Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/32d20bd41de823d1ce4d9a5d69ef3a68e35bdf9a.roa
File:                     32d20bd41de823d1ce4d9a5d69ef3a68e35bdf9a.roa (raw, json)
Hash identifier:          Pbf6KlnBA8y65uaCecOJrvEBQQY21a3vOfPMk6QO6Tk=
Subject key identifier:   6D:BB:B8:2A:BA:3B:B5:22:F3:2D:F2:06:67:2E:CE:5F:B3:AA:70:5B
Certificate issuer:       /CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Certificate serial:       1C1D96
Authority key identifier: C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/32d20bd41de823d1ce4d9a5d69ef3a68e35bdf9a.roa
Signing time:             Tue 18 Apr 2023 14:45:18 +0000
ROA not before:           Mon 17 Apr 2023 14:45:18 +0000
ROA not after:            Fri 18 Apr 2025 14:45:18 +0000
asID:                     272969
IP address blocks:        200.115.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842582 (0x1c1d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
        Validity
            Not Before: Apr 17 14:45:18 2023 GMT
            Not After : Apr 18 14:45:18 2025 GMT
        Subject: CN=32d20bd41de823d1ce4d9a5d69ef3a68e35bdf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:dd:76:8b:a6:cd:2d:c2:06:64:69:83:9a:
                    96:92:fd:71:71:73:ac:37:a8:16:5a:4b:16:cb:be:
                    11:89:e7:6a:f9:7b:c5:53:a4:ce:50:fd:dd:1f:3d:
                    4c:e0:bf:7b:fe:c6:95:c4:5f:b4:c4:e6:54:5c:4f:
                    7a:73:2a:d8:f1:1f:7e:fb:2b:f7:6b:4d:11:01:a5:
                    27:2d:13:02:68:71:69:99:7c:42:f6:1b:b3:75:76:
                    ca:84:de:58:63:a3:68:86:fb:03:e3:38:1d:f1:6a:
                    0e:20:bf:79:88:04:24:e3:68:c9:e5:2e:86:a3:75:
                    4f:ad:f0:19:2f:a4:b2:96:7a:a8:43:ef:da:a9:02:
                    0c:5a:3d:16:fd:5f:e7:7a:26:a2:98:93:0c:98:28:
                    2a:67:37:63:a2:f7:43:4a:48:c6:aa:95:12:79:d7:
                    2a:fc:35:40:c3:34:19:73:74:45:56:a9:04:ce:0f:
                    46:cd:f3:62:b3:b7:ee:54:ee:55:29:9e:88:67:ed:
                    38:8c:33:06:2b:5f:19:f7:ee:b9:ec:2c:33:3a:58:
                    36:b7:45:01:68:21:6e:43:10:2c:45:d2:3c:a3:f0:
                    c5:be:80:f9:35:08:65:92:d0:f1:af:ec:d1:24:0b:
                    5d:db:7e:46:b5:22:1c:4a:35:15:99:d2:09:d4:4f:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:B8:2A:BA:3B:B5:22:F3:2D:F2:06:67:2E:CE:5F:B3:AA:70:5B
            X509v3 Authority Key Identifier:
                keyid:C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/32d20bd41de823d1ce4d9a5d69ef3a68e35bdf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:02:20:5b:40:1a:5a:94:22:3b:de:80:19:8e:17:39:ad:
         84:a7:08:ff:23:1a:4e:c5:85:1b:9b:aa:cc:76:85:a6:15:28:
         82:d0:a7:11:7e:6f:42:60:ac:01:2a:19:38:8c:79:40:af:bb:
         ed:14:b1:fe:e6:14:c0:af:41:c2:3d:91:9e:82:57:d0:80:cc:
         df:80:1d:2e:a9:cc:34:ac:1b:4b:46:98:7f:33:f5:74:df:72:
         0f:f1:11:7a:17:72:4d:80:19:ea:59:a2:32:18:f6:4a:ef:20:
         60:22:08:96:7a:4e:11:97:f8:5c:c7:7b:4f:10:7f:27:de:44:
         d6:6f:c4:87:5f:2c:93:f0:e5:2c:ad:bf:1a:5b:3f:be:f4:6f:
         6b:c7:8f:4b:87:cc:46:b7:9a:b6:28:d2:87:5a:93:f4:ef:ab:
         6d:9f:6b:b5:a0:0a:0f:28:54:92:63:14:c4:38:98:a7:7b:65:
         8c:66:2b:18:c4:8d:bb:6d:45:2c:87:20:19:ea:cd:53:e4:13:
         61:18:10:34:95:85:3b:90:d8:91:8b:2c:a3:25:2b:f7:74:7c:
         59:8c:5e:db:95:88:43:5e:cb:df:c9:ae:c5:1d:12:0d:a9:cd:
         d4:ac:89:22:22:9d:18:2b:01:0a:36:9f:71:43:7f:1e:a5:e8:
         9b:28:e6:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHB2WMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
MWFhN2ZmNjRmOWIzMDIxYmIwZTNjNjBhZGEyNWE1YWFiMDQ4ZDYwHhcNMjMwNDE3
MTQ0NTE4WhcNMjUwNDE4MTQ0NTE4WjAzMTEwLwYDVQQDEygzMmQyMGJkNDFkZTgy
M2QxY2U0ZDlhNWQ2OWVmM2E2OGUzNWJkZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmXDddoumzS3CBmRpg5qWkv1xcXOsN6gWWksWy74Riedq+XvF
U6TOUP3dHz1M4L97/saVxF+0xOZUXE96cyrY8R9++yv3a00RAaUnLRMCaHFpmXxC
9huzdXbKhN5YY6NohvsD4zgd8WoOIL95iAQk42jJ5S6Go3VPrfAZL6SylnqoQ+/a
qQIMWj0W/V/neiaimJMMmCgqZzdjovdDSkjGqpUSedcq/DVAwzQZc3RFVqkEzg9G
zfNis7fuVO5VKZ6IZ+04jDMGK18Z9+657CwzOlg2t0UBaCFuQxAsRdI8o/DFvoD5
NQhlktDxr+zRJAtd235GtSIcSjUVmdIJ1E+knwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG27uCq6O7Ui8y3yBmcuzl+zqnBbMB8GA1UdIwQYMBaAFMctLNUbzVyIk/Cg
3Uxj54b8z0HbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWUxYWE3
ZmY2NGY5YjMwMjFiYjBlM2M2MGFkYTI1YTVhYWIwNDhkNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY2OGVhZjQtMzRhOC00YzVlLWJmOGItMGI3NjJi
ZTQwZTljLzMyZDIwYmQ0MWRlODIzZDFjZTRkOWE1ZDY5ZWYzYTY4ZTM1YmRmOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjY4ZWFmNC0zNGE4LTRjNWUtYmY4Yi0wYjc2
MmJlNDBlOWMvNWUxYWE3ZmY2NGY5YjMwMjFiYjBlM2M2MGFkYTI1YTVhYWIwNDhk
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzejANBgkqhkiG9w0BAQsFAAOCAQEAGoICIFtAGlqUIjve
gBmOFzmthKcI/yMaTsWFG5uqzHaFphUogtCnEX5vQmCsASoZOIx5QK+77RSx/uYU
wK9Bwj2RnoJX0IDM34AdLqnMNKwbS0aYfzP1dN9yD/ERehdyTYAZ6lmiMhj2Su8g
YCIIlnpOEZf4XMd7TxB/J95E1m/Eh18sk/DlLK2/Gls/vvRva8ePS4fMRreatijS
h1qT9O+rbZ9rtaAKDyhUkmMUxDiYp3tljGYrGMSNu21FLIcgGerNU+QTYRgQNJWF
O5DYkYssoyUr93R8WYxe25WIQ17L38muxR0SDanN1KyJIiKdGCsBCjafcUN/HqXo
myjmEg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org