Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/107110e67a344fdfa1ff7d7851294ddd97fe1c1c.roa
File:                     107110e67a344fdfa1ff7d7851294ddd97fe1c1c.roa (raw, json)
Hash identifier:          TCrrtuHlVGhA5n4phz/P4hcxAOxz3nMWiZiWNIMoLQY=
Subject key identifier:   61:B8:1E:1F:B1:28:E6:08:17:C7:8E:30:3F:91:F2:72:B6:E3:0E:70
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       03D11D
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/107110e67a344fdfa1ff7d7851294ddd97fe1c1c.roa
Signing time:             Tue 11 Jul 2023 13:27:39 +0000
ROA not before:           Mon 10 Jul 2023 13:27:39 +0000
ROA not after:            Fri 11 Jul 2025 13:27:39 +0000
asID:                     7418
IP address blocks:        200.29.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250141 (0x3d11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:27:39 2023 GMT
            Not After : Jul 11 13:27:39 2025 GMT
        Subject: CN=107110e67a344fdfa1ff7d7851294ddd97fe1c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0c:12:b9:61:40:e0:30:77:be:6c:02:f1:b0:
                    53:6c:93:ef:a0:10:4f:fd:23:e5:b3:2b:c5:72:9f:
                    2e:47:08:7b:e5:09:b1:17:c9:b1:0e:36:29:60:5e:
                    db:89:f0:91:91:70:f0:eb:b0:90:fe:32:30:e4:5d:
                    67:bf:e9:a6:b9:e5:fd:9f:e1:a3:69:92:a5:16:da:
                    91:52:5e:1a:da:a1:45:90:83:06:e5:15:3b:69:05:
                    7a:a7:30:ef:6c:27:df:01:1c:a1:61:3c:9a:13:f4:
                    92:71:b7:48:1a:86:c7:c6:35:a4:e2:45:c9:52:d2:
                    f3:92:1d:d3:76:3a:71:1d:9e:da:32:8a:d0:9e:f9:
                    13:dd:d8:2d:20:25:63:a5:e1:94:c1:18:f5:90:7f:
                    42:08:b3:d7:98:15:ee:41:37:35:05:d6:56:f3:7d:
                    00:f6:ec:8d:42:03:d5:ff:8d:49:7f:c1:20:f2:f2:
                    69:65:c4:2f:20:ef:fd:e4:21:46:36:d0:66:94:f8:
                    e6:ba:fc:3e:98:87:0e:c3:86:b8:26:30:c6:38:df:
                    5b:63:01:03:66:5e:c9:c7:6c:5f:ae:8d:d9:9d:58:
                    a9:56:84:a8:27:aa:b0:d4:a3:4b:ef:51:61:cc:90:
                    5a:5f:f9:e7:a9:4f:31:c9:b4:fc:e4:47:d9:2c:0d:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:1E:1F:B1:28:E6:08:17:C7:8E:30:3F:91:F2:72:B6:E3:0E:70
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/107110e67a344fdfa1ff7d7851294ddd97fe1c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:9a:fe:ac:28:be:26:b0:d5:3c:40:60:d0:25:c3:0e:32:
         ee:e9:7e:2e:be:78:07:e4:35:c7:53:46:6e:aa:43:74:82:e1:
         54:4e:14:36:b9:2f:3f:9a:1d:49:5f:85:c9:0c:95:82:a1:bf:
         f1:4e:d5:30:92:8b:4a:ee:0a:ce:d0:76:ee:14:a5:a5:81:44:
         ad:69:46:b2:4f:a6:23:2b:91:bc:fe:e3:31:50:16:f8:a8:7c:
         3c:8b:6b:3e:a5:ba:1f:3c:4d:18:2e:7d:ad:36:ae:c5:dd:1e:
         f8:fc:72:78:4e:c5:39:33:5e:26:08:10:20:e6:1d:60:75:a3:
         2f:fd:69:12:53:c1:d3:0a:34:b8:b3:46:55:2e:e3:e5:7d:dd:
         ab:5b:8f:7c:79:75:a0:05:72:db:98:9f:06:c0:aa:c8:fa:1a:
         dd:e1:a2:e2:b9:a5:a8:6c:4b:fd:c3:3a:2a:b4:8d:4f:0c:7b:
         87:da:35:73:13:b4:b1:06:5f:7f:e2:e1:88:a1:7a:0b:8e:97:
         0f:62:24:21:29:1c:6a:9c:43:f7:e8:ef:eb:b0:75:7c:51:ec:
         3d:d7:76:5d:a1:22:b0:8b:02:cc:29:17:a2:52:26:95:4e:b4:
         18:eb:55:96:67:49:6f:62:4f:b6:8d:0e:64:e0:9b:db:65:e9:
         07:83:fd:83
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA9EdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMyNzM5WhcNMjUwNzExMTMyNzM5WjAzMTEwLwYDVQQDEygxMDcxMTBlNjdhMzQ0
ZmRmYTFmZjdkNzg1MTI5NGRkZDk3ZmUxYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7gwSuWFA4DB3vmwC8bBTbJPvoBBP/SPlsyvFcp8uRwh75Qmx
F8mxDjYpYF7bifCRkXDw67CQ/jIw5F1nv+mmueX9n+GjaZKlFtqRUl4a2qFFkIMG
5RU7aQV6pzDvbCffARyhYTyaE/SScbdIGobHxjWk4kXJUtLzkh3TdjpxHZ7aMorQ
nvkT3dgtICVjpeGUwRj1kH9CCLPXmBXuQTc1BdZW830A9uyNQgPV/41Jf8Eg8vJp
ZcQvIO/95CFGNtBmlPjmuvw+mIcOw4a4JjDGON9bYwEDZl7Jx2xfro3ZnVipVoSo
J6qw1KNL71FhzJBaX/nnqU8xybT85EfZLA3zuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGG4Hh+xKOYIF8eOMD+R8nK24w5wMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzEwNzExMGU2N2EzNDRmZGZhMWZmN2Q3ODUxMjk0ZGRkOTdmZTFjMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgdJzANBgkqhkiG9w0BAQsFAAOCAQEADUaa/qwoviaw1TxA
YNAlww4y7ul+Lr54B+Q1x1NGbqpDdILhVE4UNrkvP5odSV+FyQyVgqG/8U7VMJKL
Su4KztB27hSlpYFErWlGsk+mIyuRvP7jMVAW+Kh8PItrPqW6HzxNGC59rTauxd0e
+PxyeE7FOTNeJggQIOYdYHWjL/1pElPB0wo0uLNGVS7j5X3dq1uPfHl1oAVy25if
BsCqyPoa3eGi4rmlqGxL/cM6KrSNTwx7h9o1cxO0sQZff+LhiKF6C46XD2IkISkc
apxD9+jv67B1fFHsPdd2XaEisIsCzCkXolImlU60GOtVlmdJb2JPto0OZOCb22Xp
B4P9gw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org