Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7423053572be33bcf0e92fc197b95168e24313c0.roa
File:                     7423053572be33bcf0e92fc197b95168e24313c0.roa (raw, json)
Hash identifier:          Ykj7ax9JSG2PgDCqcbr0qgi0983xlQ0fJBvHpoHgUoI=
Subject key identifier:   B0:D5:3A:32:DB:1C:D1:FE:64:A9:A1:5F:5F:B7:5D:8F:34:56:D4:B4
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       29D92F
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7423053572be33bcf0e92fc197b95168e24313c0.roa
Signing time:             Mon 10 Jul 2023 18:12:54 +0000
ROA not before:           Sun 09 Jul 2023 18:12:54 +0000
ROA not after:            Thu 10 Jul 2025 18:12:54 +0000
asID:                     10318
IP address blocks:        200.114.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742575 (0x29d92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Jul  9 18:12:54 2023 GMT
            Not After : Jul 10 18:12:54 2025 GMT
        Subject: CN=7423053572be33bcf0e92fc197b95168e24313c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:e0:d8:bd:05:6e:0b:7d:50:56:4d:91:e6:
                    64:fc:98:f5:ae:79:94:41:83:3c:f0:e0:ef:ad:8e:
                    32:4a:00:b4:49:74:4e:8a:de:86:e4:a6:1e:15:4d:
                    98:e5:b0:8d:7f:79:21:2c:81:db:15:8c:37:59:f6:
                    a8:d6:f8:df:f6:6d:f4:06:e5:8b:c6:44:87:32:10:
                    81:b5:a3:73:ee:c1:ba:1d:1d:76:b0:e4:88:ce:aa:
                    9d:5d:96:ed:0b:3f:79:36:8f:bf:a1:2d:eb:d4:75:
                    a0:20:43:da:d7:0b:bb:d5:df:42:98:ef:ca:c0:e8:
                    b1:f5:a9:c5:19:2a:0c:35:07:43:3d:59:9e:23:4f:
                    bf:e9:f9:0e:70:49:cc:d6:a4:3b:b6:3e:19:76:56:
                    1f:ec:ea:11:7b:e6:4c:b4:3e:23:0e:a9:3b:70:67:
                    a1:70:8c:e5:79:a3:cc:67:f4:e6:fa:99:15:20:77:
                    21:53:6b:9b:34:e4:7a:70:f2:b4:75:c7:7b:55:4e:
                    e8:60:15:e5:af:55:eb:7a:2b:52:a0:dc:2e:0b:a2:
                    81:ad:39:ee:0e:01:ea:03:0b:28:31:9c:13:9e:61:
                    1c:c3:ca:4c:1b:7d:92:97:3f:f4:a0:7d:13:a1:4d:
                    58:20:29:b5:bc:ac:74:79:5c:2a:ba:74:71:b6:a0:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:3A:32:DB:1C:D1:FE:64:A9:A1:5F:5F:B7:5D:8F:34:56:D4:B4
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7423053572be33bcf0e92fc197b95168e24313c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1d:b2:93:e9:64:ad:63:ca:7f:50:7d:f2:ef:b5:ab:f8:b0:
         ae:2d:86:04:4f:75:1a:86:14:5f:44:ff:c5:76:9c:6e:43:05:
         63:3d:a9:74:b0:91:52:b9:8b:3f:8f:d5:b8:35:a2:4b:83:e0:
         89:54:a0:37:09:57:bd:d2:5c:a9:75:28:2c:2e:b7:46:ac:55:
         8a:66:fc:73:1e:57:1b:1e:b8:0a:8d:4f:00:f1:81:d0:08:b2:
         10:71:f9:49:39:e9:bc:a4:e5:5b:32:fe:b1:66:63:46:36:11:
         06:8e:94:59:c6:2b:76:bd:d3:a5:6c:65:1c:78:40:f9:ef:ad:
         d5:d2:0a:49:e8:6e:bf:59:41:e9:67:27:3e:13:d9:a3:06:35:
         a7:8e:32:e7:72:3c:1a:e3:df:a9:3c:b6:e3:32:85:aa:32:a1:
         ec:c2:35:ad:ad:7b:52:37:56:c5:c9:53:82:d4:46:57:a7:96:
         50:4d:64:2e:dd:11:4b:6f:ff:c7:5b:96:20:0e:69:1d:0d:b1:
         51:55:22:ae:db:93:24:39:a8:d8:ba:8c:11:d2:5b:50:9e:dc:
         a4:c8:60:30:da:40:ae:25:f4:f2:b3:9a:0e:d6:c2:57:8f:a6:
         84:e7:26:da:a5:a9:07:b9:d8:eb:d5:75:f0:26:c0:67:f5:98:
         39:79:ee:71
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKdkvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNzA5
MTgxMjU0WhcNMjUwNzEwMTgxMjU0WjAzMTEwLwYDVQQDEyg3NDIzMDUzNTcyYmUz
M2JjZjBlOTJmYzE5N2I5NTE2OGUyNDMxM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgezg2L0Fbgt9UFZNkeZk/Jj1rnmUQYM88ODvrY4ySgC0SXRO
it6G5KYeFU2Y5bCNf3khLIHbFYw3Wfao1vjf9m30BuWLxkSHMhCBtaNz7sG6HR12
sOSIzqqdXZbtCz95No+/oS3r1HWgIEPa1wu71d9CmO/KwOix9anFGSoMNQdDPVme
I0+/6fkOcEnM1qQ7tj4ZdlYf7OoRe+ZMtD4jDqk7cGehcIzleaPMZ/Tm+pkVIHch
U2ubNOR6cPK0dcd7VU7oYBXlr1XreitSoNwuC6KBrTnuDgHqAwsoMZwTnmEcw8pM
G32Slz/0oH0ToU1YICm1vKx0eVwqunRxtqBh1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLDVOjLbHNH+ZKmhX1+3XY80VtS0MB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3Lzc0MjMwNTM1NzJiZTMzYmNmMGU5MmZjMTk3Yjk1MTY4ZTI0MzEzYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhygDANBgkqhkiG9w0BAQsFAAOCAQEAnR2yk+lkrWPKf1B9
8u+1q/iwri2GBE91GoYUX0T/xXacbkMFYz2pdLCRUrmLP4/VuDWiS4PgiVSgNwlX
vdJcqXUoLC63RqxVimb8cx5XGx64Co1PAPGB0AiyEHH5STnpvKTlWzL+sWZjRjYR
Bo6UWcYrdr3TpWxlHHhA+e+t1dIKSehuv1lB6WcnPhPZowY1p44y53I8GuPfqTy2
4zKFqjKh7MI1ra17UjdWxclTgtRGV6eWUE1kLt0RS2//x1uWIA5pHQ2xUVUirtuT
JDmo2LqMEdJbUJ7cpMhgMNpAriX08rOaDtbCV4+mhOcm2qWpB7nY69V18CbAZ/WY
OXnucQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org