Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/3deb84e07aa5e024e3d445ee7d2cbb817c859187.roa
File:                     3deb84e07aa5e024e3d445ee7d2cbb817c859187.roa (raw, json)
Hash identifier:          sqT+B2DWasCHTwAC0NkfcaYS0IddbMio/hJugIh1C4Y=
Subject key identifier:   02:08:52:F6:4F:19:90:EA:FB:08:A3:8D:5B:61:9D:E2:2D:56:48:E4
Certificate issuer:       /CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
Certificate serial:       091E73
Authority key identifier: 9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/3deb84e07aa5e024e3d445ee7d2cbb817c859187.roa
Signing time:             Thu 22 Apr 2021 22:35:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271894
IP address blocks:        200.14.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597619 (0x91e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3deb84e07aa5e024e3d445ee7d2cbb817c859187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:2a:fe:90:0e:da:9e:40:e0:20:42:81:e6:
                    34:ed:7c:6b:b6:cf:36:e0:6e:02:2b:f1:82:80:cf:
                    f7:56:94:77:67:de:9e:87:bd:41:c4:af:53:95:55:
                    65:03:83:87:98:42:74:f3:f5:6e:57:23:b5:7b:29:
                    40:22:e4:c7:5a:ae:67:18:9e:ab:aa:36:66:38:7d:
                    8f:18:54:cd:c4:38:7e:71:c2:68:e1:be:fe:54:da:
                    2a:57:3b:9e:74:a6:00:f1:69:7b:6d:5d:ff:40:12:
                    ed:85:e1:10:ad:8d:11:0a:47:b3:2b:98:73:f3:3c:
                    b5:75:3e:b2:18:f1:39:0e:9c:82:08:3c:53:f3:4e:
                    14:15:88:52:ac:bd:f7:2e:cc:05:e2:cd:cf:61:51:
                    30:56:09:2c:91:b4:ad:8c:dc:db:00:12:e8:b8:47:
                    c6:5c:01:23:a5:27:bc:59:1f:9c:9d:7b:d4:08:0f:
                    e7:96:c3:f9:a7:76:a2:31:60:1a:8b:0e:26:2e:71:
                    55:14:0c:e9:20:ec:9b:93:a9:71:39:fe:e9:0a:b2:
                    73:e4:1f:f3:73:40:f2:4f:4c:68:88:f8:f7:87:86:
                    fc:3d:2a:e8:62:bf:1b:a7:d3:d7:25:31:7e:07:50:
                    0c:7c:55:27:7a:7f:7a:33:c6:3d:a8:63:c4:31:e0:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:52:F6:4F:19:90:EA:FB:08:A3:8D:5B:61:9D:E2:2D:56:48:E4
            X509v3 Authority Key Identifier:
                keyid:9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/3deb84e07aa5e024e3d445ee7d2cbb817c859187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:a2:37:c1:a5:ad:77:7d:04:f4:06:99:65:d3:c2:a0:fa:
         44:bf:50:15:cf:cf:75:7c:ed:87:ac:6f:23:a8:39:45:7c:90:
         9a:23:d5:04:7d:03:ba:d8:d1:e1:bb:84:c6:23:9f:29:37:18:
         04:0d:b7:3e:d0:6a:04:e2:40:da:27:d5:b0:c5:15:1e:53:4b:
         8b:c9:81:94:3a:e3:ed:12:87:a8:8f:50:d6:55:59:55:70:68:
         69:28:94:2a:a1:6e:38:09:c0:72:c9:59:21:a4:eb:77:95:0c:
         c5:50:8a:f6:9e:01:79:3d:f6:f1:da:94:44:2a:70:69:c7:f7:
         60:86:e8:93:d6:37:44:e4:23:10:20:26:c9:a7:98:88:0f:52:
         7c:41:2b:39:f4:4e:34:93:37:70:f2:34:51:f8:60:14:98:cd:
         a9:0a:ff:09:5f:32:32:c4:1e:19:07:cc:69:c9:67:96:96:e7:
         cc:92:9c:30:a9:22:ec:22:5d:91:c7:3e:e7:ae:76:33:2e:81:
         68:13:78:bf:2a:5e:54:5a:1b:74:80:ed:95:05:6c:c0:d7:4a:
         24:f1:22:c9:a2:01:dd:df:38:d9:96:5e:61:11:fe:8b:4e:f4:
         0c:a4:4f:04:38:04:8b:aa:59:19:a5:fb:68:36:ff:df:2b:4f:
         ee:d2:97:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCR5zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MDM1MjIzYWRkN2FmZmJjMzljNTA3NDVlNGYwYTAzYmE1ZmYzMWMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzZGViODRlMDdhYTVl
MDI0ZTNkNDQ1ZWU3ZDJjYmI4MTdjODU5MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmEcq/pAO2p5A4CBCgeY07Xxrts824G4CK/GCgM/3VpR3Z96e
h71BxK9TlVVlA4OHmEJ08/VuVyO1eylAIuTHWq5nGJ6rqjZmOH2PGFTNxDh+ccJo
4b7+VNoqVzuedKYA8Wl7bV3/QBLtheEQrY0RCkezK5hz8zy1dT6yGPE5DpyCCDxT
804UFYhSrL33LswF4s3PYVEwVgkskbStjNzbABLouEfGXAEjpSe8WR+cnXvUCA/n
lsP5p3aiMWAaiw4mLnFVFAzpIOybk6lxOf7pCrJz5B/zc0DyT0xoiPj3h4b8PSro
Yr8bp9PXJTF+B1AMfFUnen96M8Y9qGPEMeA3JwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAIIUvZPGZDq+wijjVthneItVkjkMB8GA1UdIwQYMBaAFJ+MheR7hRylGpqT
WCtKng4Plj9nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UwMzUy
MjNhZGQ3YWZmYmMzOWM1MDc0NWU0ZjBhMDNiYTVmZjMxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThjNmVjZWItNDkxMC00NDk2LWFmNjctMzljN2Q4
Y2U4ZTNkLzNkZWI4NGUwN2FhNWUwMjRlM2Q0NDVlZTdkMmNiYjgxN2M4NTkxODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGM2ZWNlYi00OTEwLTQ0OTYtYWY2Ny0zOWM3
ZDhjZThlM2QvY2UwMzUyMjNhZGQ3YWZmYmMzOWM1MDc0NWU0ZjBhMDNiYTVmZjMx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgOPjANBgkqhkiG9w0BAQsFAAOCAQEATlWiN8GlrXd9BPQG
mWXTwqD6RL9QFc/PdXzth6xvI6g5RXyQmiPVBH0DutjR4buExiOfKTcYBA23PtBq
BOJA2ifVsMUVHlNLi8mBlDrj7RKHqI9Q1lVZVXBoaSiUKqFuOAnAcslZIaTrd5UM
xVCK9p4BeT328dqURCpwacf3YIbok9Y3ROQjECAmyaeYiA9SfEErOfRONJM3cPI0
UfhgFJjNqQr/CV8yMsQeGQfMaclnlpbnzJKcMKki7CJdkcc+5652My6BaBN4vype
VFobdIDtlQVswNdKJPEiyaIB3d842ZZeYRH+i070DKRPBDgEi6pZGaX7aDb/3ytP
7tKXPA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org