Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/614c6a32-ccc8-4b44-a4b6-8ff54559de8b/39841374d8f2f2e5681c7f00493c7d211c6ba1d2.roa
File:                     39841374d8f2f2e5681c7f00493c7d211c6ba1d2.roa (raw, json)
Hash identifier:          DfJMFpH/YKXVqwZ+a8JDwK7fzi/g8wcuI/W2SKrdasw=
Subject key identifier:   9D:61:67:4D:41:D9:8C:A6:37:5B:36:4A:5C:3E:CD:2D:D9:07:E7:D5
Certificate issuer:       /CN=c140610d7d81a8f7ed032d8266704ca81216644e
Certificate serial:       0405D4
Authority key identifier: 1E:EC:A0:42:FA:1C:33:EE:AB:EE:BC:38:85:9B:8D:5E:FA:E9:A2:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c140610d7d81a8f7ed032d8266704ca81216644e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/614c6a32-ccc8-4b44-a4b6-8ff54559de8b/39841374d8f2f2e5681c7f00493c7d211c6ba1d2.roa
Signing time:             Wed 24 Mar 2021 14:30:16 +0000
ROA not before:           Wed 24 Mar 2021 14:30:16 +0000
ROA not after:            Tue 24 Mar 2026 14:30:16 +0000
asID:                     270063
IP address blocks:        200.81.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263636 (0x405d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c140610d7d81a8f7ed032d8266704ca81216644e
        Validity
            Not Before: Mar 24 14:30:16 2021 GMT
            Not After : Mar 24 14:30:16 2026 GMT
        Subject: CN=39841374d8f2f2e5681c7f00493c7d211c6ba1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:1b:ae:6e:eb:8f:a7:11:3d:82:b8:d8:e1:
                    8b:5f:82:8c:47:9e:f4:48:89:32:a1:e5:87:b6:ad:
                    1b:da:0b:2c:64:95:66:d1:ae:3a:e9:3f:6b:71:fe:
                    64:64:d4:9a:95:42:4a:d7:27:ac:45:17:50:a9:90:
                    c4:82:3d:c3:69:a2:95:af:2f:ea:97:39:ef:c7:9a:
                    3c:0a:d5:03:96:d5:2a:72:b0:a9:25:5b:47:db:45:
                    4c:e7:e1:97:86:25:a5:f5:f9:c7:1f:a1:9f:dd:33:
                    3a:b3:4c:d0:07:f1:4b:61:86:60:a6:c0:05:eb:77:
                    19:a7:a9:bf:c8:7b:ec:9b:2f:fa:6e:0a:20:36:f2:
                    bf:c6:b2:59:16:54:98:00:e0:e0:d8:f7:24:3a:d2:
                    3c:cd:d8:bd:8a:21:d2:06:d9:06:11:e1:27:bd:e4:
                    89:1a:ac:93:c7:4a:50:68:04:b3:08:cc:41:55:1c:
                    b6:e5:8b:69:82:ac:9e:8f:17:be:8a:3f:dc:57:9d:
                    92:34:c2:fa:c8:2a:fb:dd:d7:aa:96:55:0d:39:90:
                    0e:a3:06:09:14:c7:21:40:37:48:b9:80:c0:bc:58:
                    d4:a5:d3:5d:46:9a:ce:0a:64:97:26:18:10:60:32:
                    d7:8e:6c:cf:fb:dc:11:30:fe:64:19:0c:fd:7e:61:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:61:67:4D:41:D9:8C:A6:37:5B:36:4A:5C:3E:CD:2D:D9:07:E7:D5
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:42:FA:1C:33:EE:AB:EE:BC:38:85:9B:8D:5E:FA:E9:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c140610d7d81a8f7ed032d8266704ca81216644e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/614c6a32-ccc8-4b44-a4b6-8ff54559de8b/39841374d8f2f2e5681c7f00493c7d211c6ba1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/614c6a32-ccc8-4b44-a4b6-8ff54559de8b/c140610d7d81a8f7ed032d8266704ca81216644e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:00:3f:5b:df:81:97:23:59:35:90:cc:bd:26:2d:b9:53:88:
         9c:d1:a3:f9:2a:1f:a4:ff:21:95:0c:cb:29:35:5d:dd:da:63:
         43:61:89:c4:98:20:42:6a:6a:16:0a:fb:f2:22:66:c5:12:d1:
         f2:17:20:36:da:cc:ac:55:ca:52:9a:02:ba:62:ed:7f:e7:a8:
         82:17:1b:06:0e:8f:74:7f:43:13:01:35:6f:3d:54:0b:c3:0d:
         44:07:90:66:23:de:7e:71:3a:12:ff:df:58:b6:ef:2e:fc:cf:
         8f:04:4f:d5:2b:0a:32:bf:b7:8f:3d:dc:3c:75:cf:47:c8:55:
         82:c9:4f:2a:e1:9a:a4:9d:1b:95:ef:94:15:e4:9a:60:1f:40:
         1a:49:ad:e5:12:69:d8:5d:a1:eb:70:29:05:09:1c:38:0e:c8:
         33:ba:fc:4e:53:0d:80:d2:17:28:94:04:5a:ba:b4:1e:00:3f:
         25:3e:f8:b5:39:ab:47:49:7f:32:dd:04:7c:9f:bd:bc:98:31:
         88:cc:b0:af:85:26:50:82:7c:c8:55:bf:a7:0d:05:e0:60:b3:
         d1:f9:0d:03:ca:bb:1f:5f:c0:61:52:63:4a:5d:cc:fb:de:54:
         0c:70:10:47:4f:54:37:c4:21:b7:74:72:da:2b:e5:ef:ff:fe:
         c2:3d:4b:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBAXUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
NDA2MTBkN2Q4MWE4ZjdlZDAzMmQ4MjY2NzA0Y2E4MTIxNjY0NGUwHhcNMjEwMzI0
MTQzMDE2WhcNMjYwMzI0MTQzMDE2WjAzMTEwLwYDVQQDEygzOTg0MTM3NGQ4ZjJm
MmU1NjgxYzdmMDA0OTNjN2QyMTFjNmJhMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoV4brm7rj6cRPYK42OGLX4KMR570SIkyoeWHtq0b2gssZJVm
0a466T9rcf5kZNSalUJK1yesRRdQqZDEgj3DaaKVry/qlznvx5o8CtUDltUqcrCp
JVtH20VM5+GXhiWl9fnHH6Gf3TM6s0zQB/FLYYZgpsAF63cZp6m/yHvsmy/6bgog
NvK/xrJZFlSYAODg2PckOtI8zdi9iiHSBtkGEeEnveSJGqyTx0pQaASzCMxBVRy2
5Ytpgqyejxe+ij/cV52SNML6yCr73deqllUNOZAOowYJFMchQDdIuYDAvFjUpdNd
RprOCmSXJhgQYDLXjmzP+9wRMP5kGQz9fmEUuwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ1hZ01B2YymN1s2Slw+zS3ZB+fVMB8GA1UdIwQYMBaAFB7soEL6HDPuq+68
OIWbjV766aKfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE0MDYx
MGQ3ZDgxYThmN2VkMDMyZDgyNjY3MDRjYTgxMjE2NjQ0ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjE0YzZhMzItY2NjOC00YjQ0LWE0YjYtOGZmNTQ1
NTlkZThiLzM5ODQxMzc0ZDhmMmYyZTU2ODFjN2YwMDQ5M2M3ZDIxMWM2YmExZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTRjNmEzMi1jY2M4LTRiNDQtYTRiNi04ZmY1
NDU1OWRlOGIvYzE0MDYxMGQ3ZDgxYThmN2VkMDMyZDgyNjY3MDRjYTgxMjE2NjQ0
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAshRlDANBgkqhkiG9w0BAQsFAAOCAQEAZQA/W9+BlyNZNZDM
vSYtuVOInNGj+SofpP8hlQzLKTVd3dpjQ2GJxJggQmpqFgr78iJmxRLR8hcgNtrM
rFXKUpoCumLtf+eoghcbBg6PdH9DEwE1bz1UC8MNRAeQZiPefnE6Ev/fWLbvLvzP
jwRP1SsKMr+3jz3cPHXPR8hVgslPKuGapJ0ble+UFeSaYB9AGkmt5RJp2F2h63Ap
BQkcOA7IM7r8TlMNgNIXKJQEWrq0HgA/JT74tTmrR0l/Mt0EfJ+9vJgxiMywr4Um
UIJ8yFW/pw0F4GCz0fkNA8q7H1/AYVJjSl3M+95UDHAQR09UN8Qht3Ry2ivl7//+
wj1Ljw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org