Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/1417d958a885ded00f3c27e3ff56faa457a9a6b7.roa
File:                     1417d958a885ded00f3c27e3ff56faa457a9a6b7.roa (raw, json)
Hash identifier:          aVj4jr2iZEyaGf5E3CoTjRmNCElIvhr0VyO+kT7krpk=
Subject key identifier:   52:46:D8:B2:EB:86:F1:47:5E:B8:49:81:6C:42:A8:4E:A2:C2:FC:C3
Certificate issuer:       /CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Certificate serial:       2053A6
Authority key identifier: 83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/1417d958a885ded00f3c27e3ff56faa457a9a6b7.roa
Signing time:             Wed 10 May 2023 11:18:22 +0000
ROA not before:           Tue 09 May 2023 11:18:22 +0000
ROA not after:            Sat 10 May 2025 11:18:22 +0000
asID:                     27940
IP address blocks:        200.110.192.0/21 maxlen: 24
                          190.122.64.0/20 maxlen: 24
                          131.100.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118566 (0x2053a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
        Validity
            Not Before: May  9 11:18:22 2023 GMT
            Not After : May 10 11:18:22 2025 GMT
        Subject: CN=1417d958a885ded00f3c27e3ff56faa457a9a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:bf:94:a1:70:c5:93:55:cf:ec:57:fb:a1:
                    dd:51:e5:c5:04:a9:f0:06:bd:8a:56:00:25:13:e5:
                    d1:8d:dc:84:ae:3f:2a:82:c7:04:ae:32:f6:c1:fb:
                    84:05:50:dd:62:f7:d7:7b:52:1f:62:d8:08:84:0d:
                    50:5e:d3:91:95:ba:1c:4f:2b:1e:dc:06:88:c0:15:
                    90:74:d9:50:42:9c:25:9c:7b:34:10:7d:9a:40:b6:
                    31:b7:98:a5:21:72:e6:d1:80:cc:98:96:51:2c:3f:
                    93:81:8b:52:d7:bc:4c:6b:ac:1f:8a:61:1a:f6:83:
                    94:b4:8c:8a:fe:0a:1d:07:84:b4:e6:d9:71:0f:e4:
                    53:a9:98:02:b3:0e:46:a3:03:39:0a:14:8d:7c:e9:
                    9d:17:8a:d0:f3:b7:1e:cd:0f:5b:33:aa:5e:f9:8b:
                    32:11:c1:7d:e2:0e:c6:7b:80:e0:67:b1:af:9d:82:
                    4e:cd:08:e6:01:44:1b:0c:a3:20:b4:5c:b0:4a:1b:
                    b6:40:8f:4a:3e:8f:62:43:6c:ae:f6:fd:51:27:f9:
                    d2:13:ad:7e:b0:ba:2e:f6:2a:e8:c3:4f:89:83:31:
                    83:bf:8e:9a:36:f7:7c:88:16:43:5c:13:eb:4c:f1:
                    a7:c2:27:04:ab:60:23:58:11:38:73:30:2e:40:cf:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:D8:B2:EB:86:F1:47:5E:B8:49:81:6C:42:A8:4E:A2:C2:FC:C3
            X509v3 Authority Key Identifier:
                keyid:83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/1417d958a885ded00f3c27e3ff56faa457a9a6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.100.0/22
                  190.122.64.0/20
                  200.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:72:81:29:a8:4a:f8:32:02:29:c1:00:2a:98:88:09:21:a1:
         47:4a:1d:dd:72:03:82:c1:66:6e:6a:76:d1:5c:48:9b:1f:1e:
         93:2d:d0:f8:57:45:fc:2e:7d:08:73:c6:40:9f:42:14:fc:1f:
         92:62:bf:68:97:df:f1:dc:e6:61:33:f1:46:2b:62:8d:aa:26:
         26:ef:e4:c2:3b:6f:6a:36:80:08:31:a3:54:f5:b1:0c:03:4a:
         d0:6a:0f:85:c8:a7:d6:b9:d1:7e:a9:c2:d4:24:2a:a7:4e:04:
         82:17:a6:ef:54:de:ab:7d:f1:b4:fa:64:05:c2:18:3e:63:62:
         d4:bc:7d:dd:ec:75:24:33:73:f6:88:82:89:1c:15:15:4a:40:
         f3:18:69:ed:b3:c1:17:0c:d3:a8:9b:ec:43:a5:6f:fd:66:ee:
         38:0f:f6:fb:5d:d8:c4:33:3a:b5:d4:33:b3:47:ac:f8:ee:9a:
         5c:0c:35:12:c7:67:22:3a:30:34:68:d0:38:e0:56:02:4b:de:
         3c:5c:f6:d5:23:83:89:84:d3:18:85:e6:60:b3:a2:37:bd:19:
         9e:45:d4:10:92:57:ff:4f:f8:09:5b:05:be:c4:48:4d:78:0f:
         39:f3:7b:13:2f:3d:38:be:14:cc:2a:2e:0d:48:50:53:28:50:
         b3:d4:03:0d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDIFOmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVh
NzAyODc2OTUzM2I0Y2ExYTFiYjg0OTJkY2ZkZTk3OTVhMThjYTIwHhcNMjMwNTA5
MTExODIyWhcNMjUwNTEwMTExODIyWjAzMTEwLwYDVQQDEygxNDE3ZDk1OGE4ODVk
ZWQwMGYzYzI3ZTNmZjU2ZmFhNDU3YTlhNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy8W/lKFwxZNVz+xX+6HdUeXFBKnwBr2KVgAlE+XRjdyErj8q
gscErjL2wfuEBVDdYvfXe1IfYtgIhA1QXtORlbocTyse3AaIwBWQdNlQQpwlnHs0
EH2aQLYxt5ilIXLm0YDMmJZRLD+TgYtS17xMa6wfimEa9oOUtIyK/godB4S05tlx
D+RTqZgCsw5GowM5ChSNfOmdF4rQ87cezQ9bM6pe+YsyEcF94g7Ge4DgZ7GvnYJO
zQjmAUQbDKMgtFywShu2QI9KPo9iQ2yu9v1RJ/nSE61+sLou9irow0+JgzGDv46a
Nvd8iBZDXBPrTPGnwicEq2AjWBE4czAuQM91KwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFFJG2LLrhvFHXrhJgWxCqE6iwvzDMB8GA1UdIwQYMBaAFIOC/XjyRIEroNt8
Tv5B0h7auhejMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWE3MDI4
NzY5NTMzYjRjYTFhMWJiODQ5MmRjZmRlOTc5NWExOGNhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI0MzhkNzItYWI1Zi00NjA2LWJhYWYtYWIzZDYw
Y2Y3N2RkLzE0MTdkOTU4YTg4NWRlZDAwZjNjMjdlM2ZmNTZmYWE0NTdhOWE2Yjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjQzOGQ3Mi1hYjVmLTQ2MDYtYmFhZi1hYjNk
NjBjZjc3ZGQvZWE3MDI4NzY5NTMzYjRjYTFhMWJiODQ5MmRjZmRlOTc5NWExOGNh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAoNkZAMEBL56QAMEA8huwDANBgkqhkiG9w0BAQsFAAOCAQEA
U3KBKahK+DICKcEAKpiICSGhR0od3XIDgsFmbmp20VxImx8eky3Q+FdF/C59CHPG
QJ9CFPwfkmK/aJff8dzmYTPxRitijaomJu/kwjtvajaACDGjVPWxDANK0GoPhcin
1rnRfqnC1CQqp04Eghem71Teq33xtPpkBcIYPmNi1Lx93ex1JDNz9oiCiRwVFUpA
8xhp7bPBFwzTqJvsQ6Vv/WbuOA/2+13YxDM6tdQzs0es+O6aXAw1EsdnIjowNGjQ
OOBWAkvePFz21SODiYTTGIXmYLOiN70ZnkXUEJJX/0/4CVsFvsRITXgPOfN7Ey89
OL4UzCouDUhQUyhQs9QDDQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org