Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/988359033627f0b1d744bf7cf746ddadc5315d43.roa
File:                     988359033627f0b1d744bf7cf746ddadc5315d43.roa (raw, json)
Hash identifier:          n9FtV8jJP2176g5jIaOp9Y2NZ18h+UZAuwPQ6xU2Fd8=
Subject key identifier:   DB:D9:F3:DD:2B:92:83:14:8F:1F:2C:89:FF:A3:EF:56:91:E5:36:BC
Certificate issuer:       /CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
Certificate serial:       013BEC
Authority key identifier: 88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/988359033627f0b1d744bf7cf746ddadc5315d43.roa
Signing time:             Sat 27 May 2023 03:05:59 +0000
ROA not before:           Fri 26 May 2023 03:05:59 +0000
ROA not after:            Tue 27 May 2025 03:05:59 +0000
asID:                     6503
IP address blocks:        200.188.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80876 (0x13bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
        Validity
            Not Before: May 26 03:05:59 2023 GMT
            Not After : May 27 03:05:59 2025 GMT
        Subject: CN=988359033627f0b1d744bf7cf746ddadc5315d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:a6:14:f8:e5:81:39:84:00:7d:ff:72:e2:
                    28:79:ec:a4:3a:d6:99:20:aa:34:24:e3:cb:91:a2:
                    56:1e:6f:da:e8:50:37:46:46:dc:4e:c7:22:94:36:
                    ea:d1:96:a5:33:80:35:4c:d6:38:af:16:94:75:2f:
                    bf:3c:73:95:93:7e:01:8b:cb:50:9b:92:17:86:ce:
                    c4:0d:61:58:46:98:df:38:e1:fc:44:0e:15:d6:d6:
                    53:30:18:a6:6a:b3:e3:2e:06:20:f2:4f:01:8b:e2:
                    c0:2e:3b:6b:78:19:99:a1:cb:30:7e:71:1b:3d:ca:
                    6a:df:fb:36:0b:e5:51:d7:2e:2d:a6:e3:00:28:7f:
                    9c:17:2a:78:a9:a6:e6:3a:bb:70:01:fd:49:a6:4f:
                    82:fe:10:94:4c:6d:6a:56:7c:ed:25:9e:87:99:ad:
                    59:72:6c:a8:d2:33:fa:1a:81:83:bb:5a:3e:f2:46:
                    ec:f3:80:4d:40:de:6a:ca:a8:51:3a:e1:fe:de:6f:
                    0f:4b:d4:11:a1:2b:91:5c:2c:1d:cb:6f:2d:30:fa:
                    3e:b7:d7:54:03:54:bb:0e:a3:ae:fd:89:1f:6b:cf:
                    96:1c:7b:db:dc:01:59:f8:1b:c5:a7:18:6c:cb:30:
                    4b:83:fe:7d:7a:17:a0:04:1e:42:27:54:28:87:2e:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:F3:DD:2B:92:83:14:8F:1F:2C:89:FF:A3:EF:56:91:E5:36:BC
            X509v3 Authority Key Identifier:
                keyid:88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/988359033627f0b1d744bf7cf746ddadc5315d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.188.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:25:f0:2e:0b:ea:bd:3e:22:ad:d5:4d:de:99:65:33:a7:13:
         fc:5d:7d:da:b5:4d:a4:77:91:b4:c1:4b:dd:b1:24:15:fb:e6:
         a2:56:40:e9:f7:83:dc:d2:b2:97:51:fb:2d:18:6a:1d:08:a8:
         a9:04:7f:e2:3c:f0:a8:f3:f0:67:5c:25:66:6e:b0:0c:0b:cf:
         25:77:66:a5:84:7e:3d:e0:26:26:55:0a:8f:e0:cf:4d:93:8e:
         62:74:c2:2e:1b:85:8f:65:d2:66:87:0b:49:4b:71:31:54:ae:
         2d:b3:6b:dd:6f:f1:d9:9b:d9:e7:5b:ea:67:e2:61:2e:39:ae:
         df:aa:6a:ac:ca:dd:70:81:d1:2b:c2:8d:ed:62:dd:15:c4:bc:
         14:fc:f9:4b:4d:c6:49:a1:81:9a:81:0f:45:e3:7c:b4:c8:1a:
         5a:49:dc:dc:73:c2:be:15:38:46:bf:eb:39:84:b1:22:fa:b2:
         14:bd:ed:93:22:bf:76:a0:6a:a1:41:f1:0d:08:20:b1:31:d6:
         cb:a4:5c:f0:58:43:7e:fe:f1:3b:99:75:5d:2c:18:7f:0d:96:
         88:5e:2f:22:4c:6a:dd:4a:a7:b4:96:b0:c2:b7:87:58:1d:2a:
         5e:4c:32:6f:5d:d7:d9:fd:d3:68:d3:4d:af:e5:3a:4e:fb:b5:
         20:d8:b7:fa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDATvsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ZjU4MzJkMGFjYTZkMmJmYjI0MGQyMDA2ZjBjYjdiZTc4OTNhYmIwHhcNMjMwNTI2
MDMwNTU5WhcNMjUwNTI3MDMwNTU5WjAzMTEwLwYDVQQDEyg5ODgzNTkwMzM2Mjdm
MGIxZDc0NGJmN2NmNzQ2ZGRhZGM1MzE1ZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnO2mFPjlgTmEAH3/cuIoeeykOtaZIKo0JOPLkaJWHm/a6FA3
RkbcTscilDbq0ZalM4A1TNY4rxaUdS+/PHOVk34Bi8tQm5IXhs7EDWFYRpjfOOH8
RA4V1tZTMBimarPjLgYg8k8Bi+LALjtreBmZocswfnEbPcpq3/s2C+VR1y4tpuMA
KH+cFyp4qabmOrtwAf1Jpk+C/hCUTG1qVnztJZ6Hma1Zcmyo0jP6GoGDu1o+8kbs
84BNQN5qyqhROuH+3m8PS9QRoSuRXCwdy28tMPo+t9dUA1S7DqOu/Ykfa8+WHHvb
3AFZ+BvFpxhsyzBLg/59ehegBB5CJ1Qohy6bLwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNvZ890rkoMUjx8sif+j71aR5Ta8MB8GA1UdIwQYMBaAFIjDX3UCXjM10ik7
en2r6hMdCuTVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmFmNTgz
MmQwYWNhNmQyYmZiMjQwZDIwMDZmMGNiN2JlNzg5M2FiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00NWRiLTlhN2EtMTFlMTAy
YTkwYmY0Lzk4ODM1OTAzMzYyN2YwYjFkNzQ0YmY3Y2Y3NDZkZGFkYzUzMTVkNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZhLTQ1ZGItOWE3YS0xMWUx
MDJhOTBiZjQvNmFmNTgzMmQwYWNhNmQyYmZiMjQwZDIwMDZmMGNiN2JlNzg5M2Fi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB8i8ADANBgkqhkiG9w0BAQsFAAOCAQEAQiXwLgvqvT4irdVN
3pllM6cT/F192rVNpHeRtMFL3bEkFfvmolZA6feD3NKyl1H7LRhqHQioqQR/4jzw
qPPwZ1wlZm6wDAvPJXdmpYR+PeAmJlUKj+DPTZOOYnTCLhuFj2XSZocLSUtxMVSu
LbNr3W/x2ZvZ51vqZ+JhLjmu36pqrMrdcIHRK8KN7WLdFcS8FPz5S03GSaGBmoEP
ReN8tMgaWknc3HPCvhU4Rr/rOYSxIvqyFL3tkyK/dqBqoUHxDQggsTHWy6Rc8FhD
fv7xO5l1XSwYfw2WiF4vIkxq3UqntJawwreHWB0qXkwyb13X2f3TaNNNr+U6Tvu1
INi3+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org