Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/04a1bc2d524c7d66758efc0cb1114eef2e53690f.roa
File:                     04a1bc2d524c7d66758efc0cb1114eef2e53690f.roa (raw, json)
Hash identifier:          lNs4ei8fzSXYKXK52vV75hznPzC81UhhXRPBTz7MzNk=
Subject key identifier:   88:0B:23:50:BC:BE:CB:7F:79:FF:E1:7E:D3:9F:3D:FD:AC:4B:9C:DE
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E392F
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/04a1bc2d524c7d66758efc0cb1114eef2e53690f.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     265807
IP address blocks:        200.68.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932143 (0xe392f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=04a1bc2d524c7d66758efc0cb1114eef2e53690f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:83:5f:d7:c7:b4:3c:0b:8c:ff:33:77:72:
                    37:9d:f7:6d:44:53:d0:e5:05:14:84:ed:46:5a:aa:
                    53:14:81:61:dc:f1:dc:03:ba:05:55:38:e8:30:22:
                    14:4c:59:82:73:0c:c0:03:64:d3:aa:ed:16:e7:53:
                    7a:0b:f1:2c:33:77:6c:5d:67:17:3a:7a:f0:03:81:
                    d6:d4:46:fc:99:0a:7b:11:22:7e:ab:95:63:44:85:
                    cd:3f:56:2c:72:da:cb:3b:5c:33:c9:80:1e:78:ba:
                    ac:8d:5e:74:a7:8d:30:aa:75:a8:eb:90:c1:8a:e4:
                    5b:ba:2e:4c:8c:6e:44:2d:94:bc:89:4d:e1:04:cb:
                    b4:58:bd:19:76:66:fe:cf:40:bf:0a:64:89:ff:2e:
                    c0:eb:6b:7c:74:37:ee:d7:d6:dc:6d:55:e3:94:a4:
                    9c:6d:7a:6a:de:c2:ba:3a:e2:16:36:73:b9:22:fe:
                    75:85:42:f4:28:f7:f6:f6:75:d4:d8:35:20:06:78:
                    bf:f1:6d:4d:60:54:43:c3:ed:44:5f:b9:73:f5:73:
                    60:63:6c:01:d3:30:99:7b:5e:13:46:06:54:f0:46:
                    b0:9b:09:7e:f5:fa:59:09:fa:47:75:b1:76:22:50:
                    08:9c:82:18:74:3e:8e:09:89:e1:fa:be:20:d8:08:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:23:50:BC:BE:CB:7F:79:FF:E1:7E:D3:9F:3D:FD:AC:4B:9C:DE
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/04a1bc2d524c7d66758efc0cb1114eef2e53690f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:19:c1:6f:01:f8:83:2e:44:4f:b0:6e:14:42:26:d4:92:9c:
         e5:18:51:6c:20:85:0e:92:c4:46:6e:c1:5d:d4:7f:0a:d0:91:
         e7:f3:99:da:82:ee:9a:e7:ec:90:b2:55:1b:b2:1f:14:80:0c:
         ea:f1:be:67:51:be:73:ba:db:84:27:c8:c1:ed:f2:e3:a1:db:
         7e:97:46:66:f1:fa:b6:ba:8f:c8:50:87:fd:67:7f:d4:02:d8:
         72:e8:26:05:80:ce:8f:0f:aa:b8:da:2a:00:d8:4f:00:a6:03:
         b8:ec:8d:5b:e6:1d:31:88:b8:c4:94:cd:a3:c4:1a:c5:f9:30:
         9a:80:e1:69:03:3e:eb:7e:ad:a0:f5:8c:fe:bb:bb:bf:cf:90:
         e0:8d:45:07:3f:ea:b2:13:a9:ca:28:ba:f2:df:b3:12:ab:f0:
         e3:f0:7c:0e:e4:ff:16:f4:59:24:4b:76:80:0a:96:c3:5e:1c:
         49:88:78:ac:d2:11:a4:bf:1b:99:fe:c0:df:26:6b:74:cb:ab:
         de:76:91:d3:3c:d8:f7:26:40:fd:b6:66:8b:51:74:f5:ed:96:
         71:37:56:75:01:1c:7f:56:ba:4e:6e:c4:06:54:fe:a8:e3:4b:
         47:2d:a9:6a:10:d5:05:84:12:37:b1:47:39:da:5d:ef:34:a4:
         4c:ee:4b:60
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjkvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEygwNGExYmMyZDUyNGM3
ZDY2NzU4ZWZjMGNiMTExNGVlZjJlNTM2OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgwiDX9fHtDwLjP8zd3I3nfdtRFPQ5QUUhO1GWqpTFIFh3PHc
A7oFVTjoMCIUTFmCcwzAA2TTqu0W51N6C/EsM3dsXWcXOnrwA4HW1Eb8mQp7ESJ+
q5VjRIXNP1YsctrLO1wzyYAeeLqsjV50p40wqnWo65DBiuRbui5MjG5ELZS8iU3h
BMu0WL0Zdmb+z0C/CmSJ/y7A62t8dDfu19bcbVXjlKScbXpq3sK6OuIWNnO5Iv51
hUL0KPf29nXU2DUgBni/8W1NYFRDw+1EX7lz9XNgY2wB0zCZe14TRgZU8Eawmwl+
9fpZCfpHdbF2IlAInIIYdD6OCYnh+r4g2Aic/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIgLI1C8vst/ef/hftOfPf2sS5zeMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzA0YTFiYzJkNTI0YzdkNjY3NThlZmMwY2IxMTE0ZWVmMmU1MzY5MGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhEcjANBgkqhkiG9w0BAQsFAAOCAQEASBnBbwH4gy5ET7Bu
FEIm1JKc5RhRbCCFDpLERm7BXdR/CtCR5/OZ2oLumufskLJVG7IfFIAM6vG+Z1G+
c7rbhCfIwe3y46HbfpdGZvH6trqPyFCH/Wd/1ALYcugmBYDOjw+quNoqANhPAKYD
uOyNW+YdMYi4xJTNo8QaxfkwmoDhaQM+636toPWM/ru7v8+Q4I1FBz/qshOpyii6
8t+zEqvw4/B8DuT/FvRZJEt2gAqWw14cSYh4rNIRpL8bmf7A3yZrdMur3naR0zzY
9yZA/bZmi1F09e2WcTdWdQEcf1a6Tm7EBlT+qONLRy2pahDVBYQSN7FHOdpd7zSk
TO5LYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org