Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/61331c50c626b292dfaa1b550fb50f22ac45cd60.roa
File:                     61331c50c626b292dfaa1b550fb50f22ac45cd60.roa (raw, json)
Hash identifier:          xgLVjhp+8m9W4ZSo3PtO9OMGDeHNR6gLu2PUratlLcw=
Subject key identifier:   B7:C4:61:A1:37:05:75:20:F7:7D:8D:41:6B:D2:6D:86:92:30:4B:0D
Certificate issuer:       /CN=324de8920173d39f7e57f07a22d818efa49b5475
Certificate serial:       1211ED
Authority key identifier: DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/61331c50c626b292dfaa1b550fb50f22ac45cd60.roa
Signing time:             Wed 17 May 2023 08:30:01 +0000
ROA not before:           Tue 16 May 2023 08:30:01 +0000
ROA not after:            Thu 15 May 2025 08:30:01 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184237 (0x1211ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324de8920173d39f7e57f07a22d818efa49b5475
        Validity
            Not Before: May 16 08:30:01 2023 GMT
            Not After : May 15 08:30:01 2025 GMT
        Subject: CN=61331c50c626b292dfaa1b550fb50f22ac45cd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:3e:dc:38:e5:25:21:6a:1c:02:54:77:0a:
                    b0:d2:de:46:b5:85:a9:34:f5:73:72:31:52:37:96:
                    d9:af:bb:2a:fc:e5:46:fa:c9:ac:5f:ff:c9:30:e1:
                    23:d7:da:52:34:b3:60:67:11:10:84:03:df:82:e6:
                    d7:f5:f6:d2:2e:66:08:8b:ee:5f:4c:81:38:82:30:
                    a7:6e:f7:71:9b:83:e1:fd:48:80:72:c8:74:42:b8:
                    3f:40:7f:5b:ac:16:ed:bf:15:46:01:81:38:d3:d3:
                    c5:81:ae:50:55:07:ee:b6:87:81:0e:2d:81:7e:ee:
                    68:fc:9b:45:92:32:fe:b6:ad:1c:60:f5:ec:ed:94:
                    a2:d7:99:f3:6d:57:10:6c:5c:e8:98:15:8e:4c:e1:
                    9f:8f:1f:25:e8:2e:d7:f3:c7:6c:5c:d6:ef:1e:79:
                    51:ad:7c:d3:bc:33:47:f9:13:2e:88:0f:33:b9:9d:
                    df:b6:3b:69:47:99:00:db:e7:ad:e4:c9:c6:84:7a:
                    b0:60:02:cd:fc:61:15:0b:ab:f0:c0:1a:d2:aa:00:
                    b6:63:28:04:8d:38:11:26:ce:cc:46:8d:3e:ce:ca:
                    b8:b5:f3:a0:e5:c8:27:0a:53:53:1a:13:44:e9:12:
                    67:e3:5f:6b:5f:c5:e2:e8:a5:2b:87:71:a8:5f:c6:
                    6b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:61:A1:37:05:75:20:F7:7D:8D:41:6B:D2:6D:86:92:30:4B:0D
            X509v3 Authority Key Identifier:
                keyid:DB:87:53:92:F1:F6:36:60:C3:8D:0B:02:48:CF:61:31:D6:70:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/324de8920173d39f7e57f07a22d818efa49b5475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/61331c50c626b292dfaa1b550fb50f22ac45cd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/171fbb0a-3d2e-49a7-869d-e8c2b4c1f070/324de8920173d39f7e57f07a22d818efa49b5475.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:7a:39:c5:ef:af:c9:0d:3f:2f:fb:3b:2e:b0:78:0d:fd:
         be:a7:07:41:dc:38:9e:00:28:41:59:36:93:1b:bd:a1:b9:2e:
         14:9b:23:ea:a1:1b:de:3e:97:e2:00:3d:e1:40:a7:41:44:25:
         61:6e:d8:39:ff:6e:7a:94:d1:0b:8a:2a:35:5a:ef:b0:ab:a5:
         94:0b:f3:30:1e:8f:d4:bc:17:17:43:06:fb:41:f0:e7:c0:d0:
         a3:f2:b8:67:ff:17:7e:9b:27:ef:57:96:a6:ce:24:32:69:37:
         28:5f:fc:ab:91:4a:c5:b7:7b:fa:02:fd:c3:6a:bb:c0:ff:73:
         d5:19:b0:d0:b0:a2:b1:23:36:d4:3b:fe:80:e1:04:9a:7f:a9:
         95:85:31:ca:36:d0:8d:a0:c5:f0:a8:0a:5e:92:2e:3d:4b:f9:
         ac:f6:e9:ae:67:50:8b:85:43:b6:e6:3a:09:e7:9d:38:c9:c0:
         7f:44:73:0b:1e:ce:6c:3d:fd:46:a0:70:e3:9c:59:f5:22:dc:
         9a:58:16:ef:10:5f:4f:5c:b5:bf:04:f5:f1:fd:91:f1:ac:44:
         e2:81:73:d5:58:c9:85:5a:37:0a:00:a8:e6:23:85:d2:45:1d:
         52:58:90:ec:e6:fe:ce:be:0d:41:87:c3:74:0b:f5:e3:e9:59:
         72:20:56:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEhHtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMy
NGRlODkyMDE3M2QzOWY3ZTU3ZjA3YTIyZDgxOGVmYTQ5YjU0NzUwHhcNMjMwNTE2
MDgzMDAxWhcNMjUwNTE1MDgzMDAxWjAzMTEwLwYDVQQDEyg2MTMzMWM1MGM2MjZi
MjkyZGZhYTFiNTUwZmI1MGYyMmFjNDVjZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzFY+3DjlJSFqHAJUdwqw0t5GtYWpNPVzcjFSN5bZr7sq/OVG
+smsX//JMOEj19pSNLNgZxEQhAPfgubX9fbSLmYIi+5fTIE4gjCnbvdxm4Ph/UiA
csh0Qrg/QH9brBbtvxVGAYE409PFga5QVQfutoeBDi2Bfu5o/JtFkjL+tq0cYPXs
7ZSi15nzbVcQbFzomBWOTOGfjx8l6C7X88dsXNbvHnlRrXzTvDNH+RMuiA8zuZ3f
tjtpR5kA2+et5MnGhHqwYALN/GEVC6vwwBrSqgC2YygEjTgRJs7MRo0+zsq4tfOg
5cgnClNTGhNE6RJn419rX8Xi6KUrh3GoX8ZrswIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLfEYaE3BXUg932NQWvSbYaSMEsNMB8GA1UdIwQYMBaAFNuHU5Lx9jZgw40L
AkjPYTHWcJBvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzI0ZGU4
OTIwMTczZDM5ZjdlNTdmMDdhMjJkODE4ZWZhNDliNTQ3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTcxZmJiMGEtM2QyZS00OWE3LTg2OWQtZThjMmI0
YzFmMDcwLzYxMzMxYzUwYzYyNmIyOTJkZmFhMWI1NTBmYjUwZjIyYWM0NWNkNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNzFmYmIwYS0zZDJlLTQ5YTctODY5ZC1lOGMy
YjRjMWYwNzAvMzI0ZGU4OTIwMTczZDM5ZjdlNTdmMDdhMjJkODE4ZWZhNDliNTQ3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh8eDANBgkqhkiG9w0BAQsFAAOCAQEAPx96OcXvr8kNPy/7
Oy6weA39vqcHQdw4ngAoQVk2kxu9obkuFJsj6qEb3j6X4gA94UCnQUQlYW7YOf9u
epTRC4oqNVrvsKullAvzMB6P1LwXF0MG+0Hw58DQo/K4Z/8Xfpsn71eWps4kMmk3
KF/8q5FKxbd7+gL9w2q7wP9z1Rmw0LCisSM21Dv+gOEEmn+plYUxyjbQjaDF8KgK
XpIuPUv5rPbprmdQi4VDtuY6CeedOMnAf0RzCx7ObD39RqBw45xZ9SLcmlgW7xBf
T1y1vwT18f2R8axE4oFz1VjJhVo3CgCo5iOF0kUdUliQ7Ob+zr4NQYfDdAv14+lZ
ciBWYg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org