Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/5eee2df68333cc9646c21105506f024a6b2a11b5.roa
File:                     5eee2df68333cc9646c21105506f024a6b2a11b5.roa (raw, json)
Hash identifier:          o2G8KSg6wVBitqfjj1/ing/W3PdAetH1kWhVS1TGt5U=
Subject key identifier:   EB:9B:15:5D:13:DA:DC:87:BD:23:F6:8B:22:97:8B:DA:AC:4C:DD:88
Certificate issuer:       /CN=fd270e2e7c0dcc9b425710f445fd28ad35578566
Certificate serial:       161176
Authority key identifier: 04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd270e2e7c0dcc9b425710f445fd28ad35578566.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/5eee2df68333cc9646c21105506f024a6b2a11b5.roa
Signing time:             Wed 30 Mar 2022 15:18:25 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     8151
IP address blocks:        200.33.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446262 (0x161176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd270e2e7c0dcc9b425710f445fd28ad35578566
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5eee2df68333cc9646c21105506f024a6b2a11b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:73:32:77:04:e3:ae:0e:ec:67:b7:c7:f2:
                    31:6f:bc:60:ff:a0:af:b0:db:90:5e:a2:c3:4c:3a:
                    d0:a4:36:5d:94:9a:95:15:34:f0:b7:af:81:be:6f:
                    a7:ab:3a:56:11:8e:53:0a:a7:99:a8:bf:67:3b:a1:
                    58:e6:ba:93:08:f8:ba:1a:49:b4:92:65:8f:05:f8:
                    22:f3:6f:d6:55:dc:7c:30:cc:d3:4a:5d:b8:d5:4f:
                    04:49:a7:9b:4d:f5:31:1c:d3:ba:14:98:f4:31:55:
                    59:0b:f2:4a:df:3e:e7:79:c2:66:44:04:81:0f:d9:
                    ed:b9:73:49:5b:2d:a2:7e:a0:eb:20:33:e3:30:a1:
                    fb:77:a6:05:52:04:54:3d:47:a8:f7:e4:81:ed:91:
                    d4:93:ec:79:10:51:87:a1:27:1e:6e:b0:0c:94:29:
                    ad:b9:53:67:5b:ba:35:17:68:49:6b:6d:6a:58:ba:
                    e2:95:32:0c:7d:cf:23:f9:ea:15:c7:ef:ee:bc:41:
                    0b:01:b5:13:0f:5b:b4:97:46:0b:2a:59:3f:7c:94:
                    5a:40:67:f3:f8:51:33:43:83:28:49:a8:33:c8:97:
                    3c:a3:66:cf:cb:55:a6:44:4b:45:8f:f0:34:9a:1a:
                    4a:92:dd:11:01:a1:ab:3c:1d:8f:91:48:53:f8:72:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9B:15:5D:13:DA:DC:87:BD:23:F6:8B:22:97:8B:DA:AC:4C:DD:88
            X509v3 Authority Key Identifier:
                keyid:04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd270e2e7c0dcc9b425710f445fd28ad35578566.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/5eee2df68333cc9646c21105506f024a6b2a11b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/fd270e2e7c0dcc9b425710f445fd28ad35578566.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:7a:ef:c1:c6:f2:fd:69:2e:51:87:98:d0:45:28:e4:e5:
         5e:24:0c:98:29:d2:f8:5e:c6:ce:38:22:7c:b2:f2:ad:cd:d8:
         ca:a9:46:d0:3c:76:b8:4f:e0:eb:c5:eb:f7:94:26:92:36:bc:
         bf:51:a9:13:f8:12:1d:09:9e:4d:1c:04:44:60:55:71:76:fe:
         9b:46:36:c2:05:93:8b:14:4b:a2:b7:b9:e6:a2:fd:c3:d0:28:
         e4:93:99:e3:92:5a:ac:e3:d9:3e:d3:ea:d2:0e:d6:c1:e2:d3:
         4b:6c:d6:d2:e9:e5:b5:20:5f:63:6f:b8:6e:8c:3e:93:a0:27:
         0f:c6:bc:a9:c0:9e:81:fc:b3:6b:3c:9e:6a:fb:6d:fc:10:81:
         7a:06:dd:79:d5:c7:c1:f5:15:c7:d9:ab:ac:11:95:c8:c6:50:
         76:01:32:7a:b2:b5:13:ce:8c:26:b7:dc:45:0d:0d:26:64:45:
         1e:b2:83:19:89:08:6c:ac:e5:b7:a2:ac:77:ce:31:f4:2d:e2:
         94:2f:26:3e:49:22:bb:49:08:5b:5d:cf:fe:13:9a:34:35:cb:
         43:36:a6:4b:89:41:8e:bd:38:72:31:26:b1:ff:17:c4:04:b7:
         10:52:c9:1c:5c:b8:e4:bd:32:4d:c0:21:15:32:2e:56:9b:aa:
         54:54:d1:ab
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFhF2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
MjcwZTJlN2MwZGNjOWI0MjU3MTBmNDQ1ZmQyOGFkMzU1Nzg1NjYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZWVlMmRmNjgzMzNj
Yzk2NDZjMjExMDU1MDZmMDI0YTZiMmExMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgwVzMncE464O7Ge3x/Ixb7xg/6CvsNuQXqLDTDrQpDZdlJqV
FTTwt6+Bvm+nqzpWEY5TCqeZqL9nO6FY5rqTCPi6Gkm0kmWPBfgi82/WVdx8MMzT
Sl241U8ESaebTfUxHNO6FJj0MVVZC/JK3z7necJmRASBD9ntuXNJWy2ifqDrIDPj
MKH7d6YFUgRUPUeo9+SB7ZHUk+x5EFGHoScebrAMlCmtuVNnW7o1F2hJa21qWLri
lTIMfc8j+eoVx+/uvEELAbUTD1u0l0YLKlk/fJRaQGfz+FEzQ4MoSagzyJc8o2bP
y1WmREtFj/A0mhpKkt0RAaGrPB2PkUhT+HLJTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOubFV0T2tyHvSP2iyKXi9qsTN2IMB8GA1UdIwQYMBaAFAQHZMt9yt0Q9iM7
jFoFGdo6pUG3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNzBl
MmU3YzBkY2M5YjQyNTcxMGY0NDVmZDI4YWQzNTU3ODU2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQ1NmRmYmQtM2EwYi00OTA0LTg3MDYtMWJkYTYw
MmU3ZDc1LzVlZWUyZGY2ODMzM2NjOTY0NmMyMTEwNTUwNmYwMjRhNmIyYTExYjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDU2ZGZiZC0zYTBiLTQ5MDQtODcwNi0xYmRh
NjAyZTdkNzUvZmQyNzBlMmU3YzBkY2M5YjQyNTcxMGY0NDVmZDI4YWQzNTU3ODU2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcghGjANBgkqhkiG9w0BAQsFAAOCAQEApYF678HG8v1pLlGH
mNBFKOTlXiQMmCnS+F7GzjgifLLyrc3YyqlG0Dx2uE/g68Xr95Qmkja8v1GpE/gS
HQmeTRwERGBVcXb+m0Y2wgWTixRLore55qL9w9Ao5JOZ45JarOPZPtPq0g7WweLT
S2zW0unltSBfY2+4bow+k6AnD8a8qcCegfyzazyeavtt/BCBegbdedXHwfUVx9mr
rBGVyMZQdgEyerK1E86MJrfcRQ0NJmRFHrKDGYkIbKzlt6Ksd84x9C3ilC8mPkki
u0kIW13P/hOaNDXLQzamS4lBjr04cjEmsf8XxAS3EFLJHFy45L0yTcAhFTIuVpuq
VFTRqw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org