Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e227bcae201b384c1695a121bea880d90200cdbb.roa
File:                     e227bcae201b384c1695a121bea880d90200cdbb.roa (raw, json)
Hash identifier:          EKmqdg4F8/x8crqkUEWHy3awuKvTuqM0Mw63RyFQbdM=
Subject key identifier:   55:B3:AE:6B:F3:D4:DE:DB:82:8D:B8:7E:B9:0F:08:D9:F9:38:CA:52
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E2F22
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e227bcae201b384c1695a121bea880d90200cdbb.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     52394
IP address blocks:        200.61.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929570 (0xe2f22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=e227bcae201b384c1695a121bea880d90200cdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:cc:5d:73:11:c4:47:90:23:9a:ae:6b:73:
                    84:6a:30:6f:8a:77:47:51:b9:8c:29:a0:a7:e5:6d:
                    be:d8:e0:d2:71:f2:0d:f8:ef:22:95:09:9b:4f:60:
                    ac:b9:38:c4:d6:b2:49:fc:b2:7d:76:3f:ae:3e:af:
                    ba:b2:88:d4:93:c2:a9:05:84:f6:62:d4:b3:6a:a1:
                    9d:30:7c:e6:9a:59:13:bb:c2:81:ad:17:e7:08:65:
                    f5:dd:54:e8:14:97:aa:a0:14:63:aa:28:c2:d4:2c:
                    33:53:87:40:8a:34:02:76:c8:9a:aa:1b:15:c0:1d:
                    8a:20:56:37:84:14:bf:4b:4d:52:7f:67:7b:fe:0b:
                    bd:ce:ab:1c:76:0d:30:a4:01:18:76:41:8d:aa:8e:
                    47:a3:9f:c6:d9:1d:bc:04:19:97:6b:cd:f9:bf:c5:
                    53:71:47:44:26:7f:d2:6c:99:f4:0e:42:45:f5:6a:
                    65:30:25:ee:3d:5c:d4:48:ff:de:5b:20:1f:91:c0:
                    c9:99:20:95:01:31:31:e0:b7:40:65:e0:e6:fe:97:
                    c9:cf:e3:75:f5:ce:85:da:cb:bb:78:48:f1:f7:6f:
                    4b:9f:1a:ea:89:1d:6d:13:81:33:5a:f1:03:77:b0:
                    22:c5:c2:a6:34:04:55:56:1f:b8:6b:85:3b:f6:d4:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B3:AE:6B:F3:D4:DE:DB:82:8D:B8:7E:B9:0F:08:D9:F9:38:CA:52
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e227bcae201b384c1695a121bea880d90200cdbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:9c:42:ee:24:87:9a:04:53:77:07:b4:b6:fb:79:27:ab:
         32:6c:85:07:35:ea:cb:47:0e:87:d8:bb:15:63:2b:95:2e:e7:
         67:9e:76:07:78:ab:91:00:87:ba:e9:e3:fb:60:f8:fd:43:52:
         4d:48:69:7c:2e:33:eb:2a:4a:fc:9d:1a:e9:32:22:b4:3e:9a:
         a1:98:44:ad:5b:5a:ed:e8:a3:86:47:71:ec:b8:2d:e9:d1:d7:
         c1:7a:43:f2:80:b9:5c:eb:31:ea:e9:5f:94:13:35:dd:45:d1:
         40:30:92:c1:58:cf:b6:f1:31:01:ee:62:4b:6b:01:67:75:b6:
         65:f9:ed:d8:64:f6:ca:28:95:b2:28:01:43:7f:38:93:24:94:
         17:55:f3:57:ca:b3:4a:b6:c4:1a:7b:03:1a:81:a0:16:a4:38:
         dc:ca:75:59:9e:4e:7d:86:14:bd:b6:26:37:cf:e5:54:0a:17:
         26:4a:42:78:4e:de:14:b6:2c:40:fd:14:df:85:1a:4e:e2:9d:
         13:07:ce:b7:26:fa:29:9f:d5:ad:a7:f4:e3:b3:92:00:a1:50:
         db:7a:67:32:6d:b6:98:05:39:d4:48:6c:a7:e1:90:04:77:bb:
         2a:58:04:43:61:45:00:d6:5b:51:75:59:62:58:a1:84:f0:f6:
         ed:e0:d0:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDi8iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEyhlMjI3YmNhZTIwMWIz
ODRjMTY5NWExMjFiZWE4ODBkOTAyMDBjZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmufMXXMRxEeQI5qua3OEajBvindHUbmMKaCn5W2+2ODScfIN
+O8ilQmbT2CsuTjE1rJJ/LJ9dj+uPq+6sojUk8KpBYT2YtSzaqGdMHzmmlkTu8KB
rRfnCGX13VToFJeqoBRjqijC1CwzU4dAijQCdsiaqhsVwB2KIFY3hBS/S01Sf2d7
/gu9zqscdg0wpAEYdkGNqo5Ho5/G2R28BBmXa835v8VTcUdEJn/SbJn0DkJF9Wpl
MCXuPVzUSP/eWyAfkcDJmSCVATEx4LdAZeDm/pfJz+N19c6F2su7eEjx929Lnxrq
iR1tE4EzWvEDd7AixcKmNARVVh+4a4U79tTV0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFWzrmvz1N7bgo24frkPCNn5OMpSMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViL2UyMjdiY2FlMjAxYjM4NGMxNjk1YTEyMWJlYTg4MGQ5MDIwMGNkYmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg9uDANBgkqhkiG9w0BAQsFAAOCAQEAXl2cQu4kh5oEU3cH
tLb7eSerMmyFBzXqy0cOh9i7FWMrlS7nZ552B3irkQCHuunj+2D4/UNSTUhpfC4z
6ypK/J0a6TIitD6aoZhErVta7eijhkdx7Lgt6dHXwXpD8oC5XOsx6ulflBM13UXR
QDCSwVjPtvExAe5iS2sBZ3W2Zfnt2GT2yiiVsigBQ384kySUF1XzV8qzSrbEGnsD
GoGgFqQ43Mp1WZ5OfYYUvbYmN8/lVAoXJkpCeE7eFLYsQP0U34UaTuKdEwfOtyb6
KZ/Vraf047OSAKFQ23pnMm22mAU51Ehsp+GQBHe7KlgEQ2FFANZbUXVZYlihhPD2
7eDQ+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org