Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/178e9df9851ebeea984665872bd9eb3d410d060b.roa
File:                     178e9df9851ebeea984665872bd9eb3d410d060b.roa (raw, json)
Hash identifier:          tRAtXLXkpkXMtioIWE6orQW6zt4ieu5CPH5J9QyiOBM=
Subject key identifier:   6D:04:64:6A:65:13:19:DD:C5:DF:44:FC:C1:C7:FD:46:9F:61:AE:03
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       29F5CD
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/178e9df9851ebeea984665872bd9eb3d410d060b.roa
Signing time:             Tue 30 Jan 2024 15:00:59 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     272885
IP address blocks:        200.123.50.0/24 maxlen: 24
                          200.123.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749901 (0x29f5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=178e9df9851ebeea984665872bd9eb3d410d060b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:4c:a9:9c:31:12:b5:26:0a:0e:9d:7e:ce:
                    07:42:c8:4f:95:29:8d:3b:40:29:2e:98:17:06:59:
                    31:bf:a6:30:8a:fa:50:b1:62:19:56:b5:e7:9a:22:
                    43:90:7a:fc:82:34:14:82:4b:c9:76:74:18:c9:dc:
                    4f:db:dc:bc:6a:59:ab:aa:ca:6d:a5:2d:a4:81:b7:
                    87:43:27:f2:34:7a:a9:cd:e4:1e:93:fd:20:b5:76:
                    bf:dd:58:7a:8d:d9:09:a1:59:a1:1c:9c:12:6a:23:
                    c9:45:8d:11:a9:1d:af:cb:0e:f8:c7:87:f5:00:f1:
                    47:5d:e9:0c:da:af:3b:6d:0d:e8:e6:c3:23:84:15:
                    ea:06:d8:ed:d7:3b:a7:37:f1:e4:77:4e:6c:ab:22:
                    dd:56:83:28:de:86:59:3a:e7:22:b9:35:7b:05:9a:
                    25:41:ac:32:e0:c1:c0:4e:8b:c3:0a:85:4e:20:9a:
                    bf:ce:a5:6e:45:05:f9:39:8d:6c:90:83:75:4a:4a:
                    17:2a:49:56:0e:63:a5:ca:b2:cd:5f:df:2f:84:57:
                    2d:08:04:cc:c5:34:be:43:7f:79:22:89:fe:8c:08:
                    64:49:6d:21:54:f9:a8:ec:a4:42:17:67:56:76:18:
                    2c:ed:15:94:bf:08:72:02:59:67:54:5a:2a:3f:af:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:04:64:6A:65:13:19:DD:C5:DF:44:FC:C1:C7:FD:46:9F:61:AE:03
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/178e9df9851ebeea984665872bd9eb3d410d060b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23
                  200.123.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:76:a9:cf:9a:f2:da:50:78:c9:02:e8:73:06:37:6e:41:
         00:5f:db:a7:30:f2:7d:0e:e1:43:98:9a:4d:28:4c:15:7a:c8:
         1e:ae:08:2a:9b:7c:0e:01:ab:b4:d7:65:8a:40:79:86:ca:16:
         cf:00:53:34:a3:c4:2a:39:5f:7d:40:61:fe:51:aa:13:0f:56:
         58:fa:94:c9:57:ea:54:fd:2d:bb:0c:6e:9b:92:6a:f6:bd:36:
         60:4b:d3:b7:4e:a6:f7:1a:ea:0a:63:53:e5:46:ec:ed:ac:0d:
         4a:fb:3b:99:47:58:4d:92:28:f3:02:20:cb:c2:2f:84:3a:05:
         8d:4c:e8:49:78:cf:91:f8:47:fa:cd:72:05:5d:1b:ce:f7:6b:
         34:aa:68:a2:96:ca:2d:4b:77:b6:4a:fd:98:89:ca:3d:b0:d8:
         a1:43:fb:27:68:1e:21:0b:55:fa:7f:b9:c5:81:35:c4:96:5a:
         88:8a:cd:b0:60:cf:14:0b:1b:d4:18:e5:0d:99:e8:34:bb:03:
         90:f6:ae:4f:88:82:0f:55:69:df:05:9a:e5:9f:7d:11:4c:f4:
         0d:e4:cb:cc:79:9b:81:f5:6e:ad:e7:5e:f6:7c:7d:ee:d2:48:
         ed:27:b2:38:3b:c8:02:4b:e3:ef:50:4d:8b:1c:e9:54:09:1d:
         61:c8:8c:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDKfXNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
OWQyOGE1NzY5YWYxZTE5ODdhYWRhNTJkNGQ5YWMzYmVjMzliNjgwHhcNMjQwMTMw
MTUwMDQ5WhcNMjkwMTMwMTUwMDQ5WjAzMTEwLwYDVQQDEygxNzhlOWRmOTg1MWVi
ZWVhOTg0NjY1ODcyYmQ5ZWIzZDQxMGQwNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3bFMqZwxErUmCg6dfs4HQshPlSmNO0ApLpgXBlkxv6YwivpQ
sWIZVrXnmiJDkHr8gjQUgkvJdnQYydxP29y8almrqsptpS2kgbeHQyfyNHqpzeQe
k/0gtXa/3Vh6jdkJoVmhHJwSaiPJRY0RqR2vyw74x4f1APFHXekM2q87bQ3o5sMj
hBXqBtjt1zunN/Hkd05sqyLdVoMo3oZZOuciuTV7BZolQawy4MHATovDCoVOIJq/
zqVuRQX5OY1skIN1SkoXKklWDmOlyrLNX98vhFctCATMxTS+Q395Ion+jAhkSW0h
VPmo7KRCF2dWdhgs7RWUvwhyAllnVFoqP6//swIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFG0EZGplExndxd9E/MHH/UafYa4DMB8GA1UdIwQYMBaAFEN2esi5xEbkE92i
tcmFOhdopOHFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTI5ZDI4
YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzE3OGU5ZGY5ODUxZWJlZWE5ODQ2NjU4NzJiZDllYjNkNDEwZDA2MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvNTI5ZDI4YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAch7IgMEAMh7MjANBgkqhkiG9w0BAQsFAAOCAQEADSJ2qc+a
8tpQeMkC6HMGN25BAF/bpzDyfQ7hQ5iaTShMFXrIHq4IKpt8DgGrtNdlikB5hsoW
zwBTNKPEKjlffUBh/lGqEw9WWPqUyVfqVP0tuwxum5Jq9r02YEvTt06m9xrqCmNT
5Ubs7awNSvs7mUdYTZIo8wIgy8IvhDoFjUzoSXjPkfhH+s1yBV0bzvdrNKpoopbK
LUt3tkr9mInKPbDYoUP7J2geIQtV+n+5xYE1xJZaiIrNsGDPFAsb1BjlDZnoNLsD
kPauT4iCD1Vp3wWa5Z99EUz0DeTLzHmbgfVurede9nx97tJI7SeyODvIAkvj71BN
ixzpVAkdYciMGA==
-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org