Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/91c55665a63a8aa0576b4959f2a182e4e56a1687.roa
File:                     91c55665a63a8aa0576b4959f2a182e4e56a1687.roa (raw, json)
Hash identifier:          NTsilkhi8k5UIBKAf7FS3z9k+IIcnW3drmpmhdoBzJs=
Subject key identifier:   97:16:6F:EA:D5:4C:28:92:68:34:CB:C0:AD:99:85:01:0A:31:F2:34
Certificate issuer:       /CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
Certificate serial:       034A24
Authority key identifier: 0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/91c55665a63a8aa0576b4959f2a182e4e56a1687.roa
Signing time:             Thu 17 Aug 2023 02:16:23 +0000
ROA not before:           Wed 16 Aug 2023 02:16:23 +0000
ROA not after:            Sun 17 Aug 2025 02:16:23 +0000
asID:                     264690
IP address blocks:        200.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215588 (0x34a24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43
        Validity
            Not Before: Aug 16 02:16:23 2023 GMT
            Not After : Aug 17 02:16:23 2025 GMT
        Subject: CN=91c55665a63a8aa0576b4959f2a182e4e56a1687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:ff:8f:b6:e9:3a:ae:8c:3f:d8:1a:f1:09:
                    fa:b7:4a:8b:01:67:c1:62:34:88:b1:8a:66:05:df:
                    79:f1:d0:3d:eb:29:52:23:48:7a:e2:d1:6f:e9:14:
                    32:79:20:2e:fc:bd:2f:b5:2d:0d:2e:4e:4e:eb:31:
                    47:cc:fb:dd:fd:1e:57:e3:de:a0:a6:ff:5a:4a:bc:
                    61:08:5a:1d:11:d7:5d:71:bd:ad:33:39:89:71:b3:
                    ec:7b:a2:35:56:b4:f2:8f:1b:32:db:79:20:da:da:
                    a9:34:7d:40:13:fb:45:aa:9d:5e:29:2e:57:48:cd:
                    e3:5b:6e:95:00:9e:b9:a8:d6:74:80:01:f5:51:ed:
                    18:5a:cf:a0:c2:cc:e0:1d:c6:bc:c4:9d:a9:21:0c:
                    b3:71:6f:36:7b:5f:d0:58:de:c4:d4:c3:f7:31:8a:
                    2f:c8:61:60:63:f1:d9:f4:91:ca:87:d0:7e:da:80:
                    a0:d1:20:51:0b:b8:f8:14:61:00:52:b4:79:84:3d:
                    ca:00:64:af:7f:c3:47:ef:0a:05:03:a7:00:9e:1c:
                    21:f2:b4:dd:09:64:bf:92:ef:1b:8f:e6:3d:4c:64:
                    b6:f6:02:6a:bb:91:42:2d:20:3a:3e:68:7d:8e:ac:
                    9a:ff:fe:5a:5b:e8:ca:59:3e:a8:58:1c:12:b8:30:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:6F:EA:D5:4C:28:92:68:34:CB:C0:AD:99:85:01:0A:31:F2:34
            X509v3 Authority Key Identifier:
                keyid:0C:0D:26:81:4E:78:5C:F0:41:C2:C4:45:DC:E7:13:52:33:C6:2B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/91c55665a63a8aa0576b4959f2a182e4e56a1687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/531b4d85-e725-4dfe-b881-b682ef540663/2d9cb1ce466f13eea1f6d7454ef4fc44fc992d43.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:00:3c:44:64:a2:73:dd:b3:15:86:0d:b7:0a:11:3d:2f:
         64:74:4d:b7:30:e4:0b:56:cf:ee:cf:6f:2d:e0:83:8d:4a:0b:
         93:8c:16:4d:71:2f:72:30:ee:91:7f:ac:0d:c6:b5:9e:c2:0c:
         04:b2:6d:ab:f7:79:1a:13:4a:57:56:a9:49:e3:e5:16:6f:4f:
         d6:88:70:9d:c2:22:f8:a6:bd:e1:7b:da:7a:1c:a0:c0:94:4a:
         2b:73:14:32:58:fd:48:f0:ba:6f:5e:17:3b:cd:dc:0a:f2:75:
         0f:e5:2e:ec:a3:6c:9c:8b:5e:aa:7e:b2:57:2d:75:13:2e:7c:
         7a:d6:36:c6:7c:f9:4d:46:5a:8a:13:fd:9f:7f:0c:3e:fa:9b:
         29:54:56:0c:00:d6:a2:bc:2e:11:d4:3f:82:23:8b:93:aa:85:
         2f:ca:a2:d3:97:ab:56:1a:c2:2a:be:0e:99:47:13:45:4e:ad:
         a9:03:93:67:94:48:d7:22:a7:8a:7e:3b:49:e1:18:9f:01:1b:
         ea:86:c2:85:5a:13:c6:23:17:86:4b:59:7a:4d:8c:5c:04:e4:
         e9:78:1b:03:b0:16:69:e2:93:63:f4:1e:89:50:0e:d3:e7:89:
         92:88:76:e6:ad:8a:5a:f9:07:d6:e2:fa:fb:23:d7:c4:c8:00:
         01:76:9f:d4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA0okMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
OWNiMWNlNDY2ZjEzZWVhMWY2ZDc0NTRlZjRmYzQ0ZmM5OTJkNDMwHhcNMjMwODE2
MDIxNjIzWhcNMjUwODE3MDIxNjIzWjAzMTEwLwYDVQQDEyg5MWM1NTY2NWE2M2E4
YWEwNTc2YjQ5NTlmMmExODJlNGU1NmExNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhFT/j7bpOq6MP9ga8Qn6t0qLAWfBYjSIsYpmBd958dA96ylS
I0h64tFv6RQyeSAu/L0vtS0NLk5O6zFHzPvd/R5X496gpv9aSrxhCFodEdddcb2t
MzmJcbPse6I1VrTyjxsy23kg2tqpNH1AE/tFqp1eKS5XSM3jW26VAJ65qNZ0gAH1
Ue0YWs+gwszgHca8xJ2pIQyzcW82e1/QWN7E1MP3MYovyGFgY/HZ9JHKh9B+2oCg
0SBRC7j4FGEAUrR5hD3KAGSvf8NH7woFA6cAnhwh8rTdCWS/ku8bj+Y9TGS29gJq
u5FCLSA6Pmh9jqya//5aW+jKWT6oWBwSuDBoMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJcWb+rVTCiSaDTLwK2ZhQEKMfI0MB8GA1UdIwQYMBaAFAwNJoFOeFzwQcLE
RdznE1IzxitYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmQ5Y2Ix
Y2U0NjZmMTNlZWExZjZkNzQ1NGVmNGZjNDRmYzk5MmQ0My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMxYjRkODUtZTcyNS00ZGZlLWI4ODEtYjY4MmVm
NTQwNjYzLzkxYzU1NjY1YTYzYThhYTA1NzZiNDk1OWYyYTE4MmU0ZTU2YTE2ODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzFiNGQ4NS1lNzI1LTRkZmUtYjg4MS1iNjgy
ZWY1NDA2NjMvMmQ5Y2IxY2U0NjZmMTNlZWExZjZkNzQ1NGVmNGZjNDRmYzk5MmQ0
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgKnDANBgkqhkiG9w0BAQsFAAOCAQEAXusAPERkonPdsxWG
DbcKET0vZHRNtzDkC1bP7s9vLeCDjUoLk4wWTXEvcjDukX+sDca1nsIMBLJtq/d5
GhNKV1apSePlFm9P1ohwncIi+Ka94XvaehygwJRKK3MUMlj9SPC6b14XO83cCvJ1
D+Uu7KNsnIteqn6yVy11Ey58etY2xnz5TUZaihP9n38MPvqbKVRWDADWorwuEdQ/
giOLk6qFL8qi05erVhrCKr4OmUcTRU6tqQOTZ5RI1yKnin47SeEYnwEb6obChVoT
xiMXhktZek2MXATk6XgbA7AWaeKTY/QeiVAO0+eJkoh25q2KWvkH1uL6+yPXxMgA
AXaf1A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org