Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e0c866f9b973d5f9a97946f8c0f6994e24e738e5.roa
File:                     e0c866f9b973d5f9a97946f8c0f6994e24e738e5.roa (raw, json)
Hash identifier:          nIdbmGJafmqiIYVMFR6Fe8oU10vbgoufgVUyXtht/qA=
Subject key identifier:   98:33:96:2A:90:1F:32:30:E0:0B:56:76:50:41:FE:DA:98:BB:BF:02
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27BC86
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e0c866f9b973d5f9a97946f8c0f6994e24e738e5.roa
Signing time:             Wed 08 Nov 2023 15:00:41 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     272862
IP address blocks:        200.50.190.0/24 maxlen: 24
                          200.50.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604166 (0x27bc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=e0c866f9b973d5f9a97946f8c0f6994e24e738e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:9e:af:1b:f8:6d:68:b3:4e:d6:45:62:a7:
                    a9:ac:9f:08:95:83:9f:30:5c:40:38:74:a6:7c:a7:
                    2f:df:ea:3b:ce:fe:4e:fa:bc:53:9f:6a:f7:2c:01:
                    a6:f0:01:76:73:63:73:fc:8e:17:f8:1e:04:e6:6b:
                    89:2b:16:85:99:49:5f:2a:f3:05:2c:6a:ed:f1:18:
                    cc:b8:b3:e6:4b:31:d0:c4:f4:6f:fa:d7:3d:1a:10:
                    95:e4:9e:ed:80:5a:36:89:5b:47:b9:a2:77:e3:05:
                    2c:df:22:90:61:65:a8:c1:82:7e:83:5c:a0:f9:76:
                    d0:6c:33:40:ff:f6:16:4d:35:21:b8:af:e9:a5:6e:
                    3d:56:6c:90:71:3a:16:44:67:d7:4b:b3:0d:e7:f1:
                    58:49:49:ae:69:16:d3:73:a0:39:3c:1d:22:b8:57:
                    2e:09:0d:9c:ad:03:17:76:34:4a:3a:e6:4b:20:02:
                    c1:1a:e7:6b:61:31:e8:26:46:f2:fa:85:fe:eb:31:
                    a7:a6:4b:ef:9d:a4:3a:3b:65:e7:d2:cb:77:e0:1c:
                    70:e9:5b:a1:63:5a:4f:86:04:41:29:17:fd:2d:4e:
                    50:5b:60:ab:b7:2b:88:aa:81:c0:58:7d:7a:ff:29:
                    a6:d1:e7:56:5e:c4:62:9f:a6:a4:1b:7b:10:8b:d0:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:33:96:2A:90:1F:32:30:E0:0B:56:76:50:41:FE:DA:98:BB:BF:02
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/e0c866f9b973d5f9a97946f8c0f6994e24e738e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.167.0/24
                  200.50.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:91:52:ed:c7:60:03:03:b1:7a:83:05:9e:fd:d4:0c:7c:
         30:3e:15:2c:7d:71:fa:5f:72:b3:b9:b4:81:db:e8:be:b4:87:
         a4:f7:dd:16:80:4c:47:9a:59:53:93:7b:e4:b7:b4:3c:70:63:
         1f:a7:a3:74:23:02:a3:06:20:35:79:0f:c5:84:07:01:52:d0:
         b5:4d:00:60:b2:f9:f8:a5:df:36:27:e5:5c:31:ad:0e:fc:89:
         9f:5d:ce:b4:c4:9e:01:1c:b3:bf:08:4e:d4:cd:52:2b:b5:2b:
         80:10:9f:31:da:cf:c6:6c:44:3d:a1:2f:05:bd:ab:6e:c0:dd:
         9e:2e:c7:34:06:2e:1f:c2:69:21:6b:17:29:fb:bb:5c:f5:9b:
         cd:01:40:58:72:83:86:2c:43:f1:ef:f8:32:4c:d9:87:5c:25:
         de:3e:71:11:5a:91:25:d0:23:70:78:78:fb:45:b3:61:a8:ef:
         df:be:7a:de:99:f4:8e:8b:1c:09:38:f7:7c:f1:d2:f1:b1:13:
         7a:38:0d:04:6f:4c:4e:3a:7b:84:7a:7e:8d:e5:ec:e8:11:2c:
         df:67:9e:3f:39:1b:39:63:02:87:4b:6d:cc:1d:8a:c0:7f:3b:
         70:55:a1:df:6b:9d:42:9d:06:b7:d5:aa:11:27:84:23:32:d3:
         0f:06:40:fb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJ7yGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
Y2JhYjkyMGI3MDc5YjFiNzRkZDYxZDRlZTE4MGEwNGEzNDg4NmYwHhcNMjMxMTA4
MTUwMDM3WhcNMjgxMTA4MTUwMDM3WjAzMTEwLwYDVQQDEyhlMGM4NjZmOWI5NzNk
NWY5YTk3OTQ2ZjhjMGY2OTk0ZTI0ZTczOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkBaerxv4bWizTtZFYqeprJ8IlYOfMFxAOHSmfKcv3+o7zv5O
+rxTn2r3LAGm8AF2c2Nz/I4X+B4E5muJKxaFmUlfKvMFLGrt8RjMuLPmSzHQxPRv
+tc9GhCV5J7tgFo2iVtHuaJ34wUs3yKQYWWowYJ+g1yg+XbQbDNA//YWTTUhuK/p
pW49VmyQcToWRGfXS7MN5/FYSUmuaRbTc6A5PB0iuFcuCQ2crQMXdjRKOuZLIALB
GudrYTHoJkby+oX+6zGnpkvvnaQ6O2Xn0st34Bxw6VuhY1pPhgRBKRf9LU5QW2Cr
tyuIqoHAWH16/ymm0edWXsRin6akG3sQi9CkeQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFJgzliqQHzIw4AtWdlBB/tqYu78CMB8GA1UdIwQYMBaAFBSAJOx2qcdwVVcE
rHkUlPxwwZ7oMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NjYmFi
OTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlL2UwYzg2NmY5Yjk3M2Q1ZjlhOTc5NDZmOGMwZjY5OTRlMjRlNzM4ZTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvN2NjYmFiOTIwYjcwNzliMWI3NGRkNjFkNGVlMTgwYTA0YTM0ODg2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMgypwMEAMgyvjANBgkqhkiG9w0BAQsFAAOCAQEAV+KRUu3H
YAMDsXqDBZ791Ax8MD4VLH1x+l9ys7m0gdvovrSHpPfdFoBMR5pZU5N75Le0PHBj
H6ejdCMCowYgNXkPxYQHAVLQtU0AYLL5+KXfNiflXDGtDvyJn13OtMSeARyzvwhO
1M1SK7UrgBCfMdrPxmxEPaEvBb2rbsDdni7HNAYuH8JpIWsXKfu7XPWbzQFAWHKD
hixD8e/4MkzZh1wl3j5xEVqRJdAjcHh4+0WzYajv37563pn0joscCTj3fPHS8bET
ejgNBG9MTjp7hHp+jeXs6BEs32eePzkbOWMCh0ttzB2KwH87cFWh32udQp0Gt9Wq
ESeEIzLTDwZA+w==
-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org