Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/f07d663e1370966e77117808ebd8b83b6855fed6.roa
File:                     f07d663e1370966e77117808ebd8b83b6855fed6.roa (raw, json)
Hash identifier:          bhQQc0krbGHJ72Ef6gDmMq2jLP9/ww5PB/490dkNc0A=
Subject key identifier:   1B:7F:55:E0:50:19:57:3C:A1:B6:0C:79:20:0D:6D:47:0F:75:C9:D5
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       025760
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/f07d663e1370966e77117808ebd8b83b6855fed6.roa
Signing time:             Mon 07 Aug 2023 16:03:05 +0000
ROA not before:           Sun 06 Aug 2023 16:03:05 +0000
ROA not after:            Thu 07 Aug 2025 16:03:05 +0000
asID:                     7004
IP address blocks:        200.91.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153440 (0x25760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Aug  6 16:03:05 2023 GMT
            Not After : Aug  7 16:03:05 2025 GMT
        Subject: CN=f07d663e1370966e77117808ebd8b83b6855fed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:62:cc:9d:b9:d3:81:40:c8:fe:a2:2a:c7:
                    39:7d:53:18:95:e2:87:0d:1b:af:06:8e:87:45:ac:
                    fb:79:c0:ff:75:44:7f:03:b4:8a:2d:e0:60:ed:4f:
                    e3:2c:6b:d9:6c:aa:01:d1:f2:45:8c:47:1b:fd:47:
                    59:8c:e0:c5:aa:e6:b4:e3:cf:13:89:37:dd:e1:e8:
                    1b:f5:ec:1d:85:a3:7a:70:16:93:d1:5f:19:c2:5e:
                    1a:8e:b6:b5:eb:b9:9d:d9:7d:76:b6:24:ea:2c:2f:
                    dd:23:fe:36:28:03:10:48:0c:ab:5d:b8:b0:3d:87:
                    ab:c7:cb:9d:f5:5c:92:8c:0b:f5:74:2d:4e:37:db:
                    45:ff:9d:fb:86:9c:cc:54:35:77:ab:30:eb:80:1a:
                    fc:f8:bb:0d:ee:a6:ad:9e:78:3e:9e:5d:11:53:6d:
                    1c:e5:10:b0:15:7a:e2:e2:1f:3e:33:5a:6d:bd:71:
                    88:a2:40:5b:a2:3a:d3:34:c5:df:cc:4a:a0:48:a6:
                    69:f0:df:9f:61:2f:a0:ee:6f:31:ed:73:3b:86:d6:
                    e6:27:f8:c7:82:d1:05:01:c1:34:6e:0a:79:62:cb:
                    9e:e5:04:47:dc:9e:f2:e6:43:13:29:c8:c7:a9:c3:
                    17:19:c1:96:60:2a:e3:38:36:ee:85:ab:9f:a4:97:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:55:E0:50:19:57:3C:A1:B6:0C:79:20:0D:6D:47:0F:75:C9:D5
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/f07d663e1370966e77117808ebd8b83b6855fed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:e1:71:6f:f8:74:e8:9c:a1:a2:e6:3b:ed:a6:62:db:73:
         f9:fe:fa:fe:44:14:67:c6:d5:47:bc:87:ff:de:86:aa:97:5b:
         bc:75:c1:38:50:2d:61:ba:af:b7:5b:25:2d:36:39:49:59:9f:
         7e:d3:90:32:e9:83:6a:be:8e:82:72:4a:25:2c:7e:ce:3c:90:
         50:44:63:49:89:b4:69:9d:96:b8:d3:50:13:09:f2:20:b1:a7:
         5c:b2:fc:ec:6e:a8:1a:55:ea:4f:cf:9f:3a:84:c5:dc:b1:2d:
         e7:b3:96:aa:5b:eb:bf:a3:16:80:58:69:75:c5:27:9a:10:f0:
         69:33:f1:2d:5c:45:a0:59:5f:ec:7c:b7:78:60:e3:d7:84:b8:
         6f:f3:33:80:4e:2b:5e:b6:c5:cb:7c:8d:6d:7a:dd:ea:e5:f4:
         ec:fb:39:64:6a:7d:86:bf:7f:83:cf:db:e4:35:3b:35:85:61:
         ee:02:e0:53:ab:c1:ca:a2:0d:d2:ca:da:58:2c:64:d2:3f:a6:
         00:cc:53:8c:3c:b0:e6:6e:23:96:5e:c8:fa:31:24:01:8a:71:
         97:44:5c:1e:56:b7:3a:b1:b5:89:b3:40:f0:bc:13:89:b4:7d:
         28:58:71:6c:87:70:62:78:cd:db:6f:7d:de:84:79:5f:b3:d6:
         1e:e7:87:5d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAldgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
OTAyMTAxZmM5ODU2NWU3NGY0MzZhNzJmNWNiOGUzNTU5OWUyNjcwHhcNMjMwODA2
MTYwMzA1WhcNMjUwODA3MTYwMzA1WjAzMTEwLwYDVQQDEyhmMDdkNjYzZTEzNzA5
NjZlNzcxMTc4MDhlYmQ4YjgzYjY4NTVmZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkodizJ2504FAyP6iKsc5fVMYleKHDRuvBo6HRaz7ecD/dUR/
A7SKLeBg7U/jLGvZbKoB0fJFjEcb/UdZjODFqua0488TiTfd4egb9ewdhaN6cBaT
0V8Zwl4ajra167md2X12tiTqLC/dI/42KAMQSAyrXbiwPYerx8ud9VySjAv1dC1O
N9tF/537hpzMVDV3qzDrgBr8+LsN7qatnng+nl0RU20c5RCwFXri4h8+M1ptvXGI
okBbojrTNMXfzEqgSKZp8N+fYS+g7m8x7XM7htbmJ/jHgtEFAcE0bgp5Ysue5QRH
3J7y5kMTKcjHqcMXGcGWYCrjODbuhaufpJfzKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBt/VeBQGVc8obYMeSANbUcPdcnVMB8GA1UdIwQYMBaAFIK+FpGvc69W3+B8
R/42ptdtod8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM5MDIx
MDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFlNmMyZDktNmE5NC00OWQ5LTlhNDgtNTEzODgz
MWQzMzYyL2YwN2Q2NjNlMTM3MDk2NmU3NzExNzgwOGViZDhiODNiNjg1NWZlZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWU2YzJkOS02YTk0LTQ5ZDktOWE0OC01MTM4
ODMxZDMzNjIvZWM5MDIxMDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAshbBDANBgkqhkiG9w0BAQsFAAOCAQEAKnHhcW/4dOicoaLm
O+2mYttz+f76/kQUZ8bVR7yH/96GqpdbvHXBOFAtYbqvt1slLTY5SVmfftOQMumD
ar6OgnJKJSx+zjyQUERjSYm0aZ2WuNNQEwnyILGnXLL87G6oGlXqT8+fOoTF3LEt
57OWqlvrv6MWgFhpdcUnmhDwaTPxLVxFoFlf7Hy3eGDj14S4b/MzgE4rXrbFy3yN
bXrd6uX07Ps5ZGp9hr9/g8/b5DU7NYVh7gLgU6vByqIN0sraWCxk0j+mAMxTjDyw
5m4jll7I+jEkAYpxl0RcHla3OrG1ibNA8LwTibR9KFhxbIdwYnjN22993oR5X7PW
HueHXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org