Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cc16eddb465454b6ec3273530a30b691f387489f.roa
File:                     cc16eddb465454b6ec3273530a30b691f387489f.roa (raw, json)
Hash identifier:          3NPIL4oT0wH/Oa47gg9z151v5i/sXnjYyEDZ1EuWdf0=
Subject key identifier:   7D:52:3D:72:3A:0F:0B:4A:02:D8:5A:9E:DD:AE:F9:F8:DE:DA:62:BE
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27C69A
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cc16eddb465454b6ec3273530a30b691f387489f.roa
Signing time:             Wed 08 Nov 2023 15:00:43 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     265689
IP address blocks:        200.123.59.0/24 maxlen: 24
                          200.123.60.0/23 maxlen: 24
                          200.50.162.0/23 maxlen: 24
                          200.50.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2606746 (0x27c69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=cc16eddb465454b6ec3273530a30b691f387489f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:ed:3d:55:51:98:7b:b1:39:59:77:86:5c:
                    87:cf:e9:f7:ff:38:f6:c0:cc:53:ab:90:a8:52:e1:
                    c4:03:af:4e:7f:17:a7:00:7e:5f:5b:58:b2:ed:63:
                    94:03:b5:6f:48:32:0a:cb:54:44:45:28:39:4b:19:
                    39:73:42:e8:22:3e:98:2c:0e:36:d6:3f:42:3d:9f:
                    cf:3c:c8:b5:15:2f:65:c2:b4:09:f3:39:21:18:70:
                    21:b8:60:7e:4d:64:66:4e:76:d9:9c:ca:55:93:c2:
                    96:33:d1:09:c8:80:12:75:b2:67:80:33:95:52:06:
                    83:0a:b4:77:70:28:8a:dd:39:fa:e5:4f:42:ed:68:
                    59:c4:eb:29:88:7d:3f:46:4a:35:02:45:35:81:3e:
                    e5:74:d8:12:ff:b0:c7:56:28:ac:5a:b8:61:d4:bb:
                    92:99:c4:14:20:b1:de:d6:73:27:2f:1a:e5:f0:54:
                    2e:a3:49:88:ae:2d:fc:3e:cb:2d:9e:f0:52:60:aa:
                    84:c9:8f:27:d6:b6:3f:09:8f:1d:86:f4:93:4d:90:
                    24:07:ef:55:a8:6d:4e:75:51:ab:91:c7:55:8c:56:
                    65:f6:a6:ad:db:53:d7:eb:b5:70:c1:e2:3c:9e:80:
                    25:6d:93:b9:75:ad:6e:98:91:5a:04:ce:a6:c4:56:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:3D:72:3A:0F:0B:4A:02:D8:5A:9E:DD:AE:F9:F8:DE:DA:62:BE
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/cc16eddb465454b6ec3273530a30b691f387489f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23
                  200.50.165.0/24
                  200.123.59.0-200.123.61.255

    Signature Algorithm: sha256WithRSAEncryption
         15:42:2c:a2:e7:57:aa:ee:67:de:9a:6c:e0:e8:34:f1:6c:41:
         c6:dc:9b:23:09:4d:af:d4:6a:02:d6:85:cf:ac:df:6b:04:28:
         c5:57:20:f7:0b:85:ec:43:4e:15:b4:f6:f3:b8:4f:76:ce:23:
         55:da:c2:be:26:58:fc:99:8f:0b:54:01:0f:cb:9a:b0:89:4e:
         f2:08:b2:bc:35:78:b1:82:9c:f4:21:44:03:f6:b2:c2:7f:f5:
         89:a8:d9:1c:26:ec:27:74:69:80:15:86:88:7d:20:e7:b7:f5:
         9a:92:5c:ba:c7:c2:c1:22:43:7c:38:17:df:34:85:12:86:7d:
         a6:92:b0:1d:7a:51:ce:cf:e6:79:ef:19:c1:d6:40:70:93:e7:
         8d:77:53:ca:01:09:8b:9c:d1:4e:ae:86:79:c6:77:c5:34:f1:
         a3:84:62:7a:da:60:37:15:23:a7:d8:28:30:c6:cc:80:74:f8:
         39:1a:27:30:37:bc:7b:df:78:52:36:34:f9:d8:1b:96:d9:01:
         fe:3a:2d:24:0b:a2:22:ae:0b:87:f9:45:2e:7f:75:90:62:69:
         0d:76:07:b6:bf:14:42:9a:3c:e3:1f:f1:a1:22:2a:4e:31:92:
         ff:94:e0:b5:3e:c8:2a:f0:af:86:4c:47:dd:23:0e:26:14:3c:
         9d:d1:6d:9e
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDJ8aaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEyhjYzE2ZWRkYjQ2NTQ1
NGI2ZWMzMjczNTMwYTMwYjY5MWYzODc0ODlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhDPtPVVRmHuxOVl3hlyHz+n3/zj2wMxTq5CoUuHEA69Ofxen
AH5fW1iy7WOUA7VvSDIKy1RERSg5Sxk5c0LoIj6YLA421j9CPZ/PPMi1FS9lwrQJ
8zkhGHAhuGB+TWRmTnbZnMpVk8KWM9EJyIASdbJngDOVUgaDCrR3cCiK3Tn65U9C
7WhZxOspiH0/Rko1AkU1gT7ldNgS/7DHViisWrhh1LuSmcQUILHe1nMnLxrl8FQu
o0mIri38PsstnvBSYKqEyY8n1rY/CY8dhvSTTZAkB+9VqG1OdVGrkcdVjFZl9qat
21PX67VwweI8noAlbZO5da1umJFaBM6mxFZw/QIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFH1SPXI6DwtKAthant2u+fje2mK+MB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2NjMTZlZGRiNDY1NDU0YjZlYzMyNzM1MzBhMzBiNjkxZjM4NzQ4OWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGgMEAcgyogMEAMgypTAMAwQAyHs7AwQByHs8MA0GCSqGSIb3DQEB
CwUAA4IBAQAVQiyi51eq7mfemmzg6DTxbEHG3JsjCU2v1GoC1oXPrN9rBCjFVyD3
C4XsQ04VtPbzuE92ziNV2sK+Jlj8mY8LVAEPy5qwiU7yCLK8NXixgpz0IUQD9rLC
f/WJqNkcJuwndGmAFYaIfSDnt/Wakly6x8LBIkN8OBffNIUShn2mkrAdelHOz+Z5
7xnB1kBwk+eNd1PKAQmLnNFOroZ5xnfFNPGjhGJ62mA3FSOn2CgwxsyAdPg5Gicw
N7x733hSNjT52BuW2QH+Oi0kC6IirguH+UUuf3WQYmkNdge2vxRCmjzjH/GhIipO
MZL/lOC1Psgq8K+GTEfdIw4mFDyd0W2e
-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:03 2024 by rpki-client on console-ams.rpki-client.org