Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/8c57fb36c4b2cfaa6ee24763d6ee071178e1ee58.roa
File:                     8c57fb36c4b2cfaa6ee24763d6ee071178e1ee58.roa (raw, json)
Hash identifier:          H8izKunJnIhxRDWp6SDXvEKdxyfO1fqrC/h10XPcf9Q=
Subject key identifier:   8E:FC:5F:00:8F:60:F0:98:14:F0:CA:5C:46:18:4D:7F:C9:64:16:73
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E0152
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/8c57fb36c4b2cfaa6ee24763d6ee071178e1ee58.roa
Signing time:             Wed 24 Mar 2021 14:31:35 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     27692
IP address blocks:        200.123.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917842 (0xe0152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=8c57fb36c4b2cfaa6ee24763d6ee071178e1ee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:c6:bb:38:48:13:68:77:0c:8d:ff:b4:40:
                    60:1d:78:70:42:f2:97:ec:0f:e2:f5:a9:8a:21:48:
                    99:25:c3:0d:37:4e:98:33:37:21:b5:e0:66:f4:72:
                    66:20:2c:7d:74:94:b9:de:26:5a:ae:07:23:43:ae:
                    b3:8f:0f:a9:1d:2f:ac:7c:e1:5d:3c:93:69:73:5c:
                    11:86:f1:ee:67:24:20:bf:d2:8f:19:bc:ec:c5:3c:
                    00:64:57:50:4a:b7:04:aa:c0:03:39:91:8b:97:11:
                    dd:db:53:fb:91:72:7d:fd:48:7d:36:f3:ce:f1:41:
                    99:65:e3:e6:22:51:f4:7a:9c:d4:e3:e7:6a:fc:63:
                    a4:87:1e:7a:86:ce:ca:a3:f6:e3:05:41:a6:08:e6:
                    5d:cd:a2:68:2f:ab:7c:4c:59:b7:dc:26:fe:7b:88:
                    1e:3b:41:a6:ce:2c:ab:a4:e5:8b:7d:e8:93:bd:11:
                    b1:55:0c:7b:ec:f1:f5:85:e3:5a:9b:c9:5e:e4:37:
                    73:63:1d:67:f8:66:6c:c5:fa:27:1b:12:d5:10:dd:
                    8a:9d:86:09:81:e1:2a:96:6e:97:bb:64:e0:ae:e1:
                    d9:4b:44:fc:9b:32:ff:9f:58:1e:d8:1c:93:1e:44:
                    fc:6a:f7:f7:e4:5d:a6:17:c7:ac:8e:b1:de:e5:e3:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:5F:00:8F:60:F0:98:14:F0:CA:5C:46:18:4D:7F:C9:64:16:73
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/8c57fb36c4b2cfaa6ee24763d6ee071178e1ee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:7d:e1:41:90:2f:af:c0:fe:6a:a2:bc:7b:e3:eb:37:34:
         a5:d4:8f:58:82:0b:ea:db:93:19:23:5a:17:0a:71:72:8d:b6:
         9d:5b:58:44:d8:c7:1c:17:ea:9b:a9:cb:77:e4:fd:68:f2:25:
         d3:2f:f8:ac:e4:a5:b5:69:28:51:93:13:d6:9d:f7:0f:03:56:
         0b:c8:da:78:9a:69:cb:d9:c5:a2:bd:dd:dd:07:de:a4:d8:e5:
         a7:3e:5b:b4:db:c4:78:23:d4:d3:e0:d6:fc:3a:f0:71:4e:2a:
         17:a7:91:9e:1c:1b:bc:a4:1c:d5:29:d7:6f:ed:a9:35:ac:b4:
         ba:99:3e:83:02:43:2a:10:69:f0:76:70:28:ae:1e:e4:dd:eb:
         f3:aa:28:e8:2a:d7:48:da:24:29:cc:7a:be:85:fe:1b:dd:b1:
         9f:45:ae:7b:05:20:66:a8:84:cc:f6:d1:a5:8d:1d:69:d7:a5:
         e3:a3:b9:1d:d5:6e:53:21:7a:85:d9:9a:15:39:a4:a2:d8:9e:
         69:c3:fc:97:f1:13:0f:b4:b9:00:91:92:c2:89:a2:92:c1:8f:
         41:3a:7b:c3:6a:93:0b:40:b5:70:c9:75:4a:c6:20:5a:3e:e9:
         c2:6b:33:43:4d:7e:6c:f3:b2:0b:89:02:aa:4f:05:fd:95:b4:
         ca:f1:35:f5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgFSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEyg4YzU3ZmIzNmM0YjJj
ZmFhNmVlMjQ3NjNkNmVlMDcxMTc4ZTFlZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApV3GuzhIE2h3DI3/tEBgHXhwQvKX7A/i9amKIUiZJcMNN06Y
MzchteBm9HJmICx9dJS53iZargcjQ66zjw+pHS+sfOFdPJNpc1wRhvHuZyQgv9KP
GbzsxTwAZFdQSrcEqsADOZGLlxHd21P7kXJ9/Uh9NvPO8UGZZePmIlH0epzU4+dq
/GOkhx56hs7Ko/bjBUGmCOZdzaJoL6t8TFm33Cb+e4geO0GmziyrpOWLfeiTvRGx
VQx77PH1heNam8le5DdzYx1n+GZsxfonGxLVEN2KnYYJgeEqlm6Xu2TgruHZS0T8
mzL/n1ge2ByTHkT8avf35F2mF8esjrHe5eOdNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI78XwCPYPCYFPDKXEYYTX/JZBZzMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzhjNTdmYjM2YzRiMmNmYWE2ZWUyNDc2M2Q2ZWUwNzExNzhlMWVlNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh7kDANBgkqhkiG9w0BAQsFAAOCAQEAi4594UGQL6/A/mqi
vHvj6zc0pdSPWIIL6tuTGSNaFwpxco22nVtYRNjHHBfqm6nLd+T9aPIl0y/4rOSl
tWkoUZMT1p33DwNWC8jaeJppy9nFor3d3QfepNjlpz5btNvEeCPU0+DW/DrwcU4q
F6eRnhwbvKQc1SnXb+2pNay0upk+gwJDKhBp8HZwKK4e5N3r86oo6CrXSNokKcx6
voX+G92xn0WuewUgZqiEzPbRpY0dadel46O5HdVuUyF6hdmaFTmkotieacP8l/ET
D7S5AJGSwomiksGPQTp7w2qTC0C1cMl1SsYgWj7pwmszQ01+bPOyC4kCqk8F/ZW0
yvE19Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org