Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/75670870cdc419c510b57ad940af508641de703c.roa
File:                     75670870cdc419c510b57ad940af508641de703c.roa (raw, json)
Hash identifier:          Fs81QDQHni6KkRf1MQ/7Cm9aPsddLpQ3KbHolbQjOfo=
Subject key identifier:   2A:35:14:4F:6B:4C:FF:A8:1E:E3:E6:25:9B:A4:E2:60:76:AF:A5:5A
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       19F8B3
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/75670870cdc419c510b57ad940af508641de703c.roa
Signing time:             Tue 19 Jul 2022 13:53:26 +0000
ROA not before:           Tue 19 Jul 2022 13:53:19 +0000
ROA not after:            Mon 19 Jul 2027 13:53:19 +0000
asID:                     265807
IP address blocks:        200.68.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702067 (0x19f8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jul 19 13:53:19 2022 GMT
            Not After : Jul 19 13:53:19 2027 GMT
        Subject: CN=75670870cdc419c510b57ad940af508641de703c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:ec:cc:95:58:dd:fe:4b:ed:0a:d2:8b:77:
                    a4:f9:9e:96:e1:76:e3:c6:9e:09:51:16:9a:3b:58:
                    99:ae:f7:e7:ab:87:39:93:67:bf:ad:0a:81:d8:b2:
                    3b:a1:d9:21:0d:62:7b:76:8b:98:e7:26:5f:2b:57:
                    73:f5:16:66:47:c1:a1:be:e7:fb:cb:2b:2a:62:5d:
                    f5:02:53:6c:3e:f6:db:c1:c2:de:04:9b:39:f0:48:
                    b6:7a:c7:41:07:01:d1:0a:5c:0b:79:07:d9:0e:ef:
                    dc:2c:04:b9:7f:7d:da:0e:f5:9d:8d:41:67:69:93:
                    35:da:28:1b:97:38:5b:8c:60:8d:af:8a:6d:ee:0a:
                    12:21:b1:b2:04:99:f8:dd:e8:3c:50:69:7a:f9:0a:
                    45:ac:69:c8:16:ba:15:ab:b2:6e:07:f8:25:e6:2b:
                    21:74:c0:e0:55:24:d2:16:7f:18:cd:a7:6d:e4:bf:
                    5e:2e:0e:2e:67:8b:a9:37:8d:f3:06:73:84:4e:dc:
                    6f:55:ec:1e:d6:a6:e4:f0:09:4c:a8:be:29:5f:5e:
                    ea:f7:74:46:60:78:e2:75:60:8f:f6:b9:7d:2c:cb:
                    72:ee:b7:a6:da:36:49:60:8f:4e:40:12:2f:28:a2:
                    79:c6:d7:94:97:03:80:09:54:4b:00:5f:28:fd:85:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:14:4F:6B:4C:FF:A8:1E:E3:E6:25:9B:A4:E2:60:76:AF:A5:5A
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/75670870cdc419c510b57ad940af508641de703c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:c0:02:c6:b9:0c:6c:f5:2d:78:94:26:74:12:79:4d:f7:
         13:8b:67:f8:33:a9:75:db:20:1d:4e:25:ef:8d:f2:8d:31:a5:
         95:d3:5a:3d:c6:b4:85:25:12:63:8b:5c:e9:8f:e4:92:ba:cc:
         b2:62:dc:3c:76:49:b3:13:74:fc:06:83:a7:9d:52:86:62:01:
         7e:d5:69:d9:7f:bd:1b:e9:78:5b:b0:63:1e:a5:e1:d9:7c:a1:
         16:b0:a3:a3:0d:4f:fe:39:b9:f9:3d:22:d3:b1:47:5c:bc:82:
         8f:e4:51:d3:a0:2a:8c:67:b8:10:86:c9:a6:55:14:80:f9:91:
         20:ac:32:58:cb:7b:8d:c8:11:c8:d7:89:f5:f4:4a:1f:0c:98:
         f0:0d:cb:79:83:b0:e2:e6:7d:31:df:77:e2:f2:62:44:a8:f1:
         b0:24:bd:02:fb:f3:d4:ba:f5:3b:ba:ac:9c:08:8a:d1:4f:71:
         aa:23:58:5e:ba:89:3b:63:7a:0e:87:ee:fa:d3:a3:49:82:df:
         b0:18:bd:5d:58:10:27:70:f9:8f:78:61:e0:30:ae:19:3a:22:
         69:c0:78:f2:e2:98:d3:ee:b2:ae:c4:ce:b7:cc:81:a3:b9:e7:
         06:0e:e9:3d:0d:0a:86:3a:f9:b6:72:2b:c0:85:94:39:57:3a:
         e5:9d:d2:25
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGfizMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjIwNzE5
MTM1MzE5WhcNMjcwNzE5MTM1MzE5WjAzMTEwLwYDVQQDEyg3NTY3MDg3MGNkYzQx
OWM1MTBiNTdhZDk0MGFmNTA4NjQxZGU3MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoqLszJVY3f5L7QrSi3ek+Z6W4Xbjxp4JURaaO1iZrvfnq4c5
k2e/rQqB2LI7odkhDWJ7douY5yZfK1dz9RZmR8Ghvuf7yysqYl31AlNsPvbbwcLe
BJs58Ei2esdBBwHRClwLeQfZDu/cLAS5f33aDvWdjUFnaZM12igblzhbjGCNr4pt
7goSIbGyBJn43eg8UGl6+QpFrGnIFroVq7JuB/gl5ishdMDgVSTSFn8Yzadt5L9e
Lg4uZ4upN43zBnOETtxvVewe1qbk8AlMqL4pX17q93RGYHjidWCP9rl9LMty7rem
2jZJYI9OQBIvKKJ5xteUlwOACVRLAF8o/YUYTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCo1FE9rTP+oHuPmJZuk4mB2r6VaMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzc1NjcwODcwY2RjNDE5YzUxMGI1N2FkOTQwYWY1MDg2NDFkZTcwM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhEcjANBgkqhkiG9w0BAQsFAAOCAQEAHLXAAsa5DGz1LXiU
JnQSeU33E4tn+DOpddsgHU4l743yjTGlldNaPca0hSUSY4tc6Y/kkrrMsmLcPHZJ
sxN0/AaDp51ShmIBftVp2X+9G+l4W7BjHqXh2XyhFrCjow1P/jm5+T0i07FHXLyC
j+RR06AqjGe4EIbJplUUgPmRIKwyWMt7jcgRyNeJ9fRKHwyY8A3LeYOw4uZ9Md93
4vJiRKjxsCS9Avvz1Lr1O7qsnAiK0U9xqiNYXrqJO2N6Dofu+tOjSYLfsBi9XVgQ
J3D5j3hh4DCuGToiacB48uKY0+6yrsTOt8yBo7nnBg7pPQ0Khjr5tnIrwIWUOVc6
5Z3SJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org