Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5074085877ae91a00eb4503286adca9b6dca98e2.roa
File:                     5074085877ae91a00eb4503286adca9b6dca98e2.roa (raw, json)
Hash identifier:          +K3LXk9eNJGEKEF/n40CYqB2cAcK/qtalVAsNB5AWwE=
Subject key identifier:   C9:32:AF:EC:11:D1:46:55:0A:4F:E8:57:E1:47:EB:7E:7C:14:8D:7A
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E2840
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5074085877ae91a00eb4503286adca9b6dca98e2.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     27692
IP address blocks:        200.123.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927808 (0xe2840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=5074085877ae91a00eb4503286adca9b6dca98e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:c4:7f:66:b7:4b:14:b8:7a:13:e0:bf:a6:
                    f2:96:79:49:69:fb:96:da:31:8a:37:7c:36:23:76:
                    d3:6f:68:78:02:79:60:5e:ec:77:1a:08:62:cc:2f:
                    c7:58:b0:2c:36:f4:17:e9:ec:b2:f5:b8:ff:d6:93:
                    21:2c:59:eb:13:b8:5d:43:3a:40:01:9a:a3:88:35:
                    a7:7b:49:20:c6:fb:1a:19:bb:04:1d:a4:cb:bf:b5:
                    1f:1b:61:80:cc:f4:6b:e6:4c:ad:63:0d:46:ff:97:
                    15:03:8f:73:6b:7d:b5:47:81:cc:f6:94:27:1f:d5:
                    5a:e6:e6:61:3d:65:fe:d8:18:b5:34:1b:b7:91:8e:
                    6b:eb:a6:61:c0:fa:cf:06:7b:e9:be:aa:3d:81:a2:
                    f1:e7:7c:07:79:83:f6:56:2d:6e:f5:9d:eb:4f:74:
                    0f:44:0b:8b:2d:97:33:8b:91:31:d9:4d:f2:19:38:
                    7b:2b:8a:42:fd:aa:18:83:ea:b5:0a:fe:9b:5e:5f:
                    5c:6b:7a:ab:8b:a8:a7:da:ae:ef:2e:8a:d2:d4:a2:
                    a6:cc:c3:c1:fa:e6:20:3f:46:10:5f:46:24:59:fe:
                    3a:71:1d:b4:35:2e:f6:53:4b:62:91:15:5c:b7:44:
                    7d:65:6b:e5:c9:3b:1a:9e:64:48:4a:71:f8:77:88:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:AF:EC:11:D1:46:55:0A:4F:E8:57:E1:47:EB:7E:7C:14:8D:7A
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5074085877ae91a00eb4503286adca9b6dca98e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:47:fa:63:28:4a:27:7a:ea:ca:64:63:24:82:ab:c4:cf:
         fa:8b:a5:9e:6a:80:a1:12:94:3e:6c:08:2e:02:83:31:98:52:
         4a:33:8b:44:e8:8c:1e:d8:18:37:bd:7a:38:9e:77:95:8d:ef:
         2f:80:e8:d6:cc:12:49:02:6d:6b:a1:26:83:0e:c7:9c:33:b5:
         77:6c:ec:7d:d5:cc:27:d6:24:03:a6:5e:6b:f3:38:5e:a1:c5:
         f1:d5:d6:a7:89:47:0d:cc:0c:61:5f:ee:b4:1a:b7:8d:d5:0e:
         21:41:13:20:62:6b:51:4b:c2:30:07:ca:ca:4a:74:ad:0e:1a:
         47:17:aa:21:07:14:65:24:df:4d:9b:5c:22:93:89:1f:4e:16:
         50:e5:4f:fe:ae:c7:59:d2:95:9e:b8:76:26:43:f5:56:28:21:
         af:4e:43:10:e3:a2:8e:68:e8:2f:db:ce:d1:40:a4:a6:c6:d1:
         a8:a4:d1:55:cd:00:2a:4a:85:ae:9f:85:f6:3b:f7:b1:42:d1:
         9a:79:d4:b9:89:c6:4c:c5:f0:3b:c4:e6:12:7f:7a:76:0a:d4:
         d9:98:52:10:6b:b5:3f:39:9b:79:41:70:06:16:c1:dd:2f:4a:
         70:11:e4:9c:79:db:77:fd:f4:8b:ad:0d:a8:d6:80:9a:77:ac:
         8f:5d:b4:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDihAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEyg1MDc0MDg1ODc3YWU5
MWEwMGViNDUwMzI4NmFkY2E5YjZkY2E5OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr1fEf2a3SxS4ehPgv6bylnlJafuW2jGKN3w2I3bTb2h4Anlg
Xux3GghizC/HWLAsNvQX6eyy9bj/1pMhLFnrE7hdQzpAAZqjiDWne0kgxvsaGbsE
HaTLv7UfG2GAzPRr5kytYw1G/5cVA49za321R4HM9pQnH9Va5uZhPWX+2Bi1NBu3
kY5r66ZhwPrPBnvpvqo9gaLx53wHeYP2Vi1u9Z3rT3QPRAuLLZczi5Ex2U3yGTh7
K4pC/aoYg+q1Cv6bXl9ca3qri6in2q7vLorS1KKmzMPB+uYgP0YQX0YkWf46cR20
NS72U0tikRVct0R9ZWvlyTsanmRISnH4d4jtowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMkyr+wR0UZVCk/oV+FH6358FI16MB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzUwNzQwODU4NzdhZTkxYTAwZWI0NTAzMjg2YWRjYTliNmRjYTk4ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh7kDANBgkqhkiG9w0BAQsFAAOCAQEAA7dH+mMoSid66spk
YySCq8TP+oulnmqAoRKUPmwILgKDMZhSSjOLROiMHtgYN716OJ53lY3vL4Do1swS
SQJta6Emgw7HnDO1d2zsfdXMJ9YkA6Zea/M4XqHF8dXWp4lHDcwMYV/utBq3jdUO
IUETIGJrUUvCMAfKykp0rQ4aRxeqIQcUZSTfTZtcIpOJH04WUOVP/q7HWdKVnrh2
JkP1Vighr05DEOOijmjoL9vO0UCkpsbRqKTRVc0AKkqFrp+F9jv3sULRmnnUuYnG
TMXwO8TmEn96dgrU2ZhSEGu1PzmbeUFwBhbB3S9KcBHknHnbd/30i60NqNaAmnes
j1200w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org