Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5245fc8e5fd54ed612872589f93231c5c6c84cba.roa
File:                     5245fc8e5fd54ed612872589f93231c5c6c84cba.roa (raw, json)
Hash identifier:          OiM0Zn9pl6W5D34qN5xgYJ2WZI3LsdrilfdElnxXFiI=
Subject key identifier:   6E:09:9D:E0:26:78:11:5F:AA:55:A2:FA:B0:27:02:8E:A3:DB:A6:62
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DC0D9
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5245fc8e5fd54ed612872589f93231c5c6c84cba.roa
Signing time:             Wed 24 Mar 2021 14:40:24 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     22724
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901337 (0xdc0d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=5245fc8e5fd54ed612872589f93231c5c6c84cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:3d:28:22:89:b6:95:48:77:d4:c3:b9:e6:
                    51:7b:3c:7b:a7:ff:a3:c6:10:98:18:06:57:b8:d8:
                    40:32:52:90:c7:f4:a8:3e:f2:72:d3:9d:df:8f:61:
                    f2:cb:7b:aa:24:8f:55:17:83:17:ab:27:2f:18:54:
                    3c:71:66:a3:94:05:12:a0:8d:68:a8:e4:0d:c5:03:
                    8a:70:8e:6b:cc:da:57:e4:bb:9f:43:bc:2f:df:4c:
                    b5:97:f6:7d:c1:07:e0:63:c9:ea:ab:85:07:b7:56:
                    01:d4:c5:42:ea:7b:7d:3b:0c:ed:47:63:d6:ef:8d:
                    57:e3:c4:fd:7f:40:8a:15:f9:c1:22:87:a8:cc:a8:
                    81:ff:52:87:ff:28:6c:96:01:d5:4d:f8:1c:1f:08:
                    bd:e2:45:77:3c:ba:03:0e:df:99:31:0b:c8:12:d6:
                    12:5e:17:9e:0c:35:ee:2c:cd:f9:f7:d6:b3:20:60:
                    42:8a:d1:e2:88:f3:c5:4a:72:6f:db:97:01:2f:eb:
                    9c:aa:2c:92:e5:15:26:b4:06:74:47:2a:42:9f:d2:
                    52:11:35:93:fe:60:f2:a0:c7:c7:b4:82:61:d7:74:
                    51:3c:c4:75:d0:fb:1a:9d:46:53:a6:a7:61:23:68:
                    b8:20:0a:69:09:dc:23:cf:5c:56:91:3c:7d:61:a8:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:9D:E0:26:78:11:5F:AA:55:A2:FA:B0:27:02:8E:A3:DB:A6:62
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/5245fc8e5fd54ed612872589f93231c5c6c84cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:e9:c8:8f:64:53:2d:29:c0:98:0b:46:56:c1:3d:35:67:
         0c:a2:2e:74:fb:be:d1:72:11:9a:26:88:45:1e:3c:62:bf:75:
         b2:84:10:34:4e:d8:2a:20:65:1f:c8:e6:74:9a:eb:e7:02:2f:
         81:9d:29:be:6c:7a:7d:45:89:2f:40:92:c5:ac:20:73:9a:b5:
         23:92:79:44:9c:b4:52:d2:5c:d9:fa:6c:86:57:60:7a:d3:19:
         d2:5b:0a:f8:3f:2a:69:78:6d:22:67:77:6c:86:45:8e:6b:90:
         7b:ac:4c:a5:e2:dc:21:dc:24:15:bc:e4:02:a5:ae:27:8e:73:
         48:a6:ff:cd:c8:9c:cc:83:15:ab:bf:b8:68:82:2d:b7:cf:75:
         de:c2:cf:2d:25:71:eb:9d:24:9e:ae:95:fa:eb:09:a6:dc:32:
         d3:bf:d6:b5:3b:c1:ac:43:84:21:3c:5a:07:18:9d:22:8d:49:
         e9:16:cc:cd:c6:48:99:e9:e5:38:53:6b:bb:7d:43:0f:df:04:
         7d:f3:01:84:61:89:90:d0:fa:1e:e8:de:14:89:13:51:ab:47:
         03:32:1e:8c:82:7e:1f:5f:e8:74:76:ae:a7:0a:fb:34:3f:b5:
         ac:a5:59:09:bc:18:03:3f:ec:66:0f:ca:19:ce:54:35:3b:97:
         f3:f4:2c:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcDZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
ODEyZWVjZmNjMDFkMzhjNDQ0ZGJlYWU1MzIzNDY1MWFmOGM4NGQwHhcNMjEwMzI0
MTQ0MDIzWhcNMjYwMzI0MTQ0MDIzWjAzMTEwLwYDVQQDEyg1MjQ1ZmM4ZTVmZDU0
ZWQ2MTI4NzI1ODlmOTMyMzFjNWM2Yzg0Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcQ9KCKJtpVId9TDueZRezx7p/+jxhCYGAZXuNhAMlKQx/So
PvJy053fj2Hyy3uqJI9VF4MXqycvGFQ8cWajlAUSoI1oqOQNxQOKcI5rzNpX5Luf
Q7wv30y1l/Z9wQfgY8nqq4UHt1YB1MVC6nt9OwztR2PW741X48T9f0CKFfnBIoeo
zKiB/1KH/yhslgHVTfgcHwi94kV3PLoDDt+ZMQvIEtYSXheeDDXuLM3599azIGBC
itHiiPPFSnJv25cBL+ucqiyS5RUmtAZ0RypCn9JSETWT/mDyoMfHtIJh13RRPMR1
0PsanUZTpqdhI2i4IAppCdwjz1xWkTx9YagwTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG4JneAmeBFfqlWi+rAnAo6j26ZiMB8GA1UdIwQYMBaAFMVk0AydCQQDZ/TG
yoKXlo/kro9KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI4MTJl
ZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2LzUyNDVmYzhlNWZkNTRlZDYxMjg3MjU4OWY5MzIzMWM1YzZjODRjYmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvYWI4MTJlZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgH0zANBgkqhkiG9w0BAQsFAAOCAQEAGmPpyI9kUy0pwJgL
RlbBPTVnDKIudPu+0XIRmiaIRR48Yr91soQQNE7YKiBlH8jmdJrr5wIvgZ0pvmx6
fUWJL0CSxawgc5q1I5J5RJy0UtJc2fpshldgetMZ0lsK+D8qaXhtImd3bIZFjmuQ
e6xMpeLcIdwkFbzkAqWuJ45zSKb/zciczIMVq7+4aIItt8913sLPLSVx650knq6V
+usJptwy07/WtTvBrEOEITxaBxidIo1J6RbMzcZImenlOFNru31DD98EffMBhGGJ
kND6HujeFIkTUatHAzIejIJ+H1/odHaupwr7ND+1rKVZCbwYAz/sZg/KGc5UNTuX
8/Qsug==
-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org