Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/09c5ce47e257705ab549676c678ba440f61de3d7.roa
File:                     09c5ce47e257705ab549676c678ba440f61de3d7.roa (raw, json)
Hash identifier:          Tb7xHIaIXjHfuQd4cLzQPSiFzqql24MYqTgAAEOFfDQ=
Subject key identifier:   E8:B6:F5:A1:E8:56:C4:3B:F6:D2:AF:3C:A3:19:5A:34:54:9B:BE:74
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       274798
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/09c5ce47e257705ab549676c678ba440f61de3d7.roa
Signing time:             Mon 17 Apr 2023 13:00:46 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     28052
IP address blocks:        200.42.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574232 (0x274798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=09c5ce47e257705ab549676c678ba440f61de3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:7c:86:85:42:f9:65:e3:22:00:5e:ef:6b:
                    bf:cf:20:40:52:35:3d:bd:c3:9d:8a:e7:29:c5:90:
                    86:ca:98:c1:3d:b6:81:62:5e:de:ee:f9:8e:11:ab:
                    9d:73:81:bc:52:cb:41:ff:08:12:b6:99:c3:e2:fd:
                    fa:c0:9a:14:48:14:71:08:81:d2:f0:21:e1:84:fb:
                    3c:48:0b:6f:bd:a6:c9:d4:87:ae:82:88:3c:13:4b:
                    cb:69:48:80:5c:07:44:b0:3e:8c:21:44:42:e4:16:
                    21:85:02:8c:63:d0:46:bf:0e:ec:09:8c:fd:03:77:
                    16:4c:4a:39:fe:a4:d1:20:66:c0:84:d3:9a:71:4f:
                    bc:b5:a5:e1:d7:96:38:ee:15:28:22:ec:c7:ef:ee:
                    6e:0f:5a:52:63:f5:6b:21:73:19:7e:f2:d2:93:18:
                    ed:30:93:e4:e5:f8:d6:34:ed:e6:be:ee:d6:cb:9e:
                    12:5e:d4:be:08:bd:81:f9:1b:81:52:cb:91:f0:94:
                    19:2d:13:de:76:1f:b3:ca:ef:37:60:e2:95:0e:70:
                    b2:45:d9:c9:45:f5:b9:2e:01:5a:7e:9c:ae:05:4e:
                    37:ea:4b:5f:f8:d4:84:c8:be:d3:d9:ab:5b:a8:5e:
                    9f:82:2d:6d:2a:cd:08:76:0c:67:a3:b6:69:99:15:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:F5:A1:E8:56:C4:3B:F6:D2:AF:3C:A3:19:5A:34:54:9B:BE:74
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/09c5ce47e257705ab549676c678ba440f61de3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:2a:66:98:27:bd:d8:9e:18:b3:d7:8e:ca:33:61:42:0b:
         88:73:12:3b:0d:29:dd:c9:36:c7:82:1a:67:3f:a8:93:91:b7:
         1b:13:10:ed:51:a9:3f:c5:45:41:67:64:0f:ad:09:9b:e7:5f:
         ef:b4:f8:68:55:3a:d8:82:a9:45:82:11:f9:5f:e7:38:2e:80:
         4d:7d:e4:31:4f:65:9b:3e:67:f8:9c:d2:d8:71:2e:a0:0a:85:
         c3:76:a6:59:9d:4a:51:47:87:b4:21:e8:d0:5a:1c:c3:63:f0:
         f1:7f:55:f0:c6:01:2b:63:06:ea:00:6c:37:58:3c:52:01:ea:
         a7:08:2a:77:b3:32:e6:98:8c:ad:01:be:bb:87:9c:ce:f0:11:
         c5:f9:48:eb:56:06:28:ef:01:25:9c:22:16:22:50:7e:7c:36:
         6a:c8:bf:dd:48:ab:33:a2:6f:7b:5c:eb:50:31:e7:20:9e:c0:
         c6:72:3b:5f:72:f7:ac:b4:e0:f0:64:08:9b:8f:66:28:c3:88:
         59:00:41:c7:18:d1:02:f9:1c:f6:2e:73:f2:a6:b5:3e:b8:11:
         5a:94:a6:b6:8a:2d:0a:48:2a:14:a1:79:a7:3d:37:00:1b:c2:
         4c:30:b6:6f:09:a8:f3:96:38:93:a3:7b:bd:da:32:5d:6a:91:
         f5:90:5d:92
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ0eYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEygwOWM1Y2U0N2UyNTc3
MDVhYjU0OTY3NmM2NzhiYTQ0MGY2MWRlM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt+N8hoVC+WXjIgBe72u/zyBAUjU9vcOdiucpxZCGypjBPbaB
Yl7e7vmOEaudc4G8UstB/wgStpnD4v36wJoUSBRxCIHS8CHhhPs8SAtvvabJ1Ieu
gog8E0vLaUiAXAdEsD6MIURC5BYhhQKMY9BGvw7sCYz9A3cWTEo5/qTRIGbAhNOa
cU+8taXh15Y47hUoIuzH7+5uD1pSY/VrIXMZfvLSkxjtMJPk5fjWNO3mvu7Wy54S
XtS+CL2B+RuBUsuR8JQZLRPedh+zyu83YOKVDnCyRdnJRfW5LgFafpyuBU436ktf
+NSEyL7T2atbqF6fgi1tKs0Idgxno7ZpmRVk4wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOi29aHoVsQ79tKvPKMZWjRUm750MB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzA5YzVjZTQ3ZTI1NzcwNWFiNTQ5Njc2YzY3OGJhNDQwZjYxZGUzZDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgqDTANBgkqhkiG9w0BAQsFAAOCAQEAGjMqZpgnvdieGLPX
jsozYUILiHMSOw0p3ck2x4IaZz+ok5G3GxMQ7VGpP8VFQWdkD60Jm+df77T4aFU6
2IKpRYIR+V/nOC6ATX3kMU9lmz5n+JzS2HEuoAqFw3amWZ1KUUeHtCHo0Focw2Pw
8X9V8MYBK2MG6gBsN1g8UgHqpwgqd7My5piMrQG+u4eczvARxflI61YGKO8BJZwi
FiJQfnw2asi/3UirM6Jve1zrUDHnIJ7AxnI7X3L3rLTg8GQIm49mKMOIWQBBxxjR
Avkc9i5z8qa1PrgRWpSmtootCkgqFKF5pz03ABvCTDC2bwmo85Y4k6N7vdoyXWqR
9ZBdkg==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org