Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9743f22fd413a73d824b4e3162c31acfd421530c.roa
File:                     9743f22fd413a73d824b4e3162c31acfd421530c.roa (raw, json)
Hash identifier:          nSOkzbvBiaxqLeYLDIDJ9aeaCtxPcmVyGnviNxwqjvc=
Subject key identifier:   08:D1:80:4F:81:6B:C2:09:B4:A5:6F:C2:ED:C4:F7:79:4F:A0:BA:31
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       051273
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9743f22fd413a73d824b4e3162c31acfd421530c.roa
Signing time:             Thu 03 Aug 2023 16:54:31 +0000
ROA not before:           Wed 02 Aug 2023 16:54:31 +0000
ROA not after:            Sun 03 Aug 2025 16:54:31 +0000
asID:                     7418
IP address blocks:        200.90.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332403 (0x51273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Aug  2 16:54:31 2023 GMT
            Not After : Aug  3 16:54:31 2025 GMT
        Subject: CN=9743f22fd413a73d824b4e3162c31acfd421530c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:4d:4c:49:c5:38:83:c5:0f:c8:0c:a5:c1:
                    33:a5:5e:dd:78:30:3e:ee:57:44:31:b1:73:e0:0f:
                    cc:5d:20:47:02:81:9b:57:73:cc:8f:10:ac:1c:a0:
                    24:3f:1b:c7:61:c1:5c:86:aa:b3:6c:79:15:38:3c:
                    2d:f2:7b:37:a9:ca:ad:08:51:35:df:94:7c:d9:82:
                    06:bc:c8:b4:a4:ec:05:d5:41:28:f8:58:38:e5:d9:
                    26:43:7a:7d:5c:05:da:d3:1b:17:e9:d2:7e:f3:cd:
                    43:8c:a0:6f:e3:76:ae:82:68:c8:1c:76:56:d1:00:
                    b6:d5:03:c2:4d:9d:27:08:ed:1a:07:ea:cd:3d:c0:
                    04:3a:4d:c8:a0:9b:78:00:13:34:d6:6f:26:59:7f:
                    dc:ec:b1:67:38:a0:8b:ef:63:62:ff:e8:0c:7f:a4:
                    30:f6:eb:29:67:a7:d9:ab:df:3b:9d:42:c7:04:d0:
                    c2:b4:f0:02:f1:c8:04:3d:91:63:bd:44:d7:ce:08:
                    af:d8:04:2f:fa:bc:61:bd:70:3f:06:36:6c:b6:aa:
                    33:7b:ee:61:dc:65:6a:bc:8b:63:28:7d:d9:f9:26:
                    8b:07:ff:71:5e:4b:12:a6:29:99:cb:36:43:3f:be:
                    eb:06:e8:38:4b:72:2f:cb:b5:f9:ca:44:ba:ac:c8:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:80:4F:81:6B:C2:09:B4:A5:6F:C2:ED:C4:F7:79:4F:A0:BA:31
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/9743f22fd413a73d824b4e3162c31acfd421530c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:68:0c:b7:8b:83:ec:4b:27:1d:ac:53:68:03:1c:b5:8d:11:
         2f:dc:96:15:fc:ba:e5:f7:d7:8b:ae:8f:b5:0c:3f:af:6d:0c:
         23:db:72:0c:62:f2:94:90:f3:38:b8:49:4b:fc:a7:91:7e:af:
         12:24:98:34:e6:d6:4e:d5:ad:6d:ae:c8:c7:a7:6d:0f:07:cc:
         e7:d4:c3:e9:f5:93:a7:41:c5:25:f1:54:50:2c:76:f6:fb:bb:
         af:be:da:5c:94:b0:0e:d0:6a:dc:42:c6:ef:68:7d:94:53:af:
         4c:70:90:2d:fe:7e:88:b4:db:03:02:7d:51:de:31:91:98:65:
         fb:3d:02:5d:64:9c:cf:07:8c:f7:1f:b6:95:95:94:03:61:15:
         1b:5b:16:a9:51:b5:b0:25:ac:e5:6e:d6:e3:1a:03:56:ba:02:
         0a:fb:c7:a1:fc:a6:a4:ba:fb:02:e4:58:a6:69:a3:4f:fe:a2:
         be:fa:a9:fe:52:d0:e0:fe:2d:84:00:53:c4:ef:6b:c4:38:0f:
         e7:69:d7:ce:bc:64:91:a7:b0:0e:e3:c6:aa:0a:e2:ac:25:94:
         89:b1:9c:a8:94:99:21:1f:5d:5a:86:1b:68:97:3a:24:57:fb:
         7c:31:64:bc:99:59:24:51:0a:60:1b:d4:9a:ad:92:5b:4a:36:
         ec:04:d2:d8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBRJzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwODAy
MTY1NDMxWhcNMjUwODAzMTY1NDMxWjAzMTEwLwYDVQQDEyg5NzQzZjIyZmQ0MTNh
NzNkODI0YjRlMzE2MmMzMWFjZmQ0MjE1MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgGhNTEnFOIPFD8gMpcEzpV7deDA+7ldEMbFz4A/MXSBHAoGb
V3PMjxCsHKAkPxvHYcFchqqzbHkVODwt8ns3qcqtCFE135R82YIGvMi0pOwF1UEo
+Fg45dkmQ3p9XAXa0xsX6dJ+881DjKBv43augmjIHHZW0QC21QPCTZ0nCO0aB+rN
PcAEOk3IoJt4ABM01m8mWX/c7LFnOKCL72Ni/+gMf6Qw9uspZ6fZq987nULHBNDC
tPAC8cgEPZFjvUTXzgiv2AQv+rxhvXA/BjZstqoze+5h3GVqvItjKH3Z+SaLB/9x
XksSpimZyzZDP77rBug4S3Ivy7X5ykS6rMiwkwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAjRgE+Ba8IJtKVvwu3E93lPoLoxMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5Lzk3NDNmMjJmZDQxM2E3M2Q4MjRiNGUzMTYyYzMxYWNmZDQyMTUzMGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcha4DANBgkqhkiG9w0BAQsFAAOCAQEAU2gMt4uD7EsnHaxT
aAMctY0RL9yWFfy65ffXi66PtQw/r20MI9tyDGLylJDzOLhJS/ynkX6vEiSYNObW
TtWtba7Ix6dtDwfM59TD6fWTp0HFJfFUUCx29vu7r77aXJSwDtBq3ELG72h9lFOv
THCQLf5+iLTbAwJ9Ud4xkZhl+z0CXWSczweM9x+2lZWUA2EVG1sWqVG1sCWs5W7W
4xoDVroCCvvHofympLr7AuRYpmmjT/6ivvqp/lLQ4P4thABTxO9rxDgP52nXzrxk
kaewDuPGqgrirCWUibGcqJSZIR9dWoYbaJc6JFf7fDFkvJlZJFEKYBvUmq2SW0o2
7ATS2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org