Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/596945b118288e50088ea09fcc419aca802bb84a.roa
File:                     596945b118288e50088ea09fcc419aca802bb84a.roa (raw, json)
Hash identifier:          GWPlrud0I4RAPPc8ti2b9OR/E4PKamKZ6V3/o12kPVU=
Subject key identifier:   67:2A:45:12:D4:3C:24:13:C7:E7:B3:D2:FF:8D:E1:6C:3C:94:34:F3
Certificate issuer:       /CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Certificate serial:       01B9A7
Authority key identifier: BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/596945b118288e50088ea09fcc419aca802bb84a.roa
Signing time:             Tue 13 Apr 2021 14:56:43 +0000
ROA not before:           Tue 13 Apr 2021 03:00:00 +0000
ROA not after:            Mon 13 Apr 2026 03:00:00 +0000
asID:                     197991
IP address blocks:        200.112.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113063 (0x1b9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Validity
            Not Before: Apr 13 03:00:00 2021 GMT
            Not After : Apr 13 03:00:00 2026 GMT
        Subject: CN=596945b118288e50088ea09fcc419aca802bb84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:d1:51:5c:3e:4c:cc:f3:78:e5:8b:14:10:
                    b1:4e:8d:f9:fe:22:da:d3:ee:25:16:cd:db:0e:e8:
                    02:f5:8a:a2:52:e0:43:5e:43:57:26:2c:63:59:ce:
                    4b:5d:ff:c2:14:20:47:c7:5f:bc:cc:16:e9:30:a3:
                    f6:d1:aa:8e:b0:8d:25:b5:fb:64:77:dc:0c:c8:a7:
                    96:dd:6f:76:fc:ad:ea:6f:dd:61:16:e6:8e:d5:39:
                    72:60:05:28:e9:e2:d4:b7:7f:b7:ee:e9:cf:98:e9:
                    01:c0:da:c4:4a:23:30:58:48:12:c6:d0:8a:38:d3:
                    1a:92:f1:b4:60:e2:7a:46:bb:df:a9:01:ba:7c:14:
                    74:03:a3:6b:14:e1:ab:c3:28:55:55:5f:47:2d:cf:
                    31:3c:54:50:90:33:1c:1d:29:a6:15:cb:3f:a7:62:
                    5a:e6:ff:f5:90:82:19:1f:48:77:5a:cb:4d:59:0d:
                    21:4d:e4:64:6b:33:77:b5:1a:44:ad:c0:9b:7d:23:
                    47:32:b6:ae:b6:60:ee:97:ae:6c:83:b7:dc:36:3e:
                    f5:0f:bd:c9:b8:d7:bf:cc:b6:62:db:71:19:97:b0:
                    12:67:1d:53:29:dc:28:80:35:6b:b8:09:10:6c:f8:
                    05:e1:11:6f:ea:98:dc:b0:a6:4b:77:7e:f2:b5:e2:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:45:12:D4:3C:24:13:C7:E7:B3:D2:FF:8D:E1:6C:3C:94:34:F3
            X509v3 Authority Key Identifier:
                keyid:BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/596945b118288e50088ea09fcc419aca802bb84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:08:08:54:12:4f:0a:93:82:dd:26:f7:be:f3:14:1c:9b:
         86:ae:a9:82:87:6a:06:31:c5:b5:41:10:9e:51:6a:70:1c:b9:
         12:26:2c:21:5c:8f:91:c7:1c:76:58:a8:7c:ce:64:49:0b:ab:
         68:3e:7a:b9:97:23:f5:bd:dc:b4:71:cb:0e:4b:22:6c:25:8d:
         95:13:be:73:78:38:ce:7e:53:64:2d:0b:ae:79:8f:4d:d7:19:
         1c:e1:9f:30:53:7f:f8:04:36:94:71:1b:00:0b:9d:c2:11:90:
         41:ab:4d:e5:47:77:58:68:29:65:7b:a5:88:3e:8a:f0:ce:88:
         a1:c0:9c:80:2b:85:7c:20:f8:fc:bf:8e:86:ee:6a:8a:91:cc:
         59:38:d0:af:3d:39:b2:0a:f3:26:00:b1:df:7a:10:a8:fe:af:
         1d:ce:8a:7a:c0:50:f4:90:69:c4:60:8f:63:8a:31:bb:e4:00:
         94:ec:84:78:82:c8:64:52:54:64:83:53:6a:a5:98:ce:2f:65:
         4e:3a:21:fe:6c:3c:3d:aa:94:96:41:5a:6c:8f:ef:f6:8b:aa:
         87:f9:34:92:4d:9b:35:e8:25:0f:7a:a2:65:ff:9f:0a:c5:67:
         87:8d:49:59:27:fa:4a:ae:bf:b1:78:53:74:58:16:2c:ee:4b:
         2f:d1:f7:07
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAbmnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
MGRmN2Y3OThjZDM1ZTM4Njc5ZDYyNWZkM2EzYmM3NWFhNmI1ZjIwHhcNMjEwNDEz
MDMwMDAwWhcNMjYwNDEzMDMwMDAwWjAzMTEwLwYDVQQDEyg1OTY5NDViMTE4Mjg4
ZTUwMDg4ZWEwOWZjYzQxOWFjYTgwMmJiODRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqq3RUVw+TMzzeOWLFBCxTo35/iLa0+4lFs3bDugC9YqiUuBD
XkNXJixjWc5LXf/CFCBHx1+8zBbpMKP20aqOsI0ltftkd9wMyKeW3W92/K3qb91h
FuaO1TlyYAUo6eLUt3+37unPmOkBwNrESiMwWEgSxtCKONMakvG0YOJ6RrvfqQG6
fBR0A6NrFOGrwyhVVV9HLc8xPFRQkDMcHSmmFcs/p2Ja5v/1kIIZH0h3WstNWQ0h
TeRkazN3tRpErcCbfSNHMrautmDul65sg7fcNj71D73JuNe/zLZi23EZl7ASZx1T
KdwogDVruAkQbPgF4RFv6pjcsKZLd37yteIgkwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGcqRRLUPCQTx+ez0v+N4Ww8lDTzMB8GA1UdIwQYMBaAFLvBD84I7jJMs/Kv
e5LK6tqnrjz0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmYwZGY3
Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODMxNzVjMWQtZjE0Ni00YWEzLWFlZWQtN2RkYzMw
MWEwYTNlLzU5Njk0NWIxMTgyODhlNTAwODhlYTA5ZmNjNDE5YWNhODAyYmI4NGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MzE3NWMxZC1mMTQ2LTRhYTMtYWVlZC03ZGRj
MzAxYTBhM2UvMmYwZGY3Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAchwzDANBgkqhkiG9w0BAQsFAAOCAQEAcqsICFQSTwqTgt0m
977zFBybhq6pgodqBjHFtUEQnlFqcBy5EiYsIVyPkcccdliofM5kSQuraD56uZcj
9b3ctHHLDksibCWNlRO+c3g4zn5TZC0LrnmPTdcZHOGfMFN/+AQ2lHEbAAudwhGQ
QatN5Ud3WGgpZXuliD6K8M6IocCcgCuFfCD4/L+Ohu5qipHMWTjQrz05sgrzJgCx
33oQqP6vHc6KesBQ9JBpxGCPY4oxu+QAlOyEeILIZFJUZINTaqWYzi9lTjoh/mw8
PaqUlkFabI/v9ouqh/k0kk2bNeglD3qiZf+fCsVnh41JWSf6Sq6/sXhTdFgWLO5L
L9H3Bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org