Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e0e7013405d99cc9b39e0341970165e696ae8160.roa
File:                     e0e7013405d99cc9b39e0341970165e696ae8160.roa (raw, json)
Hash identifier:          AICo09+/jgWMTF0FrxuJSK5fbLG+SEc+ZSW/uXnuLM4=
Subject key identifier:   03:10:CA:47:D4:81:EA:33:7B:37:1A:76:FC:FD:84:E6:3C:A9:D2:D5
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       018B69
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e0e7013405d99cc9b39e0341970165e696ae8160.roa
Signing time:             Wed 14 Sep 2022 14:43:44 +0000
ROA not before:           Fri 19 Aug 2022 16:19:43 +0000
ROA not after:            Mon 19 Aug 2024 16:19:43 +0000
asID:                     27823
IP address blocks:        200.58.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101225 (0x18b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:43 2022 GMT
            Not After : Aug 19 16:19:43 2024 GMT
        Subject: CN=e0e7013405d99cc9b39e0341970165e696ae8160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:3b:2a:26:68:56:ec:2f:b7:1b:41:f1:aa:
                    5d:2a:23:36:e2:57:55:a5:41:5a:f6:94:a3:84:93:
                    7e:19:23:8e:2b:6a:07:3b:6a:ec:e3:af:1a:50:a2:
                    61:76:1c:df:f9:88:1c:15:a3:9a:e4:e9:fa:b2:5b:
                    c6:38:54:da:84:4e:0b:d0:4f:0b:9b:4d:f3:28:ac:
                    4d:16:f4:39:b5:07:a5:70:8e:df:a9:44:0f:ed:a4:
                    0b:48:d8:9d:c3:ec:d0:a9:41:aa:02:07:f4:00:56:
                    59:3c:5c:0f:d0:4c:8e:c7:2b:31:a7:6d:85:d3:75:
                    9c:68:60:29:03:e8:9a:3e:83:64:a7:1b:55:c0:0f:
                    a4:9a:cf:2e:eb:ee:2e:bf:0e:3f:6d:a8:69:4c:9b:
                    1c:f2:67:0f:82:32:a9:e0:79:8e:50:2c:27:71:2f:
                    fb:e2:93:88:42:a3:9e:64:09:0e:04:d1:5a:ff:3c:
                    2b:0f:fc:29:08:4d:e8:25:56:ad:38:fb:d6:15:a2:
                    b6:bd:a3:83:28:28:cf:2b:1c:3e:38:f5:ff:70:4c:
                    32:11:88:05:91:26:71:79:d5:ef:36:30:a9:86:33:
                    df:e3:f7:45:3b:fc:24:28:e8:c2:c0:04:ff:da:bb:
                    98:28:99:84:75:70:9d:68:51:8e:7d:d2:30:9b:13:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:10:CA:47:D4:81:EA:33:7B:37:1A:76:FC:FD:84:E6:3C:A9:D2:D5
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/e0e7013405d99cc9b39e0341970165e696ae8160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:eb:16:d9:24:87:37:b8:e7:e9:d2:04:f9:28:b4:4c:0d:
         c0:1f:39:49:7d:46:57:3a:6f:16:47:8a:39:9b:ff:63:69:39:
         a9:75:9a:b0:5d:b6:a1:ba:c4:2b:32:09:51:62:5c:2f:f3:b4:
         87:42:4a:3b:1f:5b:4b:14:8d:ae:c0:d1:66:0e:fe:b5:e4:8d:
         df:34:0b:45:59:e6:12:79:05:aa:19:c4:8f:85:24:04:5a:22:
         4f:c9:7d:27:79:eb:53:63:25:b0:16:ed:30:ec:c4:52:47:9a:
         1b:51:f0:34:0e:e3:8e:9a:56:2f:14:c7:29:cf:fd:cb:28:97:
         a7:95:66:54:e4:ae:59:95:26:f5:e2:ef:2d:e2:7b:45:fb:c4:
         22:17:8a:49:71:91:bf:03:2e:be:80:9f:82:0f:3a:b6:82:d3:
         c2:e4:91:6b:cb:c7:cc:98:1e:39:f6:56:1b:ec:c7:00:52:fb:
         ad:64:5c:7f:23:72:dc:2f:27:68:a7:ff:fe:4f:6d:27:6e:5a:
         30:fd:52:a3:22:32:49:f9:15:74:c4:e0:d5:45:7e:f5:23:ee:
         ce:16:21:83:8d:c7:a6:ab:ed:cb:55:21:c9:32:f8:a5:cc:8b:
         3f:74:d6:5e:73:a4:ab:7c:2a:fb:a3:33:f0:e2:95:7e:4e:c3:
         fa:f9:cb:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAYtpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
N2UxMTllYmU1MWEwMGQ2NTYwYWI3M2ZkNzljNTFhZGE0MDNmMTkwHhcNMjIwODE5
MTYxOTQzWhcNMjQwODE5MTYxOTQzWjAzMTEwLwYDVQQDEyhlMGU3MDEzNDA1ZDk5
Y2M5YjM5ZTAzNDE5NzAxNjVlNjk2YWU4MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx8w7KiZoVuwvtxtB8apdKiM24ldVpUFa9pSjhJN+GSOOK2oH
O2rs468aUKJhdhzf+YgcFaOa5On6slvGOFTahE4L0E8Lm03zKKxNFvQ5tQelcI7f
qUQP7aQLSNidw+zQqUGqAgf0AFZZPFwP0EyOxysxp22F03WcaGApA+iaPoNkpxtV
wA+kms8u6+4uvw4/bahpTJsc8mcPgjKp4HmOUCwncS/74pOIQqOeZAkOBNFa/zwr
D/wpCE3oJVatOPvWFaK2vaODKCjPKxw+OPX/cEwyEYgFkSZxedXvNjCphjPf4/dF
O/wkKOjCwAT/2ruYKJmEdXCdaFGOfdIwmxOnZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAMQykfUgeozezcadvz9hOY8qdLVMB8GA1UdIwQYMBaAFAcJN4jtSoDCDN7O
EKf/uzEhonKeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk3ZTEx
OWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2YxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGQ4ZGYwZjAtNDFjNC00MDFkLWFjMTUtZGUwZGI0
MGFjOWNiL2UwZTcwMTM0MDVkOTljYzliMzllMDM0MTk3MDE2NWU2OTZhZTgxNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZDhkZjBmMC00MWM0LTQwMWQtYWMxNS1kZTBk
YjQwYWM5Y2IvMjk3ZTExOWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2Yx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg6ezANBgkqhkiG9w0BAQsFAAOCAQEATZ/rFtkkhze45+nS
BPkotEwNwB85SX1GVzpvFkeKOZv/Y2k5qXWasF22obrEKzIJUWJcL/O0h0JKOx9b
SxSNrsDRZg7+teSN3zQLRVnmEnkFqhnEj4UkBFoiT8l9J3nrU2MlsBbtMOzEUkea
G1HwNA7jjppWLxTHKc/9yyiXp5VmVOSuWZUm9eLvLeJ7RfvEIheKSXGRvwMuvoCf
gg86toLTwuSRa8vHzJgeOfZWG+zHAFL7rWRcfyNy3C8naKf//k9tJ25aMP1SoyIy
SfkVdMTg1UV+9SPuzhYhg43Hpqvty1UhyTL4pcyLP3TWXnOkq3wq+6Mz8OKVfk7D
+vnLEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org