Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/33a22ed76137380dfff5bce841c8f76162f096d9.roa
File:                     33a22ed76137380dfff5bce841c8f76162f096d9.roa (raw, json)
Hash identifier:          +rUt4MOIk1xXG4eznNCCB3Ou7HGOO8S/0pO7mvl1JiQ=
Subject key identifier:   12:F8:5B:76:96:B8:2C:1A:12:45:C2:69:72:4E:A4:A3:37:AC:B6:CA
Certificate issuer:       /CN=ce130f5228c456e6166d44a338f7c8ee74b3f7bc
Certificate serial:       016594
Authority key identifier: 4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/33a22ed76137380dfff5bce841c8f76162f096d9.roa
Signing time:             Wed 07 Jun 2023 12:43:28 +0000
ROA not before:           Tue 06 Jun 2023 12:43:28 +0000
ROA not after:            Sat 07 Jun 2025 12:43:28 +0000
asID:                     263230
IP address blocks:        200.123.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91540 (0x16594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce130f5228c456e6166d44a338f7c8ee74b3f7bc
        Validity
            Not Before: Jun  6 12:43:28 2023 GMT
            Not After : Jun  7 12:43:28 2025 GMT
        Subject: CN=33a22ed76137380dfff5bce841c8f76162f096d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:ef:f6:3a:00:db:06:43:14:16:a4:b5:d5:
                    e5:78:bc:f4:ed:a7:fe:c5:02:72:60:92:d3:b1:7f:
                    88:d7:2b:2c:d6:a7:40:15:06:2b:d1:97:dc:00:5b:
                    39:c4:0d:f6:75:dc:42:29:cb:d9:2a:45:fd:7d:4c:
                    2a:e0:4d:89:2d:4c:1f:33:70:c8:26:7e:10:89:7e:
                    ef:2e:3f:c5:d5:ea:45:25:72:22:8b:35:7a:31:63:
                    3a:c5:fc:73:d5:46:e6:83:14:d3:32:0a:ae:d1:5f:
                    57:29:02:57:8b:2e:49:48:0d:86:e4:e4:55:5c:69:
                    a3:52:83:85:db:04:70:75:a8:69:ae:eb:c0:14:35:
                    a5:cc:c7:bd:ec:75:d9:a5:86:00:d0:db:7e:43:2d:
                    f6:63:f9:b9:55:1d:3e:f8:24:1c:f0:69:a3:e1:16:
                    fd:03:9a:03:03:7c:fa:42:2f:70:db:e9:e9:96:08:
                    86:c7:f0:59:f1:08:ca:59:80:7a:17:3e:a3:90:fb:
                    95:b8:e1:a8:f5:37:3f:69:ad:57:66:0d:17:9c:d3:
                    54:9e:66:fb:d9:07:07:7e:d4:c0:cd:82:fa:68:61:
                    17:b0:43:93:fc:ba:c9:cc:89:72:be:1a:e6:22:29:
                    d3:4d:90:3a:76:4a:09:32:11:e3:ba:af:67:df:fc:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F8:5B:76:96:B8:2C:1A:12:45:C2:69:72:4E:A4:A3:37:AC:B6:CA
            X509v3 Authority Key Identifier:
                keyid:4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/33a22ed76137380dfff5bce841c8f76162f096d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:18:b0:d4:39:a0:4b:fe:a0:88:10:9d:97:b2:99:84:a9:
         39:25:fb:f1:6c:b2:b9:26:fa:cf:15:49:58:0e:99:c1:79:49:
         36:43:68:35:8a:67:a4:9e:42:ce:5e:97:91:df:53:74:7c:c6:
         fe:5c:80:06:4d:90:96:e6:4b:d8:23:f7:62:58:fe:46:ff:cf:
         0b:bb:24:6f:fc:62:96:41:43:9e:75:94:cb:75:e8:02:fe:83:
         5d:eb:bf:0a:f0:da:22:c6:35:a9:be:34:09:fd:c7:14:a3:9f:
         2c:0b:be:0e:7d:c6:0b:a2:72:06:0d:9d:b2:03:9b:cb:5d:ff:
         d6:60:5d:d8:01:8e:25:0e:f0:6e:2d:00:6d:c3:ef:9b:0b:1b:
         1f:27:e9:26:1c:78:3e:13:2d:a6:c4:fa:1e:fc:3f:e7:b6:21:
         28:f6:d4:f1:87:3c:56:22:37:59:90:14:02:70:79:28:d7:db:
         63:09:50:a2:a6:26:f9:77:66:9a:7a:4b:96:a4:39:f3:f0:91:
         80:8a:3c:ad:49:ad:c1:b2:db:2d:d7:12:6e:b7:2e:9e:f1:83:
         6c:11:25:e1:bd:eb:3e:1e:22:fe:79:40:0f:bd:90:8d:ab:83:
         ce:d0:d5:7d:bc:9a:35:fb:ec:56:2e:70:b7:7c:1a:c3:9f:f7:
         a4:a3:6f:5b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAWWUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MTMwZjUyMjhjNDU2ZTYxNjZkNDRhMzM4ZjdjOGVlNzRiM2Y3YmMwHhcNMjMwNjA2
MTI0MzI4WhcNMjUwNjA3MTI0MzI4WjAzMTEwLwYDVQQDEygzM2EyMmVkNzYxMzcz
ODBkZmZmNWJjZTg0MWM4Zjc2MTYyZjA5NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlvnv9joA2wZDFBaktdXleLz07af+xQJyYJLTsX+I1yss1qdA
FQYr0ZfcAFs5xA32ddxCKcvZKkX9fUwq4E2JLUwfM3DIJn4QiX7vLj/F1epFJXIi
izV6MWM6xfxz1UbmgxTTMgqu0V9XKQJXiy5JSA2G5ORVXGmjUoOF2wRwdahpruvA
FDWlzMe97HXZpYYA0Nt+Qy32Y/m5VR0++CQc8Gmj4Rb9A5oDA3z6Qi9w2+nplgiG
x/BZ8QjKWYB6Fz6jkPuVuOGo9Tc/aa1XZg0XnNNUnmb72QcHftTAzYL6aGEXsEOT
/LrJzIlyvhrmIinTTZA6dkoJMhHjuq9n3/xDiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBL4W3aWuCwaEkXCaXJOpKM3rLbKMB8GA1UdIwQYMBaAFE1RLpQiMrzaBBEM
YtuiTB6FR+spMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UxMzBm
NTIyOGM0NTZlNjE2NmQ0NGEzMzhmN2M4ZWU3NGIzZjdiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmY4NzQwMjAtYmIzYS00OTZmLWJlZTYtNzQ0ODhl
ODExODJhLzMzYTIyZWQ3NjEzNzM4MGRmZmY1YmNlODQxYzhmNzYxNjJmMDk2ZDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Zjg3NDAyMC1iYjNhLTQ5NmYtYmVlNi03NDQ4
OGU4MTE4MmEvY2UxMzBmNTIyOGM0NTZlNjE2NmQ0NGEzMzhmN2M4ZWU3NGIzZjdi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8h72DANBgkqhkiG9w0BAQsFAAOCAQEAduIYsNQ5oEv+oIgQ
nZeymYSpOSX78WyyuSb6zxVJWA6ZwXlJNkNoNYpnpJ5Czl6Xkd9TdHzG/lyABk2Q
luZL2CP3Ylj+Rv/PC7skb/xilkFDnnWUy3XoAv6DXeu/CvDaIsY1qb40Cf3HFKOf
LAu+Dn3GC6JyBg2dsgOby13/1mBd2AGOJQ7wbi0AbcPvmwsbHyfpJhx4PhMtpsT6
Hvw/57YhKPbU8Yc8ViI3WZAUAnB5KNfbYwlQoqYm+XdmmnpLlqQ58/CRgIo8rUmt
wbLbLdcSbrcunvGDbBEl4b3rPh4i/nlAD72QjauDztDVfbyaNfvsVi5wt3waw5/3
pKNvWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org