Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/95842e10501cd8bf32f8c1be55df4e728293e6cc.roa
File:                     95842e10501cd8bf32f8c1be55df4e728293e6cc.roa (raw, json)
Hash identifier:          J98VTYn8J4qpwKPjKEVvNwWqjuUJNQEcU3RmNbrQ/90=
Subject key identifier:   3D:09:5F:33:7C:63:F3:C9:A0:72:72:A4:80:F1:84:55:11:44:4C:ED
Certificate issuer:       /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial:       27718F
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/95842e10501cd8bf32f8c1be55df4e728293e6cc.roa
Signing time:             Mon 19 Feb 2024 16:33:35 +0000
ROA not before:           Mon 19 Feb 2024 16:33:34 +0000
ROA not after:            Thu 19 Feb 2026 16:33:34 +0000
asID:                     52345
IP address blocks:        200.115.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584975 (0x27718f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
        Validity
            Not Before: Feb 19 16:33:34 2024 GMT
            Not After : Feb 19 16:33:34 2026 GMT
        Subject: CN=95842e10501cd8bf32f8c1be55df4e728293e6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:c7:b9:e0:9d:18:11:1b:dc:fc:b4:48:90:
                    d5:00:da:54:58:ce:a5:cc:15:94:00:f9:b9:05:d7:
                    53:7b:7e:bf:de:17:57:13:1e:c3:36:48:af:7a:12:
                    e6:59:59:f5:56:45:b9:35:1f:8f:29:25:ab:cb:f2:
                    6e:55:80:45:34:48:98:cd:bf:db:eb:ed:11:a0:2f:
                    1b:68:e9:29:13:d0:65:29:6f:ea:18:87:40:93:7e:
                    e6:2f:d0:70:08:d4:ab:a3:d9:3c:d3:a1:41:dd:1e:
                    28:b8:80:00:17:e0:2b:7e:10:21:5d:80:0f:3d:6d:
                    a2:07:da:05:b0:07:2b:69:a1:48:ec:f8:52:4f:84:
                    16:41:da:eb:14:32:f5:05:73:00:46:e8:df:c0:cb:
                    8c:cf:86:54:9b:88:c4:70:58:6a:7e:81:02:e1:36:
                    46:fc:71:c2:3c:d6:0f:9e:8a:2a:2b:20:d3:9a:d6:
                    1a:56:b7:33:e4:09:17:78:24:7d:83:2e:73:0c:ca:
                    60:1a:dc:90:73:ed:30:9a:aa:67:4c:e4:a3:aa:f2:
                    a2:87:4f:fc:17:ad:1b:3d:fe:a6:7a:81:22:fa:6e:
                    26:82:e6:eb:1e:45:de:5e:33:64:17:e1:51:a0:b2:
                    e3:8c:08:a0:f5:99:6c:d7:b8:cc:6d:f5:0b:f4:75:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:5F:33:7C:63:F3:C9:A0:72:72:A4:80:F1:84:55:11:44:4C:ED
            X509v3 Authority Key Identifier:
                keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/95842e10501cd8bf32f8c1be55df4e728293e6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:d7:d6:9b:73:9e:e6:98:cd:8b:b4:4c:6d:48:cb:65:dc:
         1c:5f:19:e6:18:ff:3d:88:70:13:ed:bb:5b:19:e4:2c:e1:a7:
         53:ca:6c:ec:b2:f3:5b:5b:a5:e7:60:9a:71:60:12:00:57:3d:
         b0:46:5f:80:6e:3e:2d:09:07:21:a3:5c:9e:b6:a2:23:a1:8f:
         b2:43:f1:21:73:67:61:3e:bc:26:75:f8:d7:83:c1:3c:a3:98:
         45:69:16:c8:fa:08:66:e9:74:55:1a:0a:10:76:fb:55:37:31:
         ff:93:f6:4f:aa:f5:59:b7:10:af:ae:8f:56:99:57:4e:01:0c:
         34:bc:e6:3a:90:0c:96:bf:0f:96:6d:4e:ee:03:72:64:41:a1:
         49:8e:27:0b:43:2f:59:66:a0:95:5f:3b:88:52:05:32:88:4e:
         52:83:a6:bd:6e:0b:cd:b3:b7:1d:73:6d:fe:0e:7e:55:32:b9:
         3d:2e:06:d1:82:97:bf:66:75:cb:9f:1f:73:2e:66:57:6f:95:
         91:74:28:c7:68:13:f9:a1:61:d8:38:51:02:8e:e3:6f:b4:3e:
         49:08:6c:b2:1e:2b:5f:e5:73:99:ed:3b:0b:bd:10:4d:dd:45:
         53:9f:54:44:99:69:95:a8:cd:b1:18:82:a2:21:e3:42:0b:9a:
         89:7f:83:33
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ3GPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
NWExN2RjY2Q4YTU0YTc0ZGE4MmYxY2E3ZWFjOWMyYzU1Y2UxZDgwHhcNMjQwMjE5
MTYzMzM0WhcNMjYwMjE5MTYzMzM0WjAzMTEwLwYDVQQDEyg5NTg0MmUxMDUwMWNk
OGJmMzJmOGMxYmU1NWRmNGU3MjgyOTNlNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv5bHueCdGBEb3Py0SJDVANpUWM6lzBWUAPm5BddTe36/3hdX
Ex7DNkivehLmWVn1VkW5NR+PKSWry/JuVYBFNEiYzb/b6+0RoC8baOkpE9BlKW/q
GIdAk37mL9BwCNSro9k806FB3R4ouIAAF+ArfhAhXYAPPW2iB9oFsAcraaFI7PhS
T4QWQdrrFDL1BXMARujfwMuMz4ZUm4jEcFhqfoEC4TZG/HHCPNYPnooqKyDTmtYa
Vrcz5AkXeCR9gy5zDMpgGtyQc+0wmqpnTOSjqvKih0/8F60bPf6meoEi+m4mgubr
HkXeXjNkF+FRoLLjjAig9Zls17jMbfUL9HUx6QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD0JXzN8Y/PJoHJypIDxhFURREztMB8GA1UdIwQYMBaAFKtbR8PxAlEKsQnF
A8qj6a19YUfvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTQ1YTE3
ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDZmNWRmYzctMzkxOC00YTBhLTk1MDctMTU5OThh
MWQ2OWFhLzk1ODQyZTEwNTAxY2Q4YmYzMmY4YzFiZTU1ZGY0ZTcyODI5M2U2Y2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NmY1ZGZjNy0zOTE4LTRhMGEtOTUwNy0xNTk5
OGExZDY5YWEvMTQ1YTE3ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzKTANBgkqhkiG9w0BAQsFAAOCAQEAjpzX1ptznuaYzYu0
TG1Iy2XcHF8Z5hj/PYhwE+27WxnkLOGnU8ps7LLzW1ul52CacWASAFc9sEZfgG4+
LQkHIaNcnraiI6GPskPxIXNnYT68JnX414PBPKOYRWkWyPoIZul0VRoKEHb7VTcx
/5P2T6r1WbcQr66PVplXTgEMNLzmOpAMlr8Plm1O7gNyZEGhSY4nC0MvWWaglV87
iFIFMohOUoOmvW4LzbO3HXNt/g5+VTK5PS4G0YKXv2Z1y58fcy5mV2+VkXQox2gT
+aFh2DhRAo7jb7Q+SQhssh4rX+Vzme07C70QTd1FU59URJlplajNsRiCoiHjQgua
iX+DMw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org