Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa
File:                     84bc7cb88602e3d3c387e614c78d688e8d82b883.roa (raw, json)
Hash identifier:          3mVEQFBPgLaBuSRxSVZtywZ95tzqgPFeC8eVqC8Fko4=
Subject key identifier:   38:0A:7E:7C:F7:EE:80:0A:2B:BD:39:A7:90:AE:71:E5:55:34:8B:78
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26641E
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa
Signing time:             Fri 27 Oct 2023 16:37:43 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     22724
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515998 (0x26641e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=84bc7cb88602e3d3c387e614c78d688e8d82b883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:82:d5:07:45:cc:e6:d6:2d:40:d8:fa:3c:
                    6a:ae:33:e7:89:0d:68:ae:02:bf:c3:12:75:25:e6:
                    0c:38:24:11:e3:8d:0c:3d:8b:39:9d:0f:aa:aa:61:
                    56:e1:c6:bf:ae:5d:f2:b2:27:48:96:fe:49:12:13:
                    15:24:e3:b4:ba:0a:53:36:c9:d9:58:0e:cb:91:34:
                    8f:96:72:7c:50:bf:8b:32:3e:d3:08:8e:c6:c6:1b:
                    bd:c2:fa:e1:4f:c5:b3:ec:df:33:8f:7d:cd:05:5d:
                    58:9c:1a:d1:ec:92:2d:b2:30:02:60:c1:03:79:72:
                    85:94:5c:dd:f7:44:43:43:da:20:eb:23:29:6b:46:
                    4f:b5:26:53:44:7e:f3:bc:6f:fd:bf:38:ac:55:fa:
                    01:c7:f3:3a:ef:6c:c5:6d:50:6e:3f:a6:99:7a:de:
                    7f:8c:dd:8f:b9:c2:71:74:3f:5d:79:b2:6f:b7:bd:
                    e0:34:00:ac:d9:56:af:a3:bc:78:4d:07:dc:49:70:
                    af:a8:1d:91:0c:0b:f3:45:59:35:e4:2e:7b:55:09:
                    1c:c7:c3:60:eb:b2:05:39:ae:78:99:79:5e:b2:74:
                    2d:08:3b:5c:8b:a7:2b:81:3e:c9:b2:4a:36:b7:c0:
                    59:7f:95:e6:13:8a:44:dd:f3:86:2d:da:15:cd:6d:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:7E:7C:F7:EE:80:0A:2B:BD:39:A7:90:AE:71:E5:55:34:8B:78
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/84bc7cb88602e3d3c387e614c78d688e8d82b883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:19:ac:a8:50:2c:de:db:00:da:e4:b6:b4:36:e3:65:cc:4c:
         db:0b:f7:0a:5a:2d:de:3c:5b:e0:67:f4:25:49:48:05:f1:d6:
         a0:a9:1f:80:27:91:c6:c9:24:74:86:37:d8:d5:d4:fa:2d:d6:
         96:ce:83:7b:8d:b7:81:44:eb:3e:92:e7:b5:10:87:65:f0:d8:
         11:d9:3e:35:df:ae:bb:60:15:12:32:8b:df:49:b5:83:c3:81:
         4e:f3:3c:b0:c2:c6:76:f2:86:65:ac:13:7e:a8:c6:40:02:31:
         e8:b8:5a:20:21:f6:54:11:2c:c8:1c:a3:e2:e9:30:db:ab:77:
         8d:33:d6:06:50:71:b5:e6:e3:8d:3d:f6:bb:90:35:d3:0f:e6:
         4e:2c:56:da:46:cb:b3:58:20:85:54:e2:05:43:c4:1f:16:8d:
         f1:59:b2:ed:af:f1:15:60:53:55:3f:3a:6a:19:0a:b4:9a:fc:
         a2:af:81:0e:e3:d9:6f:f6:0d:4d:f0:5b:54:cb:86:eb:d7:7a:
         f3:2b:15:92:e4:d3:fa:84:68:5c:e9:fb:cd:b0:a1:61:2e:a9:
         9d:bc:7b:c3:eb:42:ec:d0:04:18:75:cd:84:f4:d1:b5:43:45:
         b2:16:e2:65:85:67:51:8e:f6:c9:0b:e3:5e:ac:6c:f8:85:3e:
         16:33:3b:b6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJmQeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
YzE1MjQxYzZhZjhmYzlhZTYyNTYzOWJkYmZhMmJlZjY5MTliZTQwHhcNMjMxMDI3
MTYzNzM2WhcNMjgxMDI3MTYzNzM2WjAzMTEwLwYDVQQDEyg4NGJjN2NiODg2MDJl
M2QzYzM4N2U2MTRjNzhkNjg4ZThkODJiODgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqrqC1QdFzObWLUDY+jxqrjPniQ1orgK/wxJ1JeYMOCQR440M
PYs5nQ+qqmFW4ca/rl3ysidIlv5JEhMVJOO0ugpTNsnZWA7LkTSPlnJ8UL+LMj7T
CI7Gxhu9wvrhT8Wz7N8zj33NBV1YnBrR7JItsjACYMEDeXKFlFzd90RDQ9og6yMp
a0ZPtSZTRH7zvG/9vzisVfoBx/M672zFbVBuP6aZet5/jN2PucJxdD9debJvt73g
NACs2Vavo7x4TQfcSXCvqB2RDAvzRVk15C57VQkcx8Ng67IFOa54mXlesnQtCDtc
i6crgT7Jsko2t8BZf5XmE4pE3fOGLdoVzW2JJwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDgKfnz37oAKK705p5CuceVVNIt4MB8GA1UdIwQYMBaAFDz9LAROcn3+W7pK
whmA4PR6+SKvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDNjMTUy
NDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2Lzg0YmM3Y2I4ODYwMmUzZDNjMzg3ZTYxNGM3OGQ2ODhlOGQ4MmI4ODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvZDNjMTUyNDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgH0zANBgkqhkiG9w0BAQsFAAOCAQEABhmsqFAs3tsA2uS2
tDbjZcxM2wv3Clot3jxb4Gf0JUlIBfHWoKkfgCeRxskkdIY32NXU+i3Wls6De423
gUTrPpLntRCHZfDYEdk+Nd+uu2AVEjKL30m1g8OBTvM8sMLGdvKGZawTfqjGQAIx
6LhaICH2VBEsyByj4ukw26t3jTPWBlBxtebjjT32u5A10w/mTixW2kbLs1gghVTi
BUPEHxaN8Vmy7a/xFWBTVT86ahkKtJr8oq+BDuPZb/YNTfBbVMuG69d68ysVkuTT
+oRoXOn7zbChYS6pnbx7w+tC7NAEGHXNhPTRtUNFshbiZYVnUY72yQvjXqxs+IU+
FjM7tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org