Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/0ee55757f7d580d2e134bf890a2a1f76a1ca4f73.roa
File:                     0ee55757f7d580d2e134bf890a2a1f76a1ca4f73.roa (raw, json)
Hash identifier:          MHEeBFCjgeprCDz1/727MmVATABZua9Rex0d2CgWtQQ=
Subject key identifier:   C1:B2:D0:9F:03:BE:08:C8:45:7F:30:D6:25:7D:29:4E:92:68:E6:19
Certificate issuer:       /CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
Certificate serial:       093E9E
Authority key identifier: 01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/0ee55757f7d580d2e134bf890a2a1f76a1ca4f73.roa
Signing time:             Sun 23 Apr 2023 02:41:42 +0000
ROA not before:           Sat 22 Apr 2023 02:41:41 +0000
ROA not after:            Wed 23 Apr 2025 02:41:41 +0000
asID:                     269919
IP address blocks:        200.115.96.0/24 maxlen: 24
                          200.115.97.0/24 maxlen: 24
                          200.115.98.0/24 maxlen: 24
                          200.115.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605854 (0x93e9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6
        Validity
            Not Before: Apr 22 02:41:41 2023 GMT
            Not After : Apr 23 02:41:41 2025 GMT
        Subject: CN=0ee55757f7d580d2e134bf890a2a1f76a1ca4f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:61:37:ef:de:6d:5e:22:56:3c:c9:08:70:
                    9a:39:02:7b:62:a1:e8:a0:0e:b7:0e:d6:8d:b7:b5:
                    4f:62:cc:5d:02:e2:5c:ad:cb:52:3f:d1:0d:4c:e6:
                    0e:35:bd:ff:11:ab:f8:6b:29:38:b5:10:5a:e6:5e:
                    0b:3f:cd:d5:3e:9c:fe:fe:45:9d:91:d7:88:7a:85:
                    73:4e:56:f3:8e:94:e5:c1:c0:fe:29:34:ce:b0:98:
                    e8:f7:48:ab:d6:9c:ff:88:a6:0b:89:0f:6d:44:b6:
                    cc:f0:6f:8d:f7:7f:ad:59:6d:33:d7:17:be:c2:1c:
                    65:9d:1a:b1:78:bb:dc:36:5b:ee:e6:db:ac:92:7e:
                    dd:30:fb:b9:38:82:d7:ee:5f:25:b9:de:63:c2:20:
                    65:89:cf:b1:f6:ed:27:dd:ef:50:16:f0:2b:86:36:
                    d5:7e:f3:ad:c2:7b:77:74:0a:3b:04:da:80:3c:ab:
                    28:1d:cd:bc:c2:aa:f0:b9:5e:08:a5:7f:f6:01:5b:
                    b8:82:4f:f1:17:14:22:a1:fb:c0:b9:d8:99:a2:93:
                    8e:44:8b:49:80:3a:98:37:a1:59:74:1f:75:4d:8b:
                    2d:36:d7:f4:bd:a2:b0:f1:ba:84:79:26:cb:70:77:
                    99:19:d8:ee:89:86:5d:7f:c5:0d:13:23:ca:bc:fa:
                    43:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B2:D0:9F:03:BE:08:C8:45:7F:30:D6:25:7D:29:4E:92:68:E6:19
            X509v3 Authority Key Identifier:
                keyid:01:EC:ED:84:71:BF:F5:D7:89:74:1B:59:3F:86:DA:BA:09:70:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/0ee55757f7d580d2e134bf890a2a1f76a1ca4f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed62acef-68ee-439e-b426-ebbc9500eae0/d0a09d5f0a337b3d6f401dfb1fa8382ee3ba81c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:56:1c:1a:f2:e0:00:3b:aa:b5:ec:fb:ef:5c:e5:6d:9c:9c:
         b6:22:3b:d5:e5:94:59:b6:3a:28:f2:88:64:f9:25:72:ba:69:
         ab:1c:82:1d:18:46:64:26:00:b4:19:9d:2e:00:8f:51:3c:aa:
         23:7d:e5:f0:ab:5a:ec:88:0a:d5:ef:06:2f:f7:6e:df:30:b2:
         42:d9:42:56:dc:70:7e:ca:2c:b8:87:8b:e8:4c:d8:df:88:f1:
         90:b2:1d:61:6f:8f:76:74:f0:04:c1:55:e0:bc:a1:d4:00:91:
         0d:a3:cf:8a:d6:c5:05:37:4a:b5:18:10:a9:14:04:90:f8:c0:
         b9:c6:10:e4:5d:62:b9:8a:32:df:93:05:49:cd:75:43:52:62:
         03:db:b2:78:93:79:46:50:4f:09:54:9c:21:38:66:05:e4:21:
         90:48:b7:bc:0d:aa:17:24:21:b2:ca:d3:03:e0:46:a2:95:a9:
         75:4a:c3:8f:60:b7:a3:fb:de:82:36:4b:18:d7:9a:17:ee:2b:
         1f:0a:c0:06:c7:37:5d:1b:ec:0d:8c:2b:3d:11:27:b7:5b:38:
         b9:ab:e1:c4:cb:ee:1f:b6:43:2b:04:cb:98:b2:b7:9d:87:98:
         94:2f:3d:5d:41:7e:35:69:ee:89:47:20:f8:3f:ba:55:5c:03:
         75:49:61:92
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCT6eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
YTA5ZDVmMGEzMzdiM2Q2ZjQwMWRmYjFmYTgzODJlZTNiYTgxYzYwHhcNMjMwNDIy
MDI0MTQxWhcNMjUwNDIzMDI0MTQxWjAzMTEwLwYDVQQDEygwZWU1NTc1N2Y3ZDU4
MGQyZTEzNGJmODkwYTJhMWY3NmExY2E0ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiFphN+/ebV4iVjzJCHCaOQJ7YqHooA63DtaNt7VPYsxdAuJc
rctSP9ENTOYONb3/Eav4ayk4tRBa5l4LP83VPpz+/kWdkdeIeoVzTlbzjpTlwcD+
KTTOsJjo90ir1pz/iKYLiQ9tRLbM8G+N93+tWW0z1xe+whxlnRqxeLvcNlvu5tus
kn7dMPu5OILX7l8lud5jwiBlic+x9u0n3e9QFvArhjbVfvOtwnt3dAo7BNqAPKso
Hc28wqrwuV4IpX/2AVu4gk/xFxQiofvAudiZopOORItJgDqYN6FZdB91TYstNtf0
vaKw8bqEeSbLcHeZGdjuiYZdf8UNEyPKvPpD0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMGy0J8DvgjIRX8w1iV9KU6SaOYZMB8GA1UdIwQYMBaAFAHs7YRxv/XXiXQb
WT+G2roJcGTtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDBhMDlk
NWYwYTMzN2IzZDZmNDAxZGZiMWZhODM4MmVlM2JhODFjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQ2MmFjZWYtNjhlZS00MzllLWI0MjYtZWJiYzk1
MDBlYWUwLzBlZTU1NzU3ZjdkNTgwZDJlMTM0YmY4OTBhMmExZjc2YTFjYTRmNzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDYyYWNlZi02OGVlLTQzOWUtYjQyNi1lYmJj
OTUwMGVhZTAvZDBhMDlkNWYwYTMzN2IzZDZmNDAxZGZiMWZhODM4MmVlM2JhODFj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAshzYDANBgkqhkiG9w0BAQsFAAOCAQEAmVYcGvLgADuqtez7
71zlbZyctiI71eWUWbY6KPKIZPklcrppqxyCHRhGZCYAtBmdLgCPUTyqI33l8Kta
7IgK1e8GL/du3zCyQtlCVtxwfsosuIeL6EzY34jxkLIdYW+PdnTwBMFV4Lyh1ACR
DaPPitbFBTdKtRgQqRQEkPjAucYQ5F1iuYoy35MFSc11Q1JiA9uyeJN5RlBPCVSc
IThmBeQhkEi3vA2qFyQhssrTA+BGopWpdUrDj2C3o/vegjZLGNeaF+4rHwrABsc3
XRvsDYwrPREnt1s4uavhxMvuH7ZDKwTLmLK3nYeYlC89XUF+NWnuiUcg+D+6VVwD
dUlhkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org