Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa
File:                     5d6222d60b62cc1ad90447ddca536888c9a03b31.roa (raw, json)
Hash identifier:          6KFKj1YzKH6GJVIcAIp4xHDQeIqk8Oa60qjqUvC41d0=
Subject key identifier:   BF:AC:39:C4:EB:D3:92:11:73:A1:17:82:F3:DF:38:B1:7D:9B:0A:1E
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       051E8E
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa
Signing time:             Thu 03 Aug 2023 16:56:38 +0000
ROA not before:           Wed 02 Aug 2023 16:56:38 +0000
ROA not after:            Sun 03 Aug 2025 16:56:38 +0000
asID:                     16629
IP address blocks:        200.90.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335502 (0x51e8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Aug  2 16:56:38 2023 GMT
            Not After : Aug  3 16:56:38 2025 GMT
        Subject: CN=5d6222d60b62cc1ad90447ddca536888c9a03b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:6a:1e:e9:dc:0d:50:6c:d9:eb:d1:cc:a3:
                    2e:bb:76:87:f1:ec:0c:c7:06:e0:13:d8:b4:35:f9:
                    a0:d8:07:a5:66:aa:0b:43:33:56:2b:06:05:fd:b4:
                    5a:e0:31:82:d7:cd:98:b8:bb:cc:d8:f7:3b:93:53:
                    09:17:8e:16:0f:ea:95:78:95:c4:46:12:bc:53:5c:
                    eb:d9:62:3b:83:0c:e4:b1:eb:89:25:df:74:be:5a:
                    59:05:67:b5:79:a6:08:98:db:d5:f6:72:52:4e:0c:
                    83:85:59:3b:e5:b3:0f:02:0b:d1:09:f0:25:6e:1c:
                    27:88:26:8d:25:ea:70:d1:5e:21:99:cf:da:3c:da:
                    68:e0:db:06:31:71:74:27:5f:81:a4:19:ee:90:c4:
                    7b:2a:11:6d:fd:80:0f:71:3d:08:eb:02:df:2c:46:
                    f6:a1:65:1e:9d:b4:9e:64:82:97:1a:7c:30:cd:b0:
                    e9:e5:68:11:c5:e1:15:76:75:18:84:25:c2:d6:08:
                    b7:68:a1:ca:3d:09:c3:eb:4a:13:78:42:97:78:e9:
                    ee:37:07:13:eb:c0:0f:40:6f:37:fc:86:93:4b:cd:
                    ee:c1:1f:ea:6d:d5:ed:d0:0e:3d:38:25:67:d8:04:
                    f2:ce:5f:a2:85:7b:ed:ba:b7:90:ee:8c:2a:c9:16:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AC:39:C4:EB:D3:92:11:73:A1:17:82:F3:DF:38:B1:7D:9B:0A:1E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5d6222d60b62cc1ad90447ddca536888c9a03b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:25:4c:d2:6c:85:7a:22:5a:1c:4b:28:7f:cd:dd:4d:1d:
         40:79:de:ee:d2:46:da:d3:64:ab:b4:7e:fb:dd:9b:90:33:bc:
         bd:cd:86:f6:27:2c:c9:a7:c3:4f:be:7a:3e:40:75:67:5c:19:
         88:a0:c3:cd:fd:f6:95:0e:32:5d:b6:33:16:c5:cd:d1:45:44:
         a6:35:db:a8:a4:03:ff:67:53:bb:02:41:b4:b4:e9:90:f2:c4:
         1e:48:7f:b1:30:bd:27:a2:19:2c:ba:77:99:40:aa:3a:d7:03:
         22:2b:1f:ec:f0:65:f2:bc:80:50:66:74:ed:ca:23:97:e2:90:
         f2:3c:0c:05:4e:9b:d4:e3:f2:96:05:b8:65:51:b2:f7:a1:8d:
         94:57:f4:cc:77:ce:97:5c:4b:2c:88:bf:97:a5:00:8f:70:86:
         28:ff:5c:3a:cc:41:cc:ff:a2:f3:4e:af:ac:e8:79:0a:12:e1:
         b1:97:de:cd:47:62:ad:c7:ef:aa:58:f4:c7:3b:ad:fe:4c:52:
         9e:fb:ff:c5:20:f1:2d:ea:ab:9b:f6:82:e3:9e:b3:bd:49:4f:
         99:d0:86:cd:33:f1:16:d4:b6:28:7f:54:c2:41:5c:38:0d:0f:
         08:d4:40:32:5e:a9:f2:4b:e1:5c:dc:c9:9e:fd:cd:16:5a:ba:
         dc:e0:d3:bc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBR6OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwODAy
MTY1NjM4WhcNMjUwODAzMTY1NjM4WjAzMTEwLwYDVQQDEyg1ZDYyMjJkNjBiNjJj
YzFhZDkwNDQ3ZGRjYTUzNjg4OGM5YTAzYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi9lqHuncDVBs2evRzKMuu3aH8ewMxwbgE9i0Nfmg2AelZqoL
QzNWKwYF/bRa4DGC182YuLvM2Pc7k1MJF44WD+qVeJXERhK8U1zr2WI7gwzkseuJ
Jd90vlpZBWe1eaYImNvV9nJSTgyDhVk75bMPAgvRCfAlbhwniCaNJepw0V4hmc/a
PNpo4NsGMXF0J1+BpBnukMR7KhFt/YAPcT0I6wLfLEb2oWUenbSeZIKXGnwwzbDp
5WgRxeEVdnUYhCXC1gi3aKHKPQnD60oTeEKXeOnuNwcT68APQG83/IaTS83uwR/q
bdXt0A49OCVn2ATyzl+ihXvtureQ7owqyRazKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL+sOcTr05IRc6EXgvPfOLF9mwoeMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzVkNjIyMmQ2MGI2MmNjMWFkOTA0NDdkZGNhNTM2ODg4YzlhMDNiMzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMha0DANBgkqhkiG9w0BAQsFAAOCAQEASvYlTNJshXoiWhxL
KH/N3U0dQHne7tJG2tNkq7R++92bkDO8vc2G9icsyafDT756PkB1Z1wZiKDDzf32
lQ4yXbYzFsXN0UVEpjXbqKQD/2dTuwJBtLTpkPLEHkh/sTC9J6IZLLp3mUCqOtcD
Iisf7PBl8ryAUGZ07cojl+KQ8jwMBU6b1OPylgW4ZVGy96GNlFf0zHfOl1xLLIi/
l6UAj3CGKP9cOsxBzP+i806vrOh5ChLhsZfezUdircfvqlj0xzut/kxSnvv/xSDx
Leqrm/aC456zvUlPmdCGzTPxFtS2KH9UwkFcOA0PCNRAMl6p8kvhXNzJnv3NFlq6
3ODTvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org