Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a818b2bd1c0eba9daeb760ce3c62da63b0d7ed69.roa
File:                     a818b2bd1c0eba9daeb760ce3c62da63b0d7ed69.roa (raw, json)
Hash identifier:          nEC4LrbPvWJk2F1NH7LOMeaCtxF1y1bzSPVcammRTyI=
Subject key identifier:   BB:32:91:6F:E3:98:73:2E:27:FC:92:C7:E0:F3:72:A5:E4:41:A5:01
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       29C1D3
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a818b2bd1c0eba9daeb760ce3c62da63b0d7ed69.roa
Signing time:             Sat 16 Mar 2024 22:03:35 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736595 (0x29c1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=a818b2bd1c0eba9daeb760ce3c62da63b0d7ed69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:62:ea:25:e3:95:5f:7e:cc:79:93:46:6a:
                    1a:13:93:da:85:0b:a0:8a:c6:7f:4d:05:f0:84:90:
                    0e:f1:38:3e:23:ef:ff:ef:1c:0f:8f:63:a5:90:f3:
                    49:f4:a1:67:a1:a0:43:bf:f7:11:1f:25:e7:40:fe:
                    d9:8a:14:0c:b0:ad:af:d3:2f:da:fa:19:c1:1d:f1:
                    8a:f7:ef:c9:e0:59:47:14:a8:c7:b8:6d:9f:b2:a3:
                    a5:55:ee:02:a2:02:66:2a:e8:b1:fd:21:15:2d:ab:
                    0a:d3:89:db:f8:48:ac:d5:60:28:6c:29:07:25:d7:
                    ce:8d:fb:33:63:23:b4:08:84:74:9e:95:b4:93:fc:
                    5b:af:f7:3e:a7:61:f0:04:df:67:58:21:d0:80:d7:
                    08:35:b0:26:d0:df:e4:d7:4d:ba:00:5a:5f:f3:a0:
                    c3:66:2c:d1:df:8a:02:6e:77:ac:cc:e5:c8:87:31:
                    40:3e:48:ef:05:a3:60:0f:34:97:36:0c:43:f7:d2:
                    8a:4f:23:15:ef:21:9e:da:a7:35:ba:15:26:af:f9:
                    ea:4c:29:cd:48:11:a4:47:2f:a8:16:85:40:87:6b:
                    7c:dc:ff:cf:6c:d1:81:e0:b0:1d:5e:2d:79:1d:44:
                    95:bc:3d:b4:62:b9:37:67:e0:d8:d8:86:ef:df:cf:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:91:6F:E3:98:73:2E:27:FC:92:C7:E0:F3:72:A5:E4:41:A5:01
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a818b2bd1c0eba9daeb760ce3c62da63b0d7ed69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:46:90:48:f9:81:f0:3c:df:6e:eb:12:d1:3a:2e:f7:aa:
         0b:ab:1f:c7:22:3d:25:bf:98:81:41:8a:29:50:f8:a2:98:22:
         49:b4:54:b8:15:b9:0e:82:2b:9e:ff:ae:4e:4e:90:cf:ca:b5:
         e4:99:d1:24:7b:64:42:56:2e:6b:d6:cb:f3:e3:f5:13:1d:13:
         83:86:68:11:7a:c7:63:6e:48:8d:c9:c7:66:81:71:97:ef:ac:
         b7:18:3d:53:24:67:08:69:b7:0e:c4:d3:01:e7:50:3e:e6:69:
         bd:31:a4:7c:dd:73:1e:b2:cd:1c:7c:45:6b:90:c8:81:ec:01:
         e5:82:fb:00:3e:cc:fe:6d:9f:00:06:ff:d6:87:97:6e:23:7e:
         66:dc:c3:d0:a9:b9:6e:f5:1c:b4:bd:79:e6:8c:6e:af:f8:e3:
         b7:60:f1:b4:6a:d2:61:e8:32:62:89:1f:fc:a7:9c:3b:59:c7:
         40:c0:ac:02:d5:73:b5:61:80:d2:ed:26:dc:a1:4c:03:d4:b4:
         77:ae:fb:eb:28:d9:b7:76:ac:87:d3:63:2c:e3:eb:ee:c2:4a:
         4c:03:5d:6d:62:8c:ef:74:d3:2f:5a:c2:42:86:c6:18:35:be:
         48:b4:e5:a6:b6:82:66:a2:47:66:62:0c:4a:1e:03:2d:d5:99:
         8b:c3:83:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKcHTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
ZDExMTdhZTQwOGNmNTY3NGQyNzdmYjc2OTA1NzVhYmFmOGFjNjAwHhcNMjQwMzE2
MjIwMzE5WhcNMjkwMzE2MjIwMzE5WjAzMTEwLwYDVQQDEyhhODE4YjJiZDFjMGVi
YTlkYWViNzYwY2UzYzYyZGE2M2IwZDdlZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx61i6iXjlV9+zHmTRmoaE5PahQugisZ/TQXwhJAO8Tg+I+//
7xwPj2OlkPNJ9KFnoaBDv/cRHyXnQP7ZihQMsK2v0y/a+hnBHfGK9+/J4FlHFKjH
uG2fsqOlVe4CogJmKuix/SEVLasK04nb+Eis1WAobCkHJdfOjfszYyO0CIR0npW0
k/xbr/c+p2HwBN9nWCHQgNcINbAm0N/k1026AFpf86DDZizR34oCbneszOXIhzFA
PkjvBaNgDzSXNgxD99KKTyMV7yGe2qc1uhUmr/nqTCnNSBGkRy+oFoVAh2t83P/P
bNGB4LAdXi15HUSVvD20Yrk3Z+DY2Ibv389mWwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLsykW/jmHMuJ/ySx+DzcqXkQaUBMB8GA1UdIwQYMBaAFB1wAbNv6BUCIJdI
QtAeiZt0EpSkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjVkMTEx
N2FlNDA4Y2Y1Njc0ZDI3N2ZiNzY5MDU3NWFiYWY4YWM2MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWE2NDZhNWEtZTAzYi00OGVjLThlYzMtODA2NWNj
ZTEwZTllL2E4MThiMmJkMWMwZWJhOWRhZWI3NjBjZTNjNjJkYTYzYjBkN2VkNjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTY0NmE1YS1lMDNiLTQ4ZWMtOGVjMy04MDY1
Y2NlMTBlOWUvYjVkMTExN2FlNDA4Y2Y1Njc0ZDI3N2ZiNzY5MDU3NWFiYWY4YWM2
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgevTANBgkqhkiG9w0BAQsFAAOCAQEAHpJGkEj5gfA8327r
EtE6LveqC6sfxyI9Jb+YgUGKKVD4opgiSbRUuBW5DoIrnv+uTk6Qz8q15JnRJHtk
QlYua9bL8+P1Ex0Tg4ZoEXrHY25IjcnHZoFxl++stxg9UyRnCGm3DsTTAedQPuZp
vTGkfN1zHrLNHHxFa5DIgewB5YL7AD7M/m2fAAb/1oeXbiN+ZtzD0Km5bvUctL15
5oxur/jjt2DxtGrSYegyYokf/KecO1nHQMCsAtVztWGA0u0m3KFMA9S0d6776yjZ
t3ash9NjLOPr7sJKTANdbWKM73TTL1rCQobGGDW+SLTlpraCZqJHZmIMSh4DLdWZ
i8ODJg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org