Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/5f8a5d80a71cb7a8ad3111ba59fe0375ff56e451.roa
File:                     5f8a5d80a71cb7a8ad3111ba59fe0375ff56e451.roa (raw, json)
Hash identifier:          Wt/vEojwdQEPmVtOJ2jVPO+TXAVqPvnwI+Qm/+GgRfI=
Subject key identifier:   63:96:5E:FC:BD:9D:AF:FC:21:4E:A8:3E:5E:F5:26:02:A9:4D:C2:E9
Certificate issuer:       /CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
Certificate serial:       0603E0
Authority key identifier: 1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/5f8a5d80a71cb7a8ad3111ba59fe0375ff56e451.roa
Signing time:             Wed 24 Mar 2021 14:36:18 +0000
ROA not before:           Wed 24 Mar 2021 14:36:17 +0000
ROA not after:            Tue 24 Mar 2026 14:36:17 +0000
asID:                     270075
IP address blocks:        200.10.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394208 (0x603e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
        Validity
            Not Before: Mar 24 14:36:17 2021 GMT
            Not After : Mar 24 14:36:17 2026 GMT
        Subject: CN=5f8a5d80a71cb7a8ad3111ba59fe0375ff56e451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:93:17:14:1d:12:3a:dc:16:44:18:9b:91:
                    d6:44:40:17:2d:72:96:27:68:a3:5c:83:3b:6c:71:
                    eb:e3:a6:56:0f:ab:b2:9b:3d:60:2c:8d:5f:d4:3c:
                    32:6d:ce:19:96:0c:58:81:3a:a8:a2:b6:2e:3e:c4:
                    24:b8:fe:a8:5c:a2:ac:58:76:60:a3:33:05:01:0b:
                    6a:79:ae:92:dc:a4:ce:53:ef:e9:72:e3:8e:ad:bd:
                    02:53:ce:9e:6f:33:85:8b:da:66:e9:7b:6e:52:48:
                    75:e0:50:33:3e:83:cd:98:8c:99:22:bf:3e:e8:80:
                    54:2c:34:ff:e7:a0:e1:f9:e6:a4:9f:9b:26:9a:c1:
                    fa:88:04:00:d9:52:55:d1:f7:91:02:53:7a:e5:97:
                    87:dd:f1:64:53:8f:97:e3:37:04:ec:93:49:27:5a:
                    23:ea:e2:36:03:e6:d0:a1:9a:10:f9:d8:08:6b:c7:
                    91:a6:88:d5:60:fc:3b:16:25:82:f1:a6:04:d4:66:
                    6d:41:f5:fc:cc:3b:10:06:ae:03:5e:f7:84:b3:9e:
                    79:a1:7a:bf:9d:80:1d:01:27:50:94:47:17:ad:c1:
                    e4:b7:f3:b1:c2:ef:13:53:e7:f8:87:6e:c7:a1:2a:
                    27:32:ce:f3:a2:7a:d8:c7:d9:2b:6d:7d:00:fb:3c:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:5E:FC:BD:9D:AF:FC:21:4E:A8:3E:5E:F5:26:02:A9:4D:C2:E9
            X509v3 Authority Key Identifier:
                keyid:1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/5f8a5d80a71cb7a8ad3111ba59fe0375ff56e451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/6ad6db935edff4c1f2be54056c36a0c9320b83cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:c1:65:7a:4f:ff:e8:50:38:70:d5:ee:9e:9e:d1:02:f4:
         12:a9:5a:4e:d5:6b:fc:42:8f:3f:f0:3e:4b:c1:a4:d4:fa:04:
         ee:fd:86:13:0e:8f:3f:9e:c1:f6:a0:65:32:84:25:12:90:d5:
         c7:74:eb:6d:12:bf:73:91:10:4e:2e:7a:56:ae:73:cc:98:bd:
         1c:06:7a:d2:50:a7:94:cd:b1:c6:12:65:b5:06:31:0e:68:b4:
         73:81:c7:99:7d:09:b1:29:2e:64:9e:59:0d:e8:23:7b:a3:c5:
         24:1f:d3:88:e5:d5:a3:e9:3a:bb:7d:eb:6f:77:97:eb:ce:b6:
         cd:ea:6c:a1:fd:f1:5f:49:e3:74:17:52:fd:ea:0f:ca:50:7d:
         2c:c7:f6:42:4e:3b:f1:93:98:fc:cc:7d:a0:08:30:96:ec:fb:
         e8:6a:b5:4d:1d:ae:c6:d5:0b:23:6c:5e:89:b7:1b:52:dc:2a:
         9e:31:12:08:e8:61:6e:85:19:6a:b7:25:8b:19:5c:e2:f4:7c:
         07:ac:1e:01:56:38:6b:27:6f:e8:61:cd:eb:30:4b:8b:e4:b7:
         51:71:34:b2:ce:e1:f1:86:9c:ec:4e:cd:98:28:b7:64:ad:a9:
         ab:cf:1c:a1:67:e8:fd:2a:ee:40:b8:46:48:c5:15:cd:6b:8a:
         26:08:77:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBgPgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ZDZkYjkzNWVkZmY0YzFmMmJlNTQwNTZjMzZhMGM5MzIwYjgzY2IwHhcNMjEwMzI0
MTQzNjE3WhcNMjYwMzI0MTQzNjE3WjAzMTEwLwYDVQQDEyg1ZjhhNWQ4MGE3MWNi
N2E4YWQzMTExYmE1OWZlMDM3NWZmNTZlNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhfWTFxQdEjrcFkQYm5HWREAXLXKWJ2ijXIM7bHHr46ZWD6uy
mz1gLI1f1Dwybc4ZlgxYgTqoorYuPsQkuP6oXKKsWHZgozMFAQtqea6S3KTOU+/p
cuOOrb0CU86ebzOFi9pm6XtuUkh14FAzPoPNmIyZIr8+6IBULDT/56Dh+eakn5sm
msH6iAQA2VJV0feRAlN65ZeH3fFkU4+X4zcE7JNJJ1oj6uI2A+bQoZoQ+dgIa8eR
pojVYPw7FiWC8aYE1GZtQfX8zDsQBq4DXveEs555oXq/nYAdASdQlEcXrcHkt/Ox
wu8TU+f4h27HoSonMs7zonrYx9krbX0A+zwlOwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGOWXvy9na/8IU6oPl71JgKpTcLpMB8GA1UdIwQYMBaAFB3ucgNNtIVKvCiU
8kRICDd4Kgc8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFkNmRi
OTM1ZWRmZjRjMWYyYmU1NDA1NmMzNmEwYzkzMjBiODNjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjNhMTNkMzEtNjA1Ni00OTg4LWI0MGItYTk2ZjU3
NmY4NzBlLzVmOGE1ZDgwYTcxY2I3YThhZDMxMTFiYTU5ZmUwMzc1ZmY1NmU0NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yM2ExM2QzMS02MDU2LTQ5ODgtYjQwYi1hOTZm
NTc2Zjg3MGUvNmFkNmRiOTM1ZWRmZjRjMWYyYmU1NDA1NmMzNmEwYzkzMjBiODNj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgKHzANBgkqhkiG9w0BAQsFAAOCAQEAShjBZXpP/+hQOHDV
7p6e0QL0EqlaTtVr/EKPP/A+S8Gk1PoE7v2GEw6PP57B9qBlMoQlEpDVx3TrbRK/
c5EQTi56Vq5zzJi9HAZ60lCnlM2xxhJltQYxDmi0c4HHmX0JsSkuZJ5ZDegje6PF
JB/TiOXVo+k6u33rb3eX6862zepsof3xX0njdBdS/eoPylB9LMf2Qk478ZOY/Mx9
oAgwluz76Gq1TR2uxtULI2xeibcbUtwqnjESCOhhboUZarclixlc4vR8B6weAVY4
aydv6GHN6zBLi+S3UXE0ss7h8Yac7E7NmCi3ZK2pq88coWfo/SruQLhGSMUVzWuK
Jgh3ug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org