Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6b742f2911335467eaa1b01c8e2258969369a015.roa
File:                     6b742f2911335467eaa1b01c8e2258969369a015.roa (raw, json)
Hash identifier:          XNElb6zm5T/mkbR8YpYmEitfmSqo+Qr0vEjINN0Sn8I=
Subject key identifier:   D6:33:CB:31:58:21:AD:66:13:4A:8F:68:8B:05:3B:8D:4E:20:73:D0
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       20BBC6
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6b742f2911335467eaa1b01c8e2258969369a015.roa
Signing time:             Mon 03 Jul 2023 13:26:24 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145222 (0x20bbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=6b742f2911335467eaa1b01c8e2258969369a015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:4f:df:e4:a0:a3:7c:99:44:f6:64:b8:64:
                    ed:0a:cd:c2:1a:9c:75:3e:3f:65:04:2a:a3:bc:16:
                    16:af:b3:a9:9c:5c:3c:95:da:5b:e6:30:07:1c:85:
                    bb:88:58:8b:94:31:c8:ab:91:a7:da:aa:fe:76:41:
                    3f:7c:24:0b:48:7e:5d:d3:1c:b2:00:68:16:5e:58:
                    3d:b5:ac:71:f7:d7:79:e3:6f:a8:c7:32:82:23:a7:
                    b6:1d:2f:a6:31:fc:b1:de:09:d3:f4:9c:b5:50:66:
                    7c:f6:15:6c:01:4c:70:ac:c5:12:e4:d4:b2:0b:1a:
                    81:58:4b:38:8e:e0:c3:c4:bc:85:3e:e9:22:05:09:
                    91:4a:8c:8c:19:d8:a6:cc:5d:dd:53:5e:47:a9:d9:
                    94:3b:0f:1f:99:6f:30:d9:a1:94:e6:6d:cd:f1:cf:
                    67:70:78:99:de:e4:ee:8e:00:ee:51:83:06:83:bf:
                    69:7e:7f:1f:40:0a:66:bf:57:88:1b:ca:c5:16:7d:
                    2e:b1:a2:d6:1d:cc:56:96:3f:2d:a3:bf:7f:cb:aa:
                    56:a7:f3:46:03:56:9f:06:d3:25:33:7d:73:c6:4e:
                    cd:b2:1f:f9:47:04:98:a7:94:12:33:52:3b:4b:e6:
                    1e:e6:68:a9:be:34:fd:f7:c3:0a:0b:60:c6:c0:30:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:33:CB:31:58:21:AD:66:13:4A:8F:68:8B:05:3B:8D:4E:20:73:D0
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/6b742f2911335467eaa1b01c8e2258969369a015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:35:f3:54:15:1a:72:de:a6:5d:00:76:95:55:3c:db:89:e6:
         36:b9:16:46:81:f5:f4:b4:56:cb:1e:03:60:08:eb:f3:8f:8c:
         61:2b:60:ed:11:e2:93:bb:3b:3f:37:5c:a6:f2:94:94:8a:3a:
         b4:8d:b1:d7:6d:78:6d:f9:90:ad:d9:ff:a5:ee:47:aa:99:ec:
         61:6f:0f:88:76:57:96:c0:af:89:65:ba:e8:89:f6:10:a9:ab:
         20:3d:fc:6e:01:74:da:4b:cf:cf:37:8a:28:e2:a6:38:25:6c:
         5d:ac:3f:71:1f:87:77:65:01:f1:fc:b7:ef:60:2f:92:bd:b8:
         a0:58:75:d8:90:77:39:9d:48:b4:89:8e:a7:eb:6c:4b:10:36:
         28:64:d7:42:86:02:40:06:03:eb:a0:75:5c:5d:b2:61:27:28:
         b8:05:e5:4e:e0:cc:5b:09:46:93:15:61:1e:ed:44:1a:ce:ce:
         32:9b:f8:39:9f:04:35:c6:a3:f0:35:f5:cb:60:4f:ec:66:7b:
         f2:16:a4:d5:ed:76:8b:f6:14:2a:86:9c:e6:30:63:58:c6:9b:
         d5:10:90:a3:61:4d:64:60:42:2e:86:9d:48:54:7e:a2:bd:b3:
         4c:49:3a:37:78:e5:7c:cd:94:26:d1:9b:5f:85:32:ca:a3:16:
         fb:d4:8a:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDILvGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
NGRjMDMzZmM3OTU4ODE1NDQ3OTY1MWE4ZGU1ZTBjOTdlYmQ2MDUwHhcNMjMwNzAy
MTMyNjA1WhcNMjgwNzAzMTMyNjA1WjAzMTEwLwYDVQQDEyg2Yjc0MmYyOTExMzM1
NDY3ZWFhMWIwMWM4ZTIyNTg5NjkzNjlhMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApHdP3+Sgo3yZRPZkuGTtCs3CGpx1Pj9lBCqjvBYWr7OpnFw8
ldpb5jAHHIW7iFiLlDHIq5Gn2qr+dkE/fCQLSH5d0xyyAGgWXlg9taxx99d542+o
xzKCI6e2HS+mMfyx3gnT9Jy1UGZ89hVsAUxwrMUS5NSyCxqBWEs4juDDxLyFPuki
BQmRSoyMGdimzF3dU15HqdmUOw8fmW8w2aGU5m3N8c9ncHiZ3uTujgDuUYMGg79p
fn8fQApmv1eIG8rFFn0usaLWHcxWlj8to79/y6pWp/NGA1afBtMlM31zxk7Nsh/5
RwSYp5QSM1I7S+Ye5mipvjT998MKC2DGwDCS4wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNYzyzFYIa1mE0qPaIsFO41OIHPQMB8GA1UdIwQYMBaAFE3LSUvvqlmaWZpJ
5iCDWDr5/6plMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmM0ZGMw
MzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzkwZTc1YmUtMDliMS00ZjQ1LTg3OGUtOTRhMjRm
NGJiYjQ2LzZiNzQyZjI5MTEzMzU0NjdlYWExYjAxYzhlMjI1ODk2OTM2OWEwMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTBlNzViZS0wOWIxLTRmNDUtODc4ZS05NGEy
NGY0YmJiNDYvYmM0ZGMwMzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsVTANBgkqhkiG9w0BAQsFAAOCAQEAlTXzVBUact6mXQB2
lVU824nmNrkWRoH19LRWyx4DYAjr84+MYStg7RHik7s7PzdcpvKUlIo6tI2x1214
bfmQrdn/pe5HqpnsYW8PiHZXlsCviWW66In2EKmrID38bgF02kvPzzeKKOKmOCVs
Xaw/cR+Hd2UB8fy372Avkr24oFh12JB3OZ1ItImOp+tsSxA2KGTXQoYCQAYD66B1
XF2yYScouAXlTuDMWwlGkxVhHu1EGs7OMpv4OZ8ENcaj8DX1y2BP7GZ78hak1e12
i/YUKoac5jBjWMab1RCQo2FNZGBCLoadSFR+or2zTEk6N3jlfM2UJtGbX4UyyqMW
+9SKzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org