Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/0c35ce240910d0e44503128a517eb8cdfe818e89.roa
File:                     0c35ce240910d0e44503128a517eb8cdfe818e89.roa (raw, json)
Hash identifier:          oErpSl4o2+RHBef4s9NKEDW+FMF9SRezgV1cHVYq0As=
Subject key identifier:   AD:70:5D:88:98:94:10:59:68:4F:B3:A5:7D:8A:9A:4F:9C:7B:58:35
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       0262AA
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/0c35ce240910d0e44503128a517eb8cdfe818e89.roa
Signing time:             Mon 07 Aug 2023 16:14:27 +0000
ROA not before:           Sun 06 Aug 2023 16:14:27 +0000
ROA not after:            Thu 07 Aug 2025 16:14:27 +0000
asID:                     7004
IP address blocks:        200.91.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156330 (0x262aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 16:14:27 2023 GMT
            Not After : Aug  7 16:14:27 2025 GMT
        Subject: CN=0c35ce240910d0e44503128a517eb8cdfe818e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:4e:94:4a:3d:79:7a:27:69:bb:f2:e9:13:
                    09:38:13:ad:47:7a:ea:90:10:7e:42:4c:f3:09:58:
                    6e:b6:03:d9:d4:b9:50:87:37:61:41:51:a7:dc:70:
                    a4:56:d6:bf:76:bc:58:e4:ca:43:1b:a4:ff:6d:4b:
                    94:74:07:90:97:a8:a0:57:81:23:7b:6e:07:45:ca:
                    62:4b:a9:c2:e6:6d:56:cc:ce:0b:18:8e:a3:83:33:
                    f2:45:41:3f:7a:36:de:43:58:c0:3f:cd:9b:2b:b1:
                    28:9c:00:7c:f3:3a:d5:97:48:79:54:9e:35:f5:0e:
                    c0:7e:ce:dc:bf:76:89:1b:ce:13:ad:ff:6d:ea:20:
                    aa:c6:fa:8d:89:d8:58:4b:93:6b:ef:90:a6:21:96:
                    3b:b7:d9:c1:27:0e:73:24:7a:da:68:c1:1c:1f:62:
                    68:c2:4d:ca:4e:9e:fb:d2:7b:24:e3:e1:fc:11:e9:
                    c4:10:2c:b1:ae:73:fd:47:34:ff:f8:84:e0:3c:95:
                    94:04:56:d0:92:2d:6f:9b:56:0e:3b:8f:9d:ed:27:
                    f6:a3:3d:71:11:44:9d:9b:40:26:0e:01:0b:4e:c1:
                    de:30:3b:99:56:cc:35:04:84:e5:7b:e9:ac:2a:7b:
                    6b:60:b9:4c:e8:57:7a:62:f6:71:48:1a:87:41:75:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:5D:88:98:94:10:59:68:4F:B3:A5:7D:8A:9A:4F:9C:7B:58:35
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/0c35ce240910d0e44503128a517eb8cdfe818e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:ae:d5:a4:99:2b:11:59:17:96:c3:67:bb:b4:96:d2:27:
         36:2a:e2:25:db:dc:ee:aa:7e:89:08:38:be:8a:e9:d9:34:b8:
         a3:d0:42:e5:61:21:64:a7:f2:fa:e2:1c:cb:7c:3b:65:44:ee:
         2c:de:c4:5a:41:1f:89:3e:e4:91:c1:af:09:54:ce:06:4b:8d:
         79:e2:7d:63:1c:5c:e2:fa:34:a2:6f:03:7b:9b:40:b4:54:b0:
         d5:f8:10:6d:84:e7:65:e0:20:5e:8b:4f:ec:bb:6a:64:7a:10:
         be:0a:47:75:7d:de:f9:6a:7c:2e:44:48:a6:dc:88:98:00:ba:
         8c:15:ed:71:fd:b8:7b:1f:ed:67:47:d0:9a:0a:57:f8:f8:3d:
         6a:b4:d9:29:da:55:21:35:d2:cf:73:97:af:5c:cd:03:6b:18:
         7a:85:79:f6:8b:48:41:db:3d:a4:af:6c:3a:59:1b:da:75:35:
         04:1e:37:e2:c3:94:69:b5:dd:e6:d9:cb:92:32:72:6f:ca:4a:
         67:a1:71:97:be:89:e4:dd:9a:eb:a1:6e:cd:df:86:6c:76:25:
         eb:88:5e:36:f8:09:96:7e:20:80:31:6a:29:93:b0:43:79:15:
         be:38:c4:d3:4d:9d:87:69:0e:e9:1e:d1:56:a4:db:23:98:84:
         9f:bc:c4:a1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAmKqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
OTAyMTAxZmM5ODU2NWU3NGY0MzZhNzJmNWNiOGUzNTU5OWUyNjcwHhcNMjMwODA2
MTYxNDI3WhcNMjUwODA3MTYxNDI3WjAzMTEwLwYDVQQDEygwYzM1Y2UyNDA5MTBk
MGU0NDUwMzEyOGE1MTdlYjhjZGZlODE4ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjjROlEo9eXonabvy6RMJOBOtR3rqkBB+QkzzCVhutgPZ1LlQ
hzdhQVGn3HCkVta/drxY5MpDG6T/bUuUdAeQl6igV4Eje24HRcpiS6nC5m1WzM4L
GI6jgzPyRUE/ejbeQ1jAP82bK7EonAB88zrVl0h5VJ419Q7Afs7cv3aJG84Trf9t
6iCqxvqNidhYS5Nr75CmIZY7t9nBJw5zJHraaMEcH2Jowk3KTp770nsk4+H8EenE
ECyxrnP9RzT/+ITgPJWUBFbQki1vm1YOO4+d7Sf2oz1xEUSdm0AmDgELTsHeMDuZ
Vsw1BITle+msKntrYLlM6Fd6YvZxSBqHQXUXkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFK1wXYiYlBBZaE+zpX2Kmk+ce1g1MB8GA1UdIwQYMBaAFIK+FpGvc69W3+B8
R/42ptdtod8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM5MDIx
MDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFlNmMyZDktNmE5NC00OWQ5LTlhNDgtNTEzODgz
MWQzMzYyLzBjMzVjZTI0MDkxMGQwZTQ0NTAzMTI4YTUxN2ViOGNkZmU4MThlODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWU2YzJkOS02YTk0LTQ5ZDktOWE0OC01MTM4
ODMxZDMzNjIvZWM5MDIxMDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhbHTANBgkqhkiG9w0BAQsFAAOCAQEAepyu1aSZKxFZF5bD
Z7u0ltInNiriJdvc7qp+iQg4vorp2TS4o9BC5WEhZKfy+uIcy3w7ZUTuLN7EWkEf
iT7kkcGvCVTOBkuNeeJ9Yxxc4vo0om8De5tAtFSw1fgQbYTnZeAgXotP7LtqZHoQ
vgpHdX3e+Wp8LkRIptyImAC6jBXtcf24ex/tZ0fQmgpX+Pg9arTZKdpVITXSz3OX
r1zNA2sYeoV59otIQds9pK9sOlkb2nU1BB434sOUabXd5tnLkjJyb8pKZ6Fxl76J
5N2a66Fuzd+GbHYl64heNvgJln4ggDFqKZOwQ3kVvjjE002dh2kO6R7RVqTbI5iE
n7zEoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org