmEzM2E0MjFkNzk1MDhkZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlo7koPVHdWVx1108x5KU7FkrTv08NbJccGPKUQWYLHwfKi6H
A7lWrH+CeMrsLrUR85ZDAOIxNWRCb//sLBJGs2cmuK0D2pQ3U1QHiTeyarV/ANPi
YzBMrh2yziG9qz83rJ+BtzlgQobQyluSsqaCrYuflG+c0fjFg7ytDmrmoZbTv9hr
Bt/Hs5YVfYHDAVA0Y8UN6CaNd7FmXrBy4lmQJBdzwfSFlYg+2ztb75RvZJ2OsXjw
iQTrfq4z6WZWu+xzVoI3LkoaR/W97gnZX4983n0EHD4jlR/d6lOphE6qkeBm3znt
IAWqBxB7XL3dULOaZ/IPFI6HcndzM2X8F+K6nwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFDZ4rSbIvpjyXyod3CHIp84CGwgdMB8GA1UdIwQYMBaAFPbr3Jf4BZeJAhCo
If6ZdNihf/YnMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTczNmVj
YjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWI5ODZlMWUtNTRkZi00ZmNhLWEwOGQtNWY5NjRh
ZDc5ZmRjL2UxOTA2NzViNzUxYWI4YjZiOGY2NTUyYTMzYTQyMWQ3OTUwOGRkMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Yjk4NmUxZS01NGRmLTRmY2EtYTA4ZC01Zjk2
NGFkNzlmZGMvYTczNmVjYjA4NzQyZGQzNmM0N2Y4NzU4MjY2YTUwZWJhODJlNzkw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAMgKjTAPBAIAAjAJAwcAKAEAERAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAB6BSr6ItTAD0aHiHJ27s7nyBnEwC8DB8DppBgSRpodufyxVWtz1rT7xwN
RJXyFya/aaUsg+YSKftULBXwwWbNuGylP/QTPGSy2bUT5zAS7sAJaNUFIvyVmLwY
w4F2SRJPkO8O457/P/qfsAlu6MQIjNlo6RPK4wKBh0aQ8wYqR5TNQHkGrpdzMeyQ
oI5U6aQ+OR7EvvP6qq+MB/k6jGcYkBVT0qODZVIHV8b9aF4eeI0U+WFRVBkAyAs1
DTp2NSMxjXIDJfF9aWt67nWG65UIs639wrxhXv9s8cbsvZrxO/plVq7iZAzPCAKe
e67wGZcCL+Qv9P4BVjMhBDSJmHV5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org