Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ac3c5cb7df7ab965b31b1398edb3a4f32e20bd2f.roa
File:                     ac3c5cb7df7ab965b31b1398edb3a4f32e20bd2f.roa (raw, json)
Hash identifier:          btYAj6DJHxBl8LiEl7O/2aSoJNIyg96jk9GBGRlOReU=
Subject key identifier:   78:1C:45:0C:82:0F:BF:0F:2E:F8:A3:7C:4D:96:63:4E:A4:07:08:E2
Certificate issuer:       /CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
Certificate serial:       09223C
Authority key identifier: 9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ac3c5cb7df7ab965b31b1398edb3a4f32e20bd2f.roa
Signing time:             Thu 22 Apr 2021 22:36:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271895
IP address blocks:        200.14.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598588 (0x9223c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce035223add7affbc39c50745e4f0a03ba5ff31c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ac3c5cb7df7ab965b31b1398edb3a4f32e20bd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:b5:92:8f:e9:ee:65:61:e1:7a:85:d0:c9:
                    18:11:ee:8f:cf:e7:4d:e5:eb:05:5e:33:48:14:ca:
                    77:4c:99:e3:25:b4:b8:29:55:fc:1a:c0:b3:e8:d4:
                    85:4e:49:a6:84:6f:30:52:b5:7a:63:3e:9b:fa:54:
                    3f:cc:4b:21:f2:f1:12:a9:e2:25:0f:2b:96:67:f5:
                    c1:5a:52:96:f5:b7:a0:a5:c7:a6:30:4c:1e:c4:b4:
                    fc:e4:a4:ea:ab:15:98:24:45:49:fc:f5:9c:89:95:
                    ea:bb:f4:32:c8:40:58:ef:07:61:50:ef:88:a3:7b:
                    1a:da:6f:4b:4d:66:32:d4:f9:a1:f6:ad:e8:ff:26:
                    46:58:49:7e:ad:f9:0d:ea:fa:70:39:e5:de:a2:b5:
                    6b:12:52:bf:6c:be:20:85:17:53:53:31:e1:f4:b7:
                    69:fe:df:e5:e3:2a:a2:c0:3b:ff:38:28:29:70:fc:
                    54:b1:6f:31:72:97:dc:f5:07:02:e5:6f:83:75:fe:
                    5b:3f:66:c8:34:13:8d:0a:4c:8b:95:79:a9:ab:6d:
                    ef:d7:7c:d3:78:3c:58:b8:47:ef:c3:56:d8:cd:b7:
                    c2:6b:5b:e7:f3:47:e5:6a:21:e2:a7:28:de:be:e2:
                    02:15:2c:a6:9f:0f:35:42:88:40:2f:b7:30:9e:28:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1C:45:0C:82:0F:BF:0F:2E:F8:A3:7C:4D:96:63:4E:A4:07:08:E2
            X509v3 Authority Key Identifier:
                keyid:9F:8C:85:E4:7B:85:1C:A5:1A:9A:93:58:2B:4A:9E:0E:0F:96:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce035223add7affbc39c50745e4f0a03ba5ff31c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ac3c5cb7df7ab965b31b1398edb3a4f32e20bd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58c6eceb-4910-4496-af67-39c7d8ce8e3d/ce035223add7affbc39c50745e4f0a03ba5ff31c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ec:c8:20:94:e1:17:59:08:7f:68:d4:de:9e:51:ed:ba:9f:
         44:22:9c:3d:c2:65:fe:34:42:46:ec:be:7d:c0:af:9d:e1:c4:
         e8:24:a5:fe:e6:0a:03:71:b4:4b:4f:ad:0c:e0:6d:39:bd:aa:
         a8:33:a8:ba:09:62:90:20:3f:b0:74:26:11:b5:7c:c9:e1:b8:
         a3:3f:0a:fb:92:8f:82:cc:2f:89:c5:6b:5a:7c:7b:45:59:94:
         3e:09:a3:da:61:71:71:e4:f2:f9:42:39:7f:c7:8c:2f:9f:8a:
         45:b2:ba:af:a9:82:14:8f:87:ba:ec:a4:a1:91:85:a3:26:2d:
         3e:8a:1b:35:30:d1:5a:91:1a:1a:04:33:ec:28:1e:02:40:92:
         da:76:f4:13:9c:53:f9:cc:7c:9f:37:86:1d:2c:3d:45:fe:4d:
         5d:c6:f7:b0:4c:14:5d:78:32:90:51:f6:f6:9f:5b:ee:1e:c9:
         57:24:16:02:0c:1b:21:f8:4d:6e:a6:20:6e:54:5a:97:30:c8:
         a1:6c:1d:85:05:83:d0:fb:8e:39:b1:45:cb:d0:ed:31:d6:83:
         cd:ff:9b:2b:91:56:99:fe:32:e9:f6:05:03:1d:22:9d:75:bd:
         aa:cf:bb:84:c8:ec:63:df:3f:60:fd:13:87:37:b9:21:99:97:
         3a:00:09:18
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCSI8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MDM1MjIzYWRkN2FmZmJjMzljNTA3NDVlNGYwYTAzYmE1ZmYzMWMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhhYzNjNWNiN2RmN2Fi
OTY1YjMxYjEzOThlZGIzYTRmMzJlMjBiZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAojm1ko/p7mVh4XqF0MkYEe6Pz+dN5esFXjNIFMp3TJnjJbS4
KVX8GsCz6NSFTkmmhG8wUrV6Yz6b+lQ/zEsh8vESqeIlDyuWZ/XBWlKW9begpcem
MEwexLT85KTqqxWYJEVJ/PWciZXqu/QyyEBY7wdhUO+Io3sa2m9LTWYy1Pmh9q3o
/yZGWEl+rfkN6vpwOeXeorVrElK/bL4ghRdTUzHh9Ldp/t/l4yqiwDv/OCgpcPxU
sW8xcpfc9QcC5W+Ddf5bP2bINBONCkyLlXmpq23v13zTeDxYuEfvw1bYzbfCa1vn
80flaiHipyjevuICFSymnw81QohAL7cwnig9cQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHgcRQyCD78PLvijfE2WY06kBwjiMB8GA1UdIwQYMBaAFJ+MheR7hRylGpqT
WCtKng4Plj9nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UwMzUy
MjNhZGQ3YWZmYmMzOWM1MDc0NWU0ZjBhMDNiYTVmZjMxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThjNmVjZWItNDkxMC00NDk2LWFmNjctMzljN2Q4
Y2U4ZTNkL2FjM2M1Y2I3ZGY3YWI5NjViMzFiMTM5OGVkYjNhNGYzMmUyMGJkMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGM2ZWNlYi00OTEwLTQ0OTYtYWY2Ny0zOWM3
ZDhjZThlM2QvY2UwMzUyMjNhZGQ3YWZmYmMzOWM1MDc0NWU0ZjBhMDNiYTVmZjMx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgOPzANBgkqhkiG9w0BAQsFAAOCAQEAwOzIIJThF1kIf2jU
3p5R7bqfRCKcPcJl/jRCRuy+fcCvneHE6CSl/uYKA3G0S0+tDOBtOb2qqDOougli
kCA/sHQmEbV8yeG4oz8K+5KPgswvicVrWnx7RVmUPgmj2mFxceTy+UI5f8eML5+K
RbK6r6mCFI+HuuykoZGFoyYtPoobNTDRWpEaGgQz7CgeAkCS2nb0E5xT+cx8nzeG
HSw9Rf5NXcb3sEwUXXgykFH29p9b7h7JVyQWAgwbIfhNbqYgblRalzDIoWwdhQWD
0PuOObFFy9DtMdaDzf+bK5FWmf4y6fYFAx0inXW9qs+7hMjsY98/YP0Thze5IZmX
OgAJGA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org