Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5f2c1e9991e057e999775f2a4bc65213ade9870f.roa
File:                     5f2c1e9991e057e999775f2a4bc65213ade9870f.roa (raw, json)
Hash identifier:          MKa6GcHs/Eojj0ScDb3a0FlvWJ9ah2383zswyf6FajY=
Subject key identifier:   A7:F5:73:42:7F:AC:DE:20:8C:E1:7B:7B:EC:32:9D:F2:95:CA:48:C6
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       1E7705
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5f2c1e9991e057e999775f2a4bc65213ade9870f.roa
Signing time:             Fri 27 Jan 2023 13:07:03 +0000
ROA not before:           Thu 26 Jan 2023 13:06:55 +0000
ROA not after:            Thu 27 Jan 2028 13:06:55 +0000
asID:                     15274
IP address blocks:        200.61.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996549 (0x1e7705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jan 26 13:06:55 2023 GMT
            Not After : Jan 27 13:06:55 2028 GMT
        Subject: CN=5f2c1e9991e057e999775f2a4bc65213ade9870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:ae:fa:2e:fd:88:22:8e:52:5c:8e:3f:b9:
                    70:03:0a:a4:91:27:cd:47:f0:c8:5c:72:f4:ea:b1:
                    bf:29:8e:46:36:ff:3a:40:71:b4:91:d7:f4:74:20:
                    3a:20:0c:34:1f:e3:69:87:30:8d:c3:ff:7f:22:35:
                    f8:62:8a:78:75:cd:b7:71:ea:ec:ad:dc:3a:27:dc:
                    6a:59:3c:4d:a0:6c:66:e1:e6:d1:f4:69:c3:7a:dc:
                    db:4a:1a:e3:1e:90:92:55:6f:c3:d8:44:94:33:8a:
                    ad:2e:6f:0b:13:dd:e9:b0:46:d9:b5:93:a2:b9:ce:
                    15:13:7d:62:da:fe:93:b4:12:d4:0f:20:30:60:ed:
                    04:78:26:b6:a0:fc:ff:f2:60:34:6b:2f:10:ec:b0:
                    c2:d8:b3:53:ec:d2:e6:bd:df:da:5a:ae:8e:12:0d:
                    74:bb:99:fb:73:46:d9:2a:6c:27:71:45:63:9f:c6:
                    55:6a:c9:99:1f:9c:73:d2:2b:28:f3:4e:cc:95:f3:
                    3f:21:8c:37:9c:f9:7f:ea:a1:c9:e4:92:d4:e0:39:
                    90:a1:c6:8d:46:3c:a5:30:0d:79:c3:a9:60:11:1f:
                    0b:04:42:8e:b3:78:ec:02:ef:ac:31:cd:6a:df:b1:
                    76:01:25:e4:7c:66:c3:c1:8d:37:c6:9d:c0:0d:c7:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:73:42:7F:AC:DE:20:8C:E1:7B:7B:EC:32:9D:F2:95:CA:48:C6
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5f2c1e9991e057e999775f2a4bc65213ade9870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:86:c4:6b:9a:e2:c2:b6:67:07:bb:ee:31:e2:b2:5e:b7:
         4a:3b:ee:3a:1c:4c:8f:8b:a6:30:c2:48:bf:68:d8:9f:e2:34:
         6d:05:e7:38:4f:65:f3:8d:cb:ee:b4:ae:72:eb:e1:43:9d:61:
         4e:8f:ac:3c:fa:01:85:8b:78:23:0e:d2:6a:bc:01:5f:2a:e7:
         61:db:18:eb:ed:f7:21:6e:8b:5a:16:e5:fe:68:c5:60:36:1c:
         8e:0a:1c:b7:a2:be:14:b8:76:94:02:55:b4:b6:39:0f:5c:43:
         5c:8c:0a:92:53:4f:59:a4:ae:82:0b:fb:1b:c4:b9:e3:75:99:
         57:73:6b:b2:ff:57:e8:bd:97:d1:25:e5:ef:3b:bc:4e:c2:23:
         c3:49:5c:b5:20:f6:cb:4f:26:93:a3:58:49:1d:2f:b4:9e:dd:
         e0:23:f3:c5:38:4c:49:ea:bc:5c:04:8c:c4:85:2a:54:ab:5f:
         0a:0d:2b:5b:fc:2d:94:09:77:a4:53:de:c6:90:de:89:02:94:
         ae:fc:4d:76:6b:e1:7b:bc:73:46:f2:27:e4:c4:21:d8:bf:ba:
         97:b5:7d:1e:ea:76:ac:e3:3f:15:9a:65:d3:0e:f7:29:0b:43:
         df:04:fd:b6:23:e5:9b:b8:4f:7e:9c:51:5c:7a:5d:b9:c0:64:
         7b:68:cc:3d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHncFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjMwMTI2
MTMwNjU1WhcNMjgwMTI3MTMwNjU1WjAzMTEwLwYDVQQDEyg1ZjJjMWU5OTkxZTA1
N2U5OTk3NzVmMmE0YmM2NTIxM2FkZTk4NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs+mu+i79iCKOUlyOP7lwAwqkkSfNR/DIXHL06rG/KY5GNv86
QHG0kdf0dCA6IAw0H+NphzCNw/9/IjX4Yop4dc23cersrdw6J9xqWTxNoGxm4ebR
9GnDetzbShrjHpCSVW/D2ESUM4qtLm8LE93psEbZtZOiuc4VE31i2v6TtBLUDyAw
YO0EeCa2oPz/8mA0ay8Q7LDC2LNT7NLmvd/aWq6OEg10u5n7c0bZKmwncUVjn8ZV
asmZH5xz0iso807MlfM/IYw3nPl/6qHJ5JLU4DmQocaNRjylMA15w6lgER8LBEKO
s3jsAu+sMc1q37F2ASXkfGbDwY03xp3ADcf+jQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKf1c0J/rN4gjOF7e+wynfKVykjGMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzVmMmMxZTk5OTFlMDU3ZTk5OTc3NWYyYTRiYzY1MjEzYWRlOTg3MGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg9sTANBgkqhkiG9w0BAQsFAAOCAQEAOwKGxGua4sK2Zwe7
7jHisl63SjvuOhxMj4umMMJIv2jYn+I0bQXnOE9l843L7rSucuvhQ51hTo+sPPoB
hYt4Iw7SarwBXyrnYdsY6+33IW6LWhbl/mjFYDYcjgoct6K+FLh2lAJVtLY5D1xD
XIwKklNPWaSuggv7G8S543WZV3Nrsv9X6L2X0SXl7zu8TsIjw0lctSD2y08mk6NY
SR0vtJ7d4CPzxThMSeq8XASMxIUqVKtfCg0rW/wtlAl3pFPexpDeiQKUrvxNdmvh
e7xzRvIn5MQh2L+6l7V9Hup2rOM/FZpl0w73KQtD3wT9tiPlm7hPfpxRXHpducBk
e2jMPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org