Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d6751b2cbd43a27de7f9b31f8ac7f68147c6708.roa
File:                     0d6751b2cbd43a27de7f9b31f8ac7f68147c6708.roa (raw, json)
Hash identifier:          56sWRwjkXPrc1FaZe0SeEh+7F1Uls99l79sGrBdnFvw=
Subject key identifier:   59:1A:CA:70:DD:F8:30:BC:4A:7E:39:72:EB:62:E9:DF:6F:42:08:9D
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22A2FD
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d6751b2cbd43a27de7f9b31f8ac7f68147c6708.roa
Signing time:             Thu 22 Jun 2023 18:16:28 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     265807
IP address blocks:        200.68.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269949 (0x22a2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=0d6751b2cbd43a27de7f9b31f8ac7f68147c6708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:d9:2c:50:ff:4c:19:f2:e9:38:fd:64:d3:
                    05:7e:b5:f5:02:04:94:51:b8:1f:54:94:9d:fc:06:
                    40:48:c9:85:ed:be:57:bc:16:e6:c6:a2:f8:b5:d0:
                    68:21:eb:df:84:cf:04:e6:78:ec:ec:05:5a:3b:aa:
                    dc:79:fc:fb:af:e3:c3:e4:49:7f:be:ba:49:16:8c:
                    3c:a1:5b:ab:fb:28:3c:dc:39:aa:e7:cb:be:71:6d:
                    8a:46:4f:85:73:c4:cf:85:cc:03:ac:4d:f9:07:fe:
                    03:b2:16:46:7d:b3:ca:bb:bb:64:e3:9a:69:d8:4d:
                    9f:4e:0e:48:84:d6:7e:3c:a5:20:13:c2:f9:89:7f:
                    a6:a5:54:70:8c:cd:35:f0:e5:9c:7b:e0:6e:17:29:
                    1f:46:6d:f3:cd:af:91:be:31:8b:95:8c:e3:ff:32:
                    42:e2:93:37:6b:03:a7:85:e1:d3:cd:c4:6f:58:c6:
                    cb:b0:19:ad:db:03:39:95:1c:bc:86:2a:bd:39:0f:
                    93:10:5b:a4:cb:ca:fd:84:6d:d2:97:c7:37:e2:28:
                    a2:b9:85:8d:58:5c:84:17:1e:d9:42:87:27:59:3c:
                    42:12:fd:a9:3e:5e:40:0d:54:bb:3b:54:ab:34:30:
                    14:8b:b3:85:83:29:e3:e6:ff:10:9f:f7:26:8c:5e:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:CA:70:DD:F8:30:BC:4A:7E:39:72:EB:62:E9:DF:6F:42:08:9D
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/0d6751b2cbd43a27de7f9b31f8ac7f68147c6708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:36:87:40:f5:1c:c8:10:3f:30:dc:f5:97:95:83:65:4a:
         55:d0:59:8b:d1:aa:16:d1:45:3a:70:62:c1:2a:e0:24:80:ec:
         8a:54:ef:8a:1e:d4:02:42:a7:40:48:7d:2a:6b:69:6e:5e:e8:
         9c:de:40:75:5a:25:64:4f:c4:3f:7b:ab:82:39:2b:ab:76:07:
         e8:1d:b6:8e:69:80:3b:2b:91:a4:6b:77:f4:35:e9:77:f7:de:
         fb:68:59:5f:0f:96:aa:e1:4e:05:c6:5c:19:de:69:d7:24:48:
         74:9f:da:d1:a9:db:40:ac:09:94:cf:30:cc:96:1f:e0:ec:7b:
         ec:69:a9:06:61:7f:e7:c5:1b:60:37:e8:b4:be:e6:4d:c6:7f:
         73:8d:e5:59:ba:63:20:6d:31:d7:c1:b2:dd:73:c8:3d:95:5b:
         16:9f:24:58:00:6c:bc:86:91:66:36:d6:0e:95:e6:08:96:3c:
         38:5c:13:e7:3b:6a:c5:ac:93:53:ee:87:14:cf:79:12:84:da:
         d9:23:06:4d:41:f2:34:ef:66:7d:68:2d:48:0a:31:70:7d:8d:
         eb:bf:3b:4e:e2:71:ca:c5:14:36:7d:b7:10:b4:74:cb:7e:71:
         aa:84:2c:af:48:7e:da:9f:9c:3d:ec:44:e5:e9:93:04:be:b6:
         9f:32:7d:bc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIqL9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjMwNjIx
MTgxNjAwWhcNMjUwNjIyMTgxNjAwWjAzMTEwLwYDVQQDEygwZDY3NTFiMmNiZDQz
YTI3ZGU3ZjliMzFmOGFjN2Y2ODE0N2M2NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArjXZLFD/TBny6Tj9ZNMFfrX1AgSUUbgfVJSd/AZASMmF7b5X
vBbmxqL4tdBoIevfhM8E5njs7AVaO6rcefz7r+PD5El/vrpJFow8oVur+yg83Dmq
58u+cW2KRk+Fc8TPhcwDrE35B/4DshZGfbPKu7tk45pp2E2fTg5IhNZ+PKUgE8L5
iX+mpVRwjM018OWce+BuFykfRm3zza+RvjGLlYzj/zJC4pM3awOnheHTzcRvWMbL
sBmt2wM5lRy8hiq9OQ+TEFuky8r9hG3Sl8c34iiiuYWNWFyEFx7ZQocnWTxCEv2p
Pl5ADVS7O1SrNDAUi7OFgynj5v8Qn/cmjF4+MwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFkaynDd+DC8Sn45cuti6d9vQgidMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzBkNjc1MWIyY2JkNDNhMjdkZTdmOWIzMWY4YWM3ZjY4MTQ3YzY3MDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhEcjANBgkqhkiG9w0BAQsFAAOCAQEAZaM2h0D1HMgQPzDc
9ZeVg2VKVdBZi9GqFtFFOnBiwSrgJIDsilTvih7UAkKnQEh9Kmtpbl7onN5AdVol
ZE/EP3urgjkrq3YH6B22jmmAOyuRpGt39DXpd/fe+2hZXw+WquFOBcZcGd5p1yRI
dJ/a0anbQKwJlM8wzJYf4Ox77GmpBmF/58UbYDfotL7mTcZ/c43lWbpjIG0x18Gy
3XPIPZVbFp8kWABsvIaRZjbWDpXmCJY8OFwT5ztqxayTU+6HFM95EoTa2SMGTUHy
NO9mfWgtSAoxcH2N6787TuJxysUUNn23ELR0y35xqoQsr0h+2p+cPexE5emTBL62
nzJ9vA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org