Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/582adddb75f8cc1efb788c0520e4f84d7b022783.roa
File:                     582adddb75f8cc1efb788c0520e4f84d7b022783.roa (raw, json)
Hash identifier:          5WGX2MxU4znxyM9kW4wALac7z+F+VJ9E8QOW/2NXVJw=
Subject key identifier:   0B:DD:13:F6:E4:ED:9C:3A:2C:3B:F1:4A:22:ED:BD:06:28:CB:27:B6
Certificate issuer:       /CN=9f017755dc576b13bf12304bec79a25621b0e009
Certificate serial:       207F18
Authority key identifier: F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/582adddb75f8cc1efb788c0520e4f84d7b022783.roa
Signing time:             Fri 08 Mar 2024 16:36:15 +0000
ROA not before:           Fri 08 Mar 2024 16:36:15 +0000
ROA not after:            Sun 08 Mar 2026 17:36:15 +0000
asID:                     262266
IP address blocks:        200.10.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129688 (0x207f18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f017755dc576b13bf12304bec79a25621b0e009
        Validity
            Not Before: Mar  8 16:36:15 2024 GMT
            Not After : Mar  8 17:36:15 2026 GMT
        Subject: CN=582adddb75f8cc1efb788c0520e4f84d7b022783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:ec:47:d0:97:2d:f3:45:e8:0c:63:7c:fd:
                    52:c1:99:15:19:13:af:38:72:e6:df:97:1a:45:2e:
                    de:7d:5f:cd:ce:b8:4b:1e:93:2b:34:e9:87:25:cd:
                    1e:b2:5b:24:19:25:87:cf:cb:bb:b3:9e:d9:04:c2:
                    74:f0:7d:8c:d2:e3:f0:84:ed:7d:d8:9e:48:d5:f3:
                    66:83:65:ec:aa:05:44:0a:76:b7:3e:4c:36:c8:d1:
                    b6:99:fe:da:fe:36:bb:bc:06:2b:d5:b9:f6:a4:c5:
                    8c:88:2f:3f:43:56:28:5d:14:f3:2c:87:84:7a:ee:
                    a0:a2:5d:66:37:a4:03:ad:ce:26:10:d4:fa:c7:fa:
                    fc:9f:a1:1a:e6:b9:e6:72:8c:85:d0:cc:41:bf:33:
                    6d:69:31:32:e3:f7:57:33:8d:c9:52:c9:be:26:4c:
                    12:4b:a4:54:8a:f7:65:78:22:43:f0:08:1e:f1:8e:
                    62:48:5c:d3:ab:a6:96:a0:34:cb:c6:b8:0f:66:a0:
                    ec:5b:e6:87:47:de:f3:fb:54:a0:da:4d:70:1a:60:
                    64:42:3c:74:44:5b:f1:85:05:20:7e:37:97:77:0d:
                    ff:91:f5:38:7d:68:6a:7d:93:a3:75:0b:8c:f0:d2:
                    69:95:08:7b:9e:c6:4b:1b:e8:b4:ec:7b:c1:67:03:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:13:F6:E4:ED:9C:3A:2C:3B:F1:4A:22:ED:BD:06:28:CB:27:B6
            X509v3 Authority Key Identifier:
                keyid:F0:13:43:75:14:36:A1:26:E8:05:A7:25:7E:14:20:51:04:C7:EE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f017755dc576b13bf12304bec79a25621b0e009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/582adddb75f8cc1efb788c0520e4f84d7b022783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/261a1c38-5c4f-45ac-bc90-727906cb4f15/9f017755dc576b13bf12304bec79a25621b0e009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:b5:7d:e7:f7:31:d9:ec:97:1f:7b:47:48:3f:a6:2f:a3:
         8a:7a:ea:e9:1e:c1:eb:d9:97:1b:c2:92:ae:bc:4f:73:b8:d2:
         da:ab:7a:e3:de:9c:f4:84:fd:9f:96:b0:24:2b:68:11:56:37:
         7c:af:b6:00:98:4b:33:29:a3:44:a5:63:8f:ed:95:29:c2:0d:
         68:c7:d4:e9:99:94:8b:2e:b7:a3:60:fc:f3:e6:a7:5b:7a:8b:
         44:c1:aa:f5:6a:64:e8:e7:ea:2c:01:29:dc:8f:5d:72:f3:72:
         55:b8:c7:78:90:ef:5e:82:7e:c0:b1:ed:23:6d:c4:99:79:d2:
         0b:fe:c4:fa:70:84:47:09:e4:8d:fe:e2:19:c8:2a:63:d4:6e:
         86:0c:93:51:3c:ee:a3:96:95:95:b0:e4:66:89:3c:1a:0e:90:
         25:b0:82:6c:08:aa:c7:8d:8e:bd:b8:9b:f9:63:a0:d1:ed:ce:
         9c:14:fd:8d:4b:13:0a:8d:49:52:21:89:41:19:e3:cb:c5:3a:
         3d:b8:6a:26:1c:91:cf:cd:04:10:ad:a1:f0:ef:2c:a9:cd:0d:
         c7:e6:d8:3d:15:44:40:ae:90:1a:6a:dc:73:96:ac:37:ef:aa:
         b9:de:8c:47:c2:4c:22:d0:3d:33:83:f6:38:82:78:6c:64:ae:
         5a:69:3d:86
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIH8YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
MDE3NzU1ZGM1NzZiMTNiZjEyMzA0YmVjNzlhMjU2MjFiMGUwMDkwHhcNMjQwMzA4
MTYzNjE1WhcNMjYwMzA4MTczNjE1WjAzMTEwLwYDVQQDEyg1ODJhZGRkYjc1Zjhj
YzFlZmI3ODhjMDUyMGU0Zjg0ZDdiMDIyNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoVbsR9CXLfNF6AxjfP1SwZkVGROvOHLm35caRS7efV/NzrhL
HpMrNOmHJc0eslskGSWHz8u7s57ZBMJ08H2M0uPwhO192J5I1fNmg2XsqgVECna3
Pkw2yNG2mf7a/ja7vAYr1bn2pMWMiC8/Q1YoXRTzLIeEeu6gol1mN6QDrc4mENT6
x/r8n6Ea5rnmcoyF0MxBvzNtaTEy4/dXM43JUsm+JkwSS6RUivdleCJD8Age8Y5i
SFzTq6aWoDTLxrgPZqDsW+aHR97z+1Sg2k1wGmBkQjx0RFvxhQUgfjeXdw3/kfU4
fWhqfZOjdQuM8NJplQh7nsZLG+i07HvBZwOAKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAvdE/bk7Zw6LDvxSiLtvQYoyye2MB8GA1UdIwQYMBaAFPATQ3UUNqEm6AWn
JX4UIFEEx+5fMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWYwMTc3
NTVkYzU3NmIxM2JmMTIzMDRiZWM3OWEyNTYyMWIwZTAwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjYxYTFjMzgtNWM0Zi00NWFjLWJjOTAtNzI3OTA2
Y2I0ZjE1LzU4MmFkZGRiNzVmOGNjMWVmYjc4OGMwNTIwZTRmODRkN2IwMjI3ODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNjFhMWMzOC01YzRmLTQ1YWMtYmM5MC03Mjc5
MDZjYjRmMTUvOWYwMTc3NTVkYzU3NmIxM2JmMTIzMDRiZWM3OWEyNTYyMWIwZTAw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgKxDANBgkqhkiG9w0BAQsFAAOCAQEArmO1fef3Mdnslx97
R0g/pi+jinrq6R7B69mXG8KSrrxPc7jS2qt6496c9IT9n5awJCtoEVY3fK+2AJhL
MymjRKVjj+2VKcINaMfU6ZmUiy63o2D88+anW3qLRMGq9Wpk6OfqLAEp3I9dcvNy
VbjHeJDvXoJ+wLHtI23EmXnSC/7E+nCERwnkjf7iGcgqY9RuhgyTUTzuo5aVlbDk
Zok8Gg6QJbCCbAiqx42Ovbib+WOg0e3OnBT9jUsTCo1JUiGJQRnjy8U6PbhqJhyR
z80EEK2h8O8sqc0Nx+bYPRVEQK6QGmrcc5asN++qud6MR8JMItA9M4P2OIJ4bGSu
Wmk9hg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org