Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2744e464d642dc7acf6d16902ce7aca45f1b6b8c.roa
File:                     2744e464d642dc7acf6d16902ce7aca45f1b6b8c.roa (raw, json)
Hash identifier:          TkT9jTJPATcvobweoJtQHFVeuoGOhMIki0OMIBcRQMM=
Subject key identifier:   BB:C4:66:59:D5:AB:81:A2:5E:23:A7:48:94:DD:B7:C6:3D:D9:41:96
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29DDD0
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2744e464d642dc7acf6d16902ce7aca45f1b6b8c.roa
Signing time:             Tue 06 Feb 2024 15:37:28 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.24.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743760 (0x29ddd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=2744e464d642dc7acf6d16902ce7aca45f1b6b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:7e:59:f8:c9:4d:fb:08:fc:c9:5c:a6:4f:
                    4b:a2:8c:ac:ce:14:0d:d9:c3:43:3e:1f:78:a6:36:
                    73:3e:e5:73:f6:6d:63:c4:07:04:ab:e6:8b:19:c9:
                    11:7c:75:1d:ac:07:a7:46:a7:ee:f6:9a:6f:91:66:
                    0d:9e:74:51:72:e6:c4:9a:0c:8e:7d:cb:f5:13:dc:
                    67:f5:a6:df:8c:2c:1e:5f:80:9a:2f:4c:5d:69:4e:
                    af:b7:85:1a:9b:41:f2:4d:96:97:c0:61:18:11:f0:
                    67:67:85:ec:ea:ee:d7:74:31:73:e3:1e:d3:2e:5e:
                    a9:b4:f5:d3:3d:46:5f:6f:64:70:83:d7:33:f1:6c:
                    ef:50:ba:54:c4:ed:ae:91:95:84:18:6e:c2:20:c0:
                    6d:89:1d:c1:c5:97:3c:fd:17:05:75:e3:f7:91:f9:
                    c7:f8:6c:70:b0:b3:5a:c8:8b:a3:5f:00:0f:f2:e5:
                    d9:38:42:a9:11:be:02:27:05:ac:85:9d:81:b5:cb:
                    0a:a2:5d:e8:f1:44:8a:2e:a7:41:5d:3c:ad:aa:3d:
                    19:fc:59:2e:b8:64:c7:61:59:e9:64:67:21:26:1a:
                    da:48:f5:20:a8:8d:e8:a9:f8:bb:52:f2:32:45:a7:
                    cc:21:09:e8:e1:b9:77:81:31:b9:9b:97:fa:92:a7:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C4:66:59:D5:AB:81:A2:5E:23:A7:48:94:DD:B7:C6:3D:D9:41:96
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/2744e464d642dc7acf6d16902ce7aca45f1b6b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:d8:d9:c2:d7:9e:86:cb:bb:39:76:9f:6e:36:2d:33:0d:
         6e:82:7e:62:50:8b:a1:5a:88:4d:aa:8c:cc:e4:fc:65:ae:3c:
         bd:df:c2:58:93:78:49:23:21:8a:6f:8f:dc:65:4b:1b:28:0d:
         42:3e:1c:5c:68:91:d9:83:b6:14:d0:b6:fd:12:e6:49:e4:1f:
         cd:bd:6c:00:a3:7f:2d:b3:f6:6b:3b:7d:01:62:51:6d:0b:4c:
         be:3e:40:bb:5d:cc:10:1c:40:04:f7:35:3d:b5:df:65:cd:bf:
         dc:bb:a0:dc:0e:b9:16:cf:f9:90:a3:1e:13:e1:94:57:c1:e1:
         84:37:9c:0e:5f:95:71:e3:bc:df:0d:a3:6c:22:f2:51:ea:83:
         08:d3:e4:d9:c4:80:32:57:10:b8:b0:93:b1:b7:00:dc:30:ba:
         14:89:37:c5:d0:7f:f8:1e:53:30:8d:6b:51:68:db:03:31:2f:
         1a:0f:c1:1a:72:a1:50:a4:35:1f:7f:22:11:b2:f6:43:9e:ee:
         cc:36:df:90:5e:0e:84:03:ed:fe:32:44:60:81:b9:da:9c:ec:
         ff:8a:86:af:6c:e6:7f:ae:ea:7c:f6:2e:07:35:13:36:cc:ad:
         d1:6e:23:f6:48:f7:b2:32:e4:c6:15:24:36:8a:62:ba:c8:50:
         ea:b1:70:c1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKd3QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEygyNzQ0ZTQ2NGQ2NDJk
YzdhY2Y2ZDE2OTAyY2U3YWNhNDVmMWI2YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvdZ+WfjJTfsI/Mlcpk9LooyszhQN2cNDPh94pjZzPuVz9m1j
xAcEq+aLGckRfHUdrAenRqfu9ppvkWYNnnRRcubEmgyOfcv1E9xn9abfjCweX4Ca
L0xdaU6vt4Uam0HyTZaXwGEYEfBnZ4Xs6u7XdDFz4x7TLl6ptPXTPUZfb2Rwg9cz
8WzvULpUxO2ukZWEGG7CIMBtiR3BxZc8/RcFdeP3kfnH+GxwsLNayIujXwAP8uXZ
OEKpEb4CJwWshZ2BtcsKol3o8USKLqdBXTytqj0Z/FkuuGTHYVnpZGchJhraSPUg
qI3oqfi7UvIyRafMIQno4bl3gTG5m5f6kqep4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLvEZlnVq4GiXiOnSJTdt8Y92UGWMB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzI3NDRlNDY0ZDY0MmRjN2FjZjZkMTY5MDJjZTdhY2E0NWYxYjZiOGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgYwDANBgkqhkiG9w0BAQsFAAOCAQEARtbY2cLXnobLuzl2
n242LTMNboJ+YlCLoVqITaqMzOT8Za48vd/CWJN4SSMhim+P3GVLGygNQj4cXGiR
2YO2FNC2/RLmSeQfzb1sAKN/LbP2azt9AWJRbQtMvj5Au13MEBxABPc1PbXfZc2/
3Lug3A65Fs/5kKMeE+GUV8HhhDecDl+VceO83w2jbCLyUeqDCNPk2cSAMlcQuLCT
sbcA3DC6FIk3xdB/+B5TMI1rUWjbAzEvGg/BGnKhUKQ1H38iEbL2Q57uzDbfkF4O
hAPt/jJEYIG52pzs/4qGr2zmf67qfPYuBzUTNsyt0W4j9kj3sjLkxhUkNopiushQ
6rFwwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org