Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8c391b9a59bcf2576e49453246d143e5c93d558d.roa
File:                     8c391b9a59bcf2576e49453246d143e5c93d558d.roa (raw, json)
Hash identifier:          3J+3XoeThg+sWKFPP8WDS5jmBe0ufsXfXrna6NvqqZ8=
Subject key identifier:   35:9B:05:34:DF:F5:73:7A:24:9F:19:4F:65:F4:B0:7F:75:ED:8A:D0
Certificate issuer:       /CN=bc4dc033fc79588154479651a8de5e0c97ebd605
Certificate serial:       209D71
Authority key identifier: 4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8c391b9a59bcf2576e49453246d143e5c93d558d.roa
Signing time:             Mon 03 Jul 2023 13:26:10 +0000
ROA not before:           Sun 02 Jul 2023 13:26:05 +0000
ROA not after:            Mon 03 Jul 2028 13:26:05 +0000
asID:                     26593
IP address blocks:        200.108.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137457 (0x209d71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4dc033fc79588154479651a8de5e0c97ebd605
        Validity
            Not Before: Jul  2 13:26:05 2023 GMT
            Not After : Jul  3 13:26:05 2028 GMT
        Subject: CN=8c391b9a59bcf2576e49453246d143e5c93d558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:12:f0:a2:b1:cc:6a:38:65:58:08:2f:77:
                    7e:81:36:5e:31:b1:94:64:6c:09:a1:7b:04:52:a6:
                    82:eb:ff:f4:5e:af:c8:59:95:e1:23:1c:28:c6:ac:
                    03:21:0f:61:a1:aa:ab:03:67:9b:b9:a5:c3:2f:4f:
                    ca:16:88:31:c1:2c:02:e5:e7:86:6a:23:7b:f4:7c:
                    1f:c0:07:5d:15:04:be:45:68:f6:0b:bc:10:ee:b1:
                    22:96:70:53:d8:00:f5:e8:55:e3:27:44:68:40:78:
                    bd:1f:63:f7:ca:0f:7c:ca:5e:5c:8c:e2:6c:99:2c:
                    82:a7:ab:fc:bf:26:51:e8:2a:1d:a2:7e:6b:20:22:
                    cb:79:b3:1b:71:4a:ca:40:2b:ae:7f:95:0e:14:f3:
                    58:ac:30:39:61:12:db:e1:66:9f:c5:45:2c:21:a8:
                    e9:61:7d:5d:91:c1:08:57:1a:45:7b:f1:d8:42:35:
                    7a:95:fa:f2:2a:35:2a:02:92:01:5d:6a:e0:81:9f:
                    8a:02:1d:31:fd:d4:30:45:0f:97:01:fc:e4:d5:d5:
                    47:22:12:06:d1:de:ae:ec:1f:7d:ea:32:88:e4:3b:
                    84:91:5e:7d:d2:3c:2c:e6:ab:8a:60:b0:0a:2c:e0:
                    8c:e8:23:2a:bd:b7:f2:f0:b4:58:bb:e2:eb:33:c5:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:05:34:DF:F5:73:7A:24:9F:19:4F:65:F4:B0:7F:75:ED:8A:D0
            X509v3 Authority Key Identifier:
                keyid:4D:CB:49:4B:EF:AA:59:9A:59:9A:49:E6:20:83:58:3A:F9:FF:AA:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc4dc033fc79588154479651a8de5e0c97ebd605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/8c391b9a59bcf2576e49453246d143e5c93d558d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390e75be-09b1-4f45-878e-94a24f4bbb46/bc4dc033fc79588154479651a8de5e0c97ebd605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:74:14:54:54:a3:8d:69:36:e2:e6:16:b4:95:ba:75:76:7f:
         b3:9c:17:dc:3a:b5:e0:50:3c:77:bb:f6:7d:77:05:97:38:11:
         5f:67:44:50:d0:04:e9:88:0a:ed:b0:55:cc:f0:c5:64:13:3a:
         2e:ac:10:e5:eb:fe:66:a4:26:4f:82:94:c6:30:8d:a0:a7:fe:
         b3:55:f1:ab:f2:f9:04:1b:92:33:9f:41:df:24:23:93:68:bd:
         7e:4d:79:15:8a:30:c5:61:ea:06:7d:60:86:a7:b8:f5:8d:52:
         f1:15:77:2b:9b:d7:b9:12:10:cd:be:51:6c:fa:c4:ad:96:ed:
         a2:6c:f1:ed:c5:1c:b1:b5:74:04:4e:2e:93:00:5c:54:a7:76:
         6a:13:12:e2:c9:b7:9b:4d:44:ce:84:7e:bc:60:0a:b9:0a:d8:
         70:92:8b:84:8c:98:8e:38:52:fb:29:41:94:42:a8:e5:42:36:
         01:5f:a4:55:b2:6f:5b:0d:f2:1c:b4:e2:8a:cd:99:3d:f6:be:
         76:1b:fa:13:4e:8d:a5:bc:65:d6:fc:e6:24:75:b8:97:81:6d:
         08:3d:99:32:cb:f6:dc:bb:eb:9e:44:4f:7c:5d:c7:f6:db:89:
         a7:2c:6d:38:d3:cc:68:39:34:cc:01:eb:61:4f:36:a3:87:05:
         99:30:4f:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIJ1xMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJj
NGRjMDMzZmM3OTU4ODE1NDQ3OTY1MWE4ZGU1ZTBjOTdlYmQ2MDUwHhcNMjMwNzAy
MTMyNjA1WhcNMjgwNzAzMTMyNjA1WjAzMTEwLwYDVQQDEyg4YzM5MWI5YTU5YmNm
MjU3NmU0OTQ1MzI0NmQxNDNlNWM5M2Q1NThkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtBgS8KKxzGo4ZVgIL3d+gTZeMbGUZGwJoXsEUqaC6//0Xq/I
WZXhIxwoxqwDIQ9hoaqrA2ebuaXDL0/KFogxwSwC5eeGaiN79HwfwAddFQS+RWj2
C7wQ7rEilnBT2AD16FXjJ0RoQHi9H2P3yg98yl5cjOJsmSyCp6v8vyZR6Codon5r
ICLLebMbcUrKQCuuf5UOFPNYrDA5YRLb4WafxUUsIajpYX1dkcEIVxpFe/HYQjV6
lfryKjUqApIBXWrggZ+KAh0x/dQwRQ+XAfzk1dVHIhIG0d6u7B996jKI5DuEkV59
0jws5quKYLAKLOCM6CMqvbfy8LRYu+LrM8UpvwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDWbBTTf9XN6JJ8ZT2X0sH917YrQMB8GA1UdIwQYMBaAFE3LSUvvqlmaWZpJ
5iCDWDr5/6plMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmM0ZGMw
MzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzkwZTc1YmUtMDliMS00ZjQ1LTg3OGUtOTRhMjRm
NGJiYjQ2LzhjMzkxYjlhNTliY2YyNTc2ZTQ5NDUzMjQ2ZDE0M2U1YzkzZDU1OGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zOTBlNzViZS0wOWIxLTRmNDUtODc4ZS05NGEy
NGY0YmJiNDYvYmM0ZGMwMzNmYzc5NTg4MTU0NDc5NjUxYThkZTVlMGM5N2ViZDYw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsQjANBgkqhkiG9w0BAQsFAAOCAQEAWXQUVFSjjWk24uYW
tJW6dXZ/s5wX3Dq14FA8d7v2fXcFlzgRX2dEUNAE6YgK7bBVzPDFZBM6LqwQ5ev+
ZqQmT4KUxjCNoKf+s1Xxq/L5BBuSM59B3yQjk2i9fk15FYowxWHqBn1ghqe49Y1S
8RV3K5vXuRIQzb5RbPrErZbtomzx7cUcsbV0BE4ukwBcVKd2ahMS4sm3m01EzoR+
vGAKuQrYcJKLhIyYjjhS+ylBlEKo5UI2AV+kVbJvWw3yHLTiis2ZPfa+dhv6E06N
pbxl1vzmJHW4l4FtCD2ZMsv23LvrnkRPfF3H9tuJpyxtONPMaDk0zAHrYU82o4cF
mTBPow==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org