Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa
File:                     945e8fe88dc12fdfc788302a2e6559515e4166d3.roa (raw, json)
Hash identifier:          s3vQQamEddQq8XC3oG+25lL9j2/6I6j2SCki+Y0ZLDI=
Subject key identifier:   8D:28:1A:71:4E:27:FD:31:72:D1:29:9D:AE:6F:4B:7F:77:CF:04:7E
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1BAA37
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa
Signing time:             Tue 27 Sep 2022 20:34:05 +0000
ROA not before:           Tue 27 Sep 2022 20:22:39 +0000
ROA not after:            Fri 27 Sep 2024 20:22:39 +0000
asID:                     19114
IP address blocks:        200.24.192.0/20 maxlen: 20
                          200.24.192.0/19 maxlen: 19
                          200.24.208.0/20 maxlen: 20
                          200.24.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813047 (0x1baa37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Sep 27 20:22:39 2022 GMT
            Not After : Sep 27 20:22:39 2024 GMT
        Subject: CN=945e8fe88dc12fdfc788302a2e6559515e4166d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:e9:51:6d:c2:f0:89:c2:f8:90:b4:05:68:
                    ce:1c:4b:e2:d5:05:6c:f7:73:74:6e:74:8e:fc:ad:
                    44:9e:0a:59:32:76:5b:0f:04:59:98:63:39:23:70:
                    e7:30:23:57:5d:56:a3:3e:36:ab:88:6a:de:6c:3b:
                    88:96:cb:d7:59:ed:cb:fe:c2:af:ed:f4:b0:27:4d:
                    fc:09:1c:82:cd:39:31:b2:1a:7c:44:58:21:30:e2:
                    9a:78:6e:3b:4b:07:da:a1:c0:a1:bf:49:e0:88:95:
                    98:6e:81:a7:ba:a1:15:32:fe:bf:22:d4:ce:16:ba:
                    7a:52:09:69:ad:f7:2a:e6:7f:d0:e3:7c:30:ee:8c:
                    31:7b:02:4b:97:f3:e7:1d:d8:50:a9:ef:90:d7:46:
                    5c:66:2f:b4:60:12:80:a2:af:04:a0:a4:e2:b6:bf:
                    f0:af:bf:ef:50:b8:82:95:7e:a8:02:e6:c2:08:40:
                    38:ea:57:53:15:f5:90:e0:b1:ae:fb:12:80:63:64:
                    00:35:8f:4b:f2:db:9b:ac:a0:8b:3d:e8:a3:88:2e:
                    f5:7c:ea:44:09:d1:c1:60:22:95:f1:45:e8:67:db:
                    49:2a:04:d1:b5:38:1e:a1:94:8a:35:14:cc:47:91:
                    eb:f6:0e:36:87:8c:17:8b:50:f9:99:ce:06:53:ed:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:28:1A:71:4E:27:FD:31:72:D1:29:9D:AE:6F:4B:7F:77:CF:04:7E
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/945e8fe88dc12fdfc788302a2e6559515e4166d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:65:63:7a:4f:fa:b8:cf:af:8e:da:87:e3:f8:5d:26:b9:8d:
         d2:32:19:81:c2:19:af:82:f2:c3:12:20:2b:c2:5d:4e:0b:34:
         d7:a1:41:86:96:8b:59:0b:63:b7:9c:7d:d7:fc:fb:40:68:70:
         6d:09:4c:66:d0:ee:2c:15:ce:9c:05:52:d6:38:bb:7e:c0:20:
         56:27:9c:ab:57:f9:73:08:03:37:2c:44:04:91:fb:68:37:40:
         60:85:bf:76:c0:be:66:12:e6:54:1e:3e:58:8f:21:0d:49:41:
         df:03:0a:d7:e8:8d:57:f8:8f:96:c9:43:4d:05:fb:87:2a:c6:
         fa:13:17:e1:78:40:2d:71:e4:cd:a2:a0:6f:40:fb:b1:1f:15:
         c7:64:e3:d5:c4:a6:10:8c:4c:79:59:b3:18:36:c1:b5:a6:88:
         ed:7a:7b:3b:ba:78:11:00:af:14:dd:ab:44:7d:b3:00:4a:4f:
         20:4d:f3:a4:0d:fa:e3:ac:8f:41:46:c6:16:1a:d8:21:88:ad:
         36:4e:31:c9:8d:b3:55:4f:9e:09:84:0a:ba:7c:38:16:2b:71:
         e1:2b:c2:14:5f:cb:80:86:46:e6:c5:a8:44:54:2b:4f:d5:20:
         e0:a0:ef:e0:1e:2a:61:44:2d:b5:4d:85:24:c2:05:1a:63:1b:
         a5:c1:41:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG6o3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
ODEyZWVjZmNjMDFkMzhjNDQ0ZGJlYWU1MzIzNDY1MWFmOGM4NGQwHhcNMjIwOTI3
MjAyMjM5WhcNMjQwOTI3MjAyMjM5WjAzMTEwLwYDVQQDEyg5NDVlOGZlODhkYzEy
ZmRmYzc4ODMwMmEyZTY1NTk1MTVlNDE2NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz6vpUW3C8InC+JC0BWjOHEvi1QVs93N0bnSO/K1EngpZMnZb
DwRZmGM5I3DnMCNXXVajPjariGrebDuIlsvXWe3L/sKv7fSwJ038CRyCzTkxshp8
RFghMOKaeG47SwfaocChv0ngiJWYboGnuqEVMv6/ItTOFrp6Uglprfcq5n/Q43ww
7owxewJLl/PnHdhQqe+Q10ZcZi+0YBKAoq8EoKTitr/wr7/vULiClX6oAubCCEA4
6ldTFfWQ4LGu+xKAY2QANY9L8tubrKCLPeijiC71fOpECdHBYCKV8UXoZ9tJKgTR
tTgeoZSKNRTMR5Hr9g42h4wXi1D5mc4GU+3PPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI0oGnFOJ/0xctEpna5vS393zwR+MB8GA1UdIwQYMBaAFMVk0AydCQQDZ/TG
yoKXlo/kro9KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI4MTJl
ZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2Lzk0NWU4ZmU4OGRjMTJmZGZjNzg4MzAyYTJlNjU1OTUxNWU0MTY2ZDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvYWI4MTJlZWNmY2MwMWQzOGM0NDRkYmVhZTUzMjM0NjUxYWY4Yzg0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBcgYwDANBgkqhkiG9w0BAQsFAAOCAQEAN2Vjek/6uM+vjtqH
4/hdJrmN0jIZgcIZr4LywxIgK8JdTgs016FBhpaLWQtjt5x91/z7QGhwbQlMZtDu
LBXOnAVS1ji7fsAgViecq1f5cwgDNyxEBJH7aDdAYIW/dsC+ZhLmVB4+WI8hDUlB
3wMK1+iNV/iPlslDTQX7hyrG+hMX4XhALXHkzaKgb0D7sR8Vx2Tj1cSmEIxMeVmz
GDbBtaaI7Xp7O7p4EQCvFN2rRH2zAEpPIE3zpA3646yPQUbGFhrYIYitNk4xyY2z
VU+eCYQKunw4Fitx4SvCFF/LgIZG5sWoRFQrT9Ug4KDv4B4qYUQttU2FJMIFGmMb
pcFB8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org