Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa
File:                     4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa (raw, json)
Hash identifier:          OlXGx1ZFvhQ/I1oMdKhg0b0YRmXuf5SRDTbGysuqvYs=
Subject key identifier:   A5:99:51:27:6F:17:30:73:14:11:85:89:29:5B:9A:0F:8A:48:C2:DA
Certificate issuer:       /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial:       29E15C
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa
Signing time:             Tue 06 Feb 2024 15:37:30 +0000
ROA not before:           Tue 06 Feb 2024 15:36:47 +0000
ROA not after:            Tue 06 Feb 2029 15:36:47 +0000
asID:                     19114
IP address blocks:        200.7.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744668 (0x29e15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
        Validity
            Not Before: Feb  6 15:36:47 2024 GMT
            Not After : Feb  6 15:36:47 2029 GMT
        Subject: CN=4137908cf894d9678c6c4f4d10d0fd39c9d907f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:4f:e3:9b:4a:d6:58:c8:bf:88:36:59:ed:
                    fa:1e:58:b9:12:84:b4:6d:ec:7f:26:df:c7:99:9f:
                    02:44:2d:e8:08:10:ee:03:f0:e7:5f:24:9e:d0:c4:
                    ef:74:a0:8f:5b:7c:19:69:79:3f:4f:22:a1:6e:2b:
                    bc:ef:06:f5:b0:0e:8c:7e:e9:b3:6a:7a:3d:c7:81:
                    0b:55:95:44:11:0a:72:53:90:5a:34:f4:1f:d9:65:
                    1f:95:c1:20:ea:b0:20:26:70:4f:30:69:d1:5f:17:
                    0d:2c:3a:e6:c4:fb:ea:69:a0:aa:fe:ce:ef:f6:38:
                    28:bf:e1:90:c5:73:46:2e:e4:83:75:86:44:6b:95:
                    1a:12:bd:54:2d:ef:09:b1:b1:07:8a:a1:c9:cf:62:
                    4a:58:3e:eb:70:4d:c1:a0:37:b3:c5:2e:03:04:47:
                    8e:70:31:6a:0d:13:de:b5:54:cd:1f:76:74:d4:41:
                    22:24:e8:35:bd:5e:93:f8:ed:79:ad:e4:55:79:da:
                    33:55:a5:17:53:6f:77:7d:e3:b0:ce:1a:51:32:dc:
                    17:c2:d2:33:d8:08:b1:88:a4:bb:ae:b5:5d:cd:44:
                    ac:a9:d2:5b:ea:46:e9:98:7c:b3:ba:35:3f:e1:94:
                    2a:57:00:3d:a8:d4:98:7b:b1:a7:65:34:58:71:12:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:51:27:6F:17:30:73:14:11:85:89:29:5B:9A:0F:8A:48:C2:DA
            X509v3 Authority Key Identifier:
                keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/4137908cf894d9678c6c4f4d10d0fd39c9d907f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:60:32:bc:ef:f0:3c:2b:eb:02:5c:1c:03:07:1f:40:02:61:
         1f:2f:a6:b7:43:ba:47:37:90:b1:74:9a:2e:ec:11:59:18:18:
         f9:d6:b6:47:1c:3f:55:c9:ca:2c:a6:c3:f2:16:7d:e8:ff:26:
         7d:f7:b2:bb:3e:c7:d6:3f:e5:c2:f7:a4:b3:ff:19:6b:24:d6:
         0e:e2:f8:7c:6d:02:44:77:e6:d7:bf:7c:8e:b6:b4:7a:08:8f:
         e0:4f:e0:1d:44:2b:f7:6a:04:b5:6d:26:8f:19:85:c7:29:88:
         a1:b6:6c:c8:e3:20:8b:bb:9a:08:89:d3:bf:38:e0:59:65:98:
         18:f4:8b:8e:cf:b0:cf:db:0a:e5:bc:8d:e1:4a:4a:d8:07:57:
         48:0a:12:d9:b7:19:22:c4:07:ec:2c:40:dd:59:c3:32:f2:70:
         50:8a:01:42:01:73:ab:ff:ed:a5:24:86:52:40:45:df:0c:af:
         1d:e7:ce:42:4e:5e:b9:8a:88:99:26:ec:35:f7:dc:0b:ef:60:
         e2:e0:0e:5c:db:0c:40:9f:a2:49:14:38:87:57:86:ab:8c:5a:
         79:cf:af:12:c9:79:70:36:f4:a2:c5:b5:ff:14:9c:6e:a2:16:
         ac:7a:d0:f1:71:a4:b8:0a:cb:44:03:86:89:d2:fb:e7:8b:8a:
         20:72:21:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKeFcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQz
YTFkZDQwMzViOGQyOWJhNzU2NmM2NDUyOTYzNGZmNjQ3ODNhNGYwHhcNMjQwMjA2
MTUzNjQ3WhcNMjkwMjA2MTUzNjQ3WjAzMTEwLwYDVQQDEyg0MTM3OTA4Y2Y4OTRk
OTY3OGM2YzRmNGQxMGQwZmQzOWM5ZDkwN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxEdP45tK1ljIv4g2We36Hli5EoS0bex/Jt/HmZ8CRC3oCBDu
A/DnXySe0MTvdKCPW3wZaXk/TyKhbiu87wb1sA6Mfumzano9x4ELVZVEEQpyU5Ba
NPQf2WUflcEg6rAgJnBPMGnRXxcNLDrmxPvqaaCq/s7v9jgov+GQxXNGLuSDdYZE
a5UaEr1ULe8JsbEHiqHJz2JKWD7rcE3BoDezxS4DBEeOcDFqDRPetVTNH3Z01EEi
JOg1vV6T+O15reRVedozVaUXU293feOwzhpRMtwXwtIz2AixiKS7rrVdzUSsqdJb
6kbpmHyzujU/4ZQqVwA9qNSYe7GnZTRYcRIC4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKWZUSdvFzBzFBGFiSlbmg+KSMLaMB8GA1UdIwQYMBaAFBDAW2YqV0U2UCDx
1vqPWe9NlP7cMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDNhMWRk
NDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzQxMzc5MDhjZjg5NGQ5Njc4YzZjNGY0ZDEwZDBmZDM5YzlkOTA3ZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvNDNhMWRkNDAzNWI4ZDI5YmE3NTY2YzY0NTI5NjM0ZmY2NDc4M2E0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgH2jANBgkqhkiG9w0BAQsFAAOCAQEAMWAyvO/wPCvrAlwc
AwcfQAJhHy+mt0O6RzeQsXSaLuwRWRgY+da2Rxw/VcnKLKbD8hZ96P8mffeyuz7H
1j/lwveks/8ZayTWDuL4fG0CRHfm1798jra0egiP4E/gHUQr92oEtW0mjxmFxymI
obZsyOMgi7uaCInTvzjgWWWYGPSLjs+wz9sK5byN4UpK2AdXSAoS2bcZIsQH7CxA
3VnDMvJwUIoBQgFzq//tpSSGUkBF3wyvHefOQk5euYqImSbsNffcC+9g4uAOXNsM
QJ+iSRQ4h1eGq4xaec+vEsl5cDb0osW1/xScbqIWrHrQ8XGkuArLRAOGidL754uK
IHIh4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org