Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/020492437161d8ec3f49d569c2adb3b5c2914418.roa
File:                     020492437161d8ec3f49d569c2adb3b5c2914418.roa (raw, json)
Hash identifier:          8Z9nPkTF32Q/ZcVLRTNPZG4VgN7NiRhfeJUmXi/RoqA=
Subject key identifier:   00:32:9C:1F:E7:87:7C:19:5E:43:4E:FC:2D:DE:5E:59:D2:5C:DE:F9
Certificate issuer:       /CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
Certificate serial:       1ACA02
Authority key identifier: 1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/020492437161d8ec3f49d569c2adb3b5c2914418.roa
Signing time:             Fri 14 Jul 2023 21:46:45 +0000
ROA not before:           Thu 13 Jul 2023 21:46:45 +0000
ROA not after:            Mon 14 Jul 2025 21:46:45 +0000
asID:                     270075
IP address blocks:        200.10.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755650 (0x1aca02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
        Validity
            Not Before: Jul 13 21:46:45 2023 GMT
            Not After : Jul 14 21:46:45 2025 GMT
        Subject: CN=020492437161d8ec3f49d569c2adb3b5c2914418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:2f:ff:ba:6a:81:99:1f:de:e8:56:d1:f9:
                    e8:1a:ea:4d:d8:c7:8e:7b:c5:b6:92:db:81:08:87:
                    f9:e9:6a:98:b3:3e:39:a7:45:d2:83:be:20:d5:09:
                    a7:bc:21:8a:33:5d:29:31:e2:2a:0d:86:88:de:4b:
                    b0:b1:38:12:f9:a8:25:7e:35:0c:a9:34:a4:84:28:
                    cc:27:72:2b:f2:9d:45:6e:be:ea:d1:58:f7:f7:65:
                    c1:14:20:4d:73:bd:c3:c5:b8:ce:32:c5:37:cc:6f:
                    04:11:3e:c0:e7:98:dd:a6:54:d9:71:15:6a:33:09:
                    a6:be:47:ab:06:3a:d3:d1:f6:6d:eb:83:13:46:63:
                    04:6d:d3:fb:a0:72:07:62:35:fc:ab:3f:b6:c9:5a:
                    38:83:08:fc:6b:97:62:c6:01:64:e1:ba:3c:29:67:
                    b9:03:a5:16:c5:46:07:09:21:c5:36:4a:66:82:01:
                    ce:60:8a:40:6d:83:21:0d:3b:03:f7:49:bf:03:f1:
                    ae:94:dc:98:de:d0:8a:54:49:9c:92:ae:28:a3:44:
                    5f:ff:e0:6b:39:87:d8:51:c0:ad:6a:36:7d:19:c8:
                    8b:6e:66:e6:fb:81:8e:a4:08:23:33:8b:03:c0:b3:
                    2c:b2:86:08:f3:04:50:05:46:58:7e:7e:4e:c6:68:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:9C:1F:E7:87:7C:19:5E:43:4E:FC:2D:DE:5E:59:D2:5C:DE:F9
            X509v3 Authority Key Identifier:
                keyid:1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/020492437161d8ec3f49d569c2adb3b5c2914418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/6ad6db935edff4c1f2be54056c36a0c9320b83cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:9b:d2:08:d5:c4:d8:5c:bd:9d:66:d2:1a:22:ec:2f:88:
         23:04:e2:af:70:ca:6b:10:31:91:65:b9:49:55:9b:7c:d4:13:
         de:95:a9:98:0f:95:28:4e:53:8a:e9:cd:5d:98:22:77:eb:3c:
         55:1a:f3:f8:a6:82:f9:96:29:f6:f3:a7:a5:92:bd:38:fb:4c:
         d0:51:41:e1:87:cf:ef:bd:65:41:39:bd:8f:4d:39:83:da:78:
         ab:76:39:04:f7:ad:5a:1a:7e:f1:e3:e3:49:fd:0c:17:b8:84:
         92:8b:e9:17:81:a1:64:12:85:7d:07:68:07:7d:36:26:2f:c9:
         9b:49:02:3f:1a:84:06:c1:a2:15:c2:4e:dc:9e:b6:5c:bf:78:
         b6:61:95:97:a8:3f:fd:23:83:10:d4:a2:fb:2c:46:67:cc:ff:
         39:f4:50:a4:fb:5e:55:94:dd:45:7b:8a:e7:ad:5f:0f:3c:b1:
         0b:3c:de:3c:23:ce:aa:97:7e:02:af:63:82:0d:be:a3:3c:bb:
         41:9b:c9:7a:68:e5:f1:62:b4:74:32:17:83:77:87:54:0c:8a:
         f0:d3:bc:91:fa:75:bb:dd:07:fa:47:3e:1c:8a:30:bf:e2:5d:
         e3:4e:e6:3c:ed:99:fc:21:5e:9a:20:b9:31:9b:c6:9c:3d:d4:
         fe:16:67:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGsoCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ZDZkYjkzNWVkZmY0YzFmMmJlNTQwNTZjMzZhMGM5MzIwYjgzY2IwHhcNMjMwNzEz
MjE0NjQ1WhcNMjUwNzE0MjE0NjQ1WjAzMTEwLwYDVQQDEygwMjA0OTI0MzcxNjFk
OGVjM2Y0OWQ1NjljMmFkYjNiNWMyOTE0NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn4Av/7pqgZkf3uhW0fnoGupN2MeOe8W2ktuBCIf56WqYsz45
p0XSg74g1QmnvCGKM10pMeIqDYaI3kuwsTgS+aglfjUMqTSkhCjMJ3Ir8p1Fbr7q
0Vj392XBFCBNc73DxbjOMsU3zG8EET7A55jdplTZcRVqMwmmvkerBjrT0fZt64MT
RmMEbdP7oHIHYjX8qz+2yVo4gwj8a5dixgFk4bo8KWe5A6UWxUYHCSHFNkpmggHO
YIpAbYMhDTsD90m/A/GulNyY3tCKVEmckq4oo0Rf/+BrOYfYUcCtajZ9GciLbmbm
+4GOpAgjM4sDwLMssoYI8wRQBUZYfn5Oxmj5NwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAAynB/nh3wZXkNO/C3eXlnSXN75MB8GA1UdIwQYMBaAFB3ucgNNtIVKvCiU
8kRICDd4Kgc8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFkNmRi
OTM1ZWRmZjRjMWYyYmU1NDA1NmMzNmEwYzkzMjBiODNjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjNhMTNkMzEtNjA1Ni00OTg4LWI0MGItYTk2ZjU3
NmY4NzBlLzAyMDQ5MjQzNzE2MWQ4ZWMzZjQ5ZDU2OWMyYWRiM2I1YzI5MTQ0MTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yM2ExM2QzMS02MDU2LTQ5ODgtYjQwYi1hOTZm
NTc2Zjg3MGUvNmFkNmRiOTM1ZWRmZjRjMWYyYmU1NDA1NmMzNmEwYzkzMjBiODNj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgKHDANBgkqhkiG9w0BAQsFAAOCAQEAWwab0gjVxNhcvZ1m
0hoi7C+IIwTir3DKaxAxkWW5SVWbfNQT3pWpmA+VKE5TiunNXZgid+s8VRrz+KaC
+ZYp9vOnpZK9OPtM0FFB4YfP771lQTm9j005g9p4q3Y5BPetWhp+8ePjSf0MF7iE
kovpF4GhZBKFfQdoB302Ji/Jm0kCPxqEBsGiFcJO3J62XL94tmGVl6g//SODENSi
+yxGZ8z/OfRQpPteVZTdRXuK561fDzyxCzzePCPOqpd+Aq9jgg2+ozy7QZvJemjl
8WK0dDIXg3eHVAyK8NO8kfp1u90H+kc+HIowv+Jd407mPO2Z/CFemiC5MZvGnD3U
/hZnHw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org