Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4f974addabff7ed5b0a4da0d974c841ba2527536.roa
File:                     4f974addabff7ed5b0a4da0d974c841ba2527536.roa (raw, json)
Hash identifier:          YhyvX+v7Pkiogc1VYx7Jfmo2qmg6Vla8d+a0cJ9COiU=
Subject key identifier:   6E:91:81:EF:41:C4:A6:AF:6F:8A:6B:6A:7F:3C:47:5C:7E:4C:93:9E
Certificate issuer:       /CN=4de2fdbf6fcc2301966d1f6b825964d2021c4550
Certificate serial:       0772
Authority key identifier: C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4f974addabff7ed5b0a4da0d974c841ba2527536.roa
Signing time:             Thu 01 Jul 2021 17:17:44 +0000
ROA not before:           Thu 01 Jul 2021 03:00:00 +0000
ROA not after:            Sat 01 Jul 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        200.1.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de2fdbf6fcc2301966d1f6b825964d2021c4550
        Validity
            Not Before: Jul  1 03:00:00 2021 GMT
            Not After : Jul  1 03:00:00 2023 GMT
        Subject: CN=4f974addabff7ed5b0a4da0d974c841ba2527536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:ff:74:99:68:e3:28:67:87:67:45:f1:3a:
                    78:c9:2a:e2:df:e7:88:3b:e9:c7:b1:00:5f:0e:f9:
                    93:10:d6:68:1c:bb:fe:c4:32:d9:8b:b5:f4:a7:d3:
                    9a:0f:47:b5:c0:d9:6a:f3:e9:43:3e:fb:1e:d5:65:
                    fc:1a:33:52:f8:dd:63:00:e5:20:b2:61:e2:f8:2b:
                    80:cd:8e:ee:91:25:8c:bf:65:c5:2e:4b:3a:f0:61:
                    06:89:86:c1:ce:87:21:00:a5:46:75:fa:95:b9:57:
                    67:d8:06:76:52:7b:4b:a5:01:84:f9:1e:06:50:e8:
                    c4:38:7b:aa:32:e7:2b:0a:1a:20:6c:54:39:63:dc:
                    98:a2:d6:98:54:8b:f3:3c:3b:fd:e1:f2:49:64:a9:
                    07:53:e9:37:4e:ff:fe:f8:0d:3b:e5:3c:2e:b7:41:
                    52:0f:6f:b6:bd:6e:d0:07:16:46:b1:4a:d3:a3:60:
                    92:f2:17:a0:07:a5:02:5f:0c:53:b8:36:48:b3:3d:
                    be:fe:1e:cb:0d:39:0c:12:86:31:02:39:7e:5f:64:
                    41:0b:ba:db:92:72:4a:fe:5b:97:29:0e:8f:af:2f:
                    29:a4:6e:84:4b:ad:3c:e3:ce:cf:14:19:a4:fb:ff:
                    3f:5f:af:9d:9e:6c:52:f5:3a:b8:b0:d0:63:e7:2a:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:81:EF:41:C4:A6:AF:6F:8A:6B:6A:7F:3C:47:5C:7E:4C:93:9E
            X509v3 Authority Key Identifier:
                keyid:C6:21:C1:C5:7C:06:21:B6:CC:AE:25:96:22:8F:91:C9:8E:1B:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4de2fdbf6fcc2301966d1f6b825964d2021c4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4f974addabff7ed5b0a4da0d974c841ba2527536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985813ec-edd0-40d2-a97f-76d4e18d3511/4de2fdbf6fcc2301966d1f6b825964d2021c4550.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:42:2a:dc:30:dc:31:09:1a:91:5e:90:4b:8e:ac:6c:75:20:
         3e:5e:26:d0:ec:d9:4a:ae:67:31:6c:c2:0d:86:7d:50:61:5d:
         86:8d:c9:8c:8c:0e:67:a6:42:73:6a:3f:5e:f7:51:90:75:b4:
         66:72:9e:4d:1c:47:a8:89:c7:b6:52:09:a6:24:12:53:e6:08:
         a2:2b:c9:76:f2:d0:b3:f3:55:aa:35:f0:52:06:59:82:86:57:
         e4:4d:24:5f:ee:ff:19:01:8c:85:07:a5:5f:cc:d2:8f:e4:bf:
         86:fa:db:ca:49:2b:ec:04:9d:2d:5f:f7:6b:9f:df:ac:06:8f:
         e2:15:74:69:b0:2a:cb:3f:4b:ed:b9:cd:ac:46:aa:63:2b:32:
         ed:92:b8:90:af:d9:a9:58:57:dc:96:f0:14:cb:39:95:2b:86:
         e5:bf:48:cb:db:8f:5f:d3:50:c3:90:b2:3d:ac:cb:4d:4e:ad:
         4a:e9:3c:0c:e4:c3:08:ea:bb:61:7f:8b:70:cf:71:c8:c5:f4:
         a8:9d:06:b2:2d:a0:5a:8a:a7:da:48:77:e3:5a:a5:75:8c:8b:
         d5:1b:17:56:3a:75:c9:81:41:ef:dc:0d:b2:8e:62:9d:d3:ad:
         5c:2b:50:b2:ea:4f:8f:5d:40:ab:b1:0e:7e:bc:f5:a5:31:57:
         41:24:69:5e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNGRl
MmZkYmY2ZmNjMjMwMTk2NmQxZjZiODI1OTY0ZDIwMjFjNDU1MDAeFw0yMTA3MDEw
MzAwMDBaFw0yMzA3MDEwMzAwMDBaMDMxMTAvBgNVBAMTKDRmOTc0YWRkYWJmZjdl
ZDViMGE0ZGEwZDk3NGM4NDFiYTI1Mjc1MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8//90mWjjKGeHZ0XxOnjJKuLf54g76cexAF8O+ZMQ1mgcu/7E
MtmLtfSn05oPR7XA2Wrz6UM++x7VZfwaM1L43WMA5SCyYeL4K4DNju6RJYy/ZcUu
SzrwYQaJhsHOhyEApUZ1+pW5V2fYBnZSe0ulAYT5HgZQ6MQ4e6oy5ysKGiBsVDlj
3Jii1phUi/M8O/3h8klkqQdT6TdO//74DTvlPC63QVIPb7a9btAHFkaxStOjYJLy
F6AHpQJfDFO4NkizPb7+HssNOQwShjECOX5fZEELutuSckr+W5cpDo+vLymkboRL
rTzjzs8UGaT7/z9fr52ebFL1Oriw0GPnKmP9AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUbpGB70HEpq9vimtqfzxHXH5Mk54wHwYDVR0jBBgwFoAUxiHBxXwGIbbMriWW
Io+RyY4bRCswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80ZGUyZmRi
ZjZmY2MyMzAxOTY2ZDFmNmI4MjU5NjRkMjAyMWM0NTUwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85ODU4MTNlYy1lZGQwLTQwZDItYTk3Zi03NmQ0ZTE4
ZDM1MTEvNGY5NzRhZGRhYmZmN2VkNWIwYTRkYTBkOTc0Yzg0MWJhMjUyNzUzNi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk4NTgxM2VjLWVkZDAtNDBkMi1hOTdmLTc2ZDRl
MThkMzUxMS80ZGUyZmRiZjZmY2MyMzAxOTY2ZDFmNmI4MjU5NjRkMjAyMWM0NTUw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAyAFWMA0GCSqGSIb3DQEBCwUAA4IBAQB4QircMNwxCRqRXpBL
jqxsdSA+XibQ7NlKrmcxbMINhn1QYV2GjcmMjA5npkJzaj9e91GQdbRmcp5NHEeo
ice2UgmmJBJT5giiK8l28tCz81WqNfBSBlmChlfkTSRf7v8ZAYyFB6VfzNKP5L+G
+tvKSSvsBJ0tX/drn9+sBo/iFXRpsCrLP0vtuc2sRqpjKzLtkriQr9mpWFfclvAU
yzmVK4blv0jL249f01DDkLI9rMtNTq1K6TwM5MMI6rthf4twz3HIxfSonQayLaBa
iqfaSHfjWqV1jIvVGxdWOnXJgUHv3A2yjmKd061cK1Cy6k+PXUCrsQ5+vPWlMVdB
JGle
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org