Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa
File:                     334c92c069bb542760f7f0ad44f78eec8010362a.roa (raw, json)
Hash identifier:          bHnTGNOGJT0Z4BGy3HWGoK/IjzTtrWSpd8K6uGOAst4=
Subject key identifier:   D8:F5:64:1B:10:7B:E7:DF:90:05:50:FF:35:A7:D7:49:9F:B8:AC:3E
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       11237D
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa
Signing time:             Fri 13 Aug 2021 15:00:26 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28041
IP address blocks:        200.125.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123197 (0x11237d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=334c92c069bb542760f7f0ad44f78eec8010362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:1b:7a:58:45:33:da:2e:f9:78:4b:9c:28:
                    47:e2:34:58:f6:d4:d9:a8:5f:ae:40:46:1d:c3:05:
                    1e:a3:ee:70:32:60:40:c9:04:6d:f3:09:f5:90:d4:
                    06:ad:67:cc:1b:f9:c8:91:12:8a:d2:17:2b:86:0a:
                    be:66:69:ed:0a:8d:cb:1d:93:08:5a:89:63:47:de:
                    4f:78:eb:d6:5e:75:c6:fa:03:7f:51:b2:76:e3:b9:
                    76:eb:fd:33:80:46:78:c6:73:92:cb:24:01:d3:9d:
                    d6:5b:20:0b:3d:b7:33:84:13:0f:e9:52:2e:65:74:
                    f4:a3:61:88:3b:ba:c6:20:d4:18:50:1d:12:d3:a1:
                    14:44:4a:ad:42:0c:2e:95:7c:f0:12:d6:34:62:74:
                    4e:aa:db:47:c2:0a:2e:03:24:79:f0:3d:5e:b4:72:
                    b9:46:3e:f4:e8:a7:13:b3:a7:83:8e:42:3f:28:60:
                    c1:14:3f:7d:d7:b0:ba:cf:7c:98:8d:f7:6f:de:3d:
                    74:cf:d5:29:7b:e1:8c:08:c0:ac:a0:09:0a:1d:4a:
                    52:d6:fd:b7:0c:01:b3:65:da:53:54:74:6e:9b:5b:
                    b1:aa:60:72:23:6c:31:81:b8:a1:f1:c2:33:08:f9:
                    13:3b:69:01:26:20:33:56:53:b4:2b:c5:31:9a:8a:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F5:64:1B:10:7B:E7:DF:90:05:50:FF:35:A7:D7:49:9F:B8:AC:3E
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:45:46:8a:db:01:ce:71:41:66:de:e1:61:76:f8:3d:f0:b0:
         bb:3b:f3:49:55:fa:2a:8b:dd:72:f3:0f:83:cc:09:f8:0c:de:
         a7:38:83:4e:dc:5a:2b:be:08:ad:4c:2a:66:80:e5:e1:24:70:
         30:7d:12:49:6a:d0:b9:10:b7:69:62:c2:52:d8:fc:2c:7a:b9:
         8b:d7:c3:f3:af:a7:79:b7:63:72:00:8b:c5:80:93:96:19:38:
         0c:33:05:13:b5:c9:46:b7:f0:26:b0:6e:87:f6:ce:65:c3:fc:
         9b:1c:c4:69:17:32:96:7d:de:fb:b3:88:7c:fa:72:91:bc:b5:
         28:80:5d:1f:b6:b4:6b:4f:66:7e:ea:86:0b:c3:8c:d5:f6:c7:
         35:1e:1c:d8:64:40:6e:ed:17:09:f0:bc:04:67:a6:24:85:56:
         79:21:bd:8e:7b:96:0b:e8:7f:5f:6c:23:87:40:50:59:e1:c6:
         8f:1c:f9:12:8e:cb:86:f4:d1:ff:0f:79:e3:b3:94:e6:b5:4c:
         0e:da:ff:03:6c:5c:84:71:85:03:5d:7b:e5:07:78:c1:a6:96:
         38:03:82:c0:0e:ea:7e:e3:e4:fe:9c:7c:c0:e4:b6:a4:62:9e:
         2c:b7:fa:16:4a:5e:4e:f6:13:ca:dc:00:c7:f8:6f:30:ee:09:
         56:42:20:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDESN9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjEwODEz
MTUwMDIxWhcNMjYwODEzMTUwMDIxWjAzMTEwLwYDVQQDEygzMzRjOTJjMDY5YmI1
NDI3NjBmN2YwYWQ0NGY3OGVlYzgwMTAzNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiFMbelhFM9ou+XhLnChH4jRY9tTZqF+uQEYdwwUeo+5wMmBA
yQRt8wn1kNQGrWfMG/nIkRKK0hcrhgq+ZmntCo3LHZMIWoljR95PeOvWXnXG+gN/
UbJ247l26/0zgEZ4xnOSyyQB053WWyALPbczhBMP6VIuZXT0o2GIO7rGINQYUB0S
06EUREqtQgwulXzwEtY0YnROqttHwgouAyR58D1etHK5Rj706KcTs6eDjkI/KGDB
FD9917C6z3yYjfdv3j10z9Upe+GMCMCsoAkKHUpS1v23DAGzZdpTVHRum1uxqmBy
I2wxgbih8cIzCPkTO2kBJiAzVlO0K8Uxmoqz1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNj1ZBsQe+ffkAVQ/zWn10mfuKw+MB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwLzMzNGM5MmMwNjliYjU0Mjc2MGY3ZjBhZDQ0Zjc4ZWVjODAxMDM2MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh9kjANBgkqhkiG9w0BAQsFAAOCAQEAV0VGitsBznFBZt7h
YXb4PfCwuzvzSVX6KovdcvMPg8wJ+AzepziDTtxaK74IrUwqZoDl4SRwMH0SSWrQ
uRC3aWLCUtj8LHq5i9fD86+nebdjcgCLxYCTlhk4DDMFE7XJRrfwJrBuh/bOZcP8
mxzEaRcyln3e+7OIfPpykby1KIBdH7a0a09mfuqGC8OM1fbHNR4c2GRAbu0XCfC8
BGemJIVWeSG9jnuWC+h/X2wjh0BQWeHGjxz5Eo7LhvTR/w9547OU5rVMDtr/A2xc
hHGFA1175Qd4waaWOAOCwA7qfuPk/px8wOS2pGKeLLf6FkpeTvYTytwAx/hvMO4J
VkIgTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org