Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/80f3df1f49d76887132be786dea66f0ceb848223.roa
File:                     80f3df1f49d76887132be786dea66f0ceb848223.roa (raw, json)
Hash identifier:          mYiSYQC4VitBUtl8ZwhSeGzjzoF6K7sKdp0ASoX/ROM=
Subject key identifier:   19:18:1C:DD:FC:13:22:8D:3B:CE:C1:94:FC:65:5B:71:46:82:B6:F2
Certificate issuer:       /CN=fd270e2e7c0dcc9b425710f445fd28ad35578566
Certificate serial:       125C32
Authority key identifier: 04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd270e2e7c0dcc9b425710f445fd28ad35578566.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/80f3df1f49d76887132be786dea66f0ceb848223.roa
Signing time:             Tue 26 Oct 2021 18:05:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28501
IP address blocks:        200.33.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203250 (0x125c32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd270e2e7c0dcc9b425710f445fd28ad35578566
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=80f3df1f49d76887132be786dea66f0ceb848223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9c:65:69:72:b0:32:f1:89:a3:75:8e:53:75:
                    5d:8e:5d:29:90:35:d0:34:41:91:67:ed:68:25:72:
                    54:48:81:ea:02:09:d9:f3:5f:93:1e:44:d9:c5:cb:
                    f1:99:57:01:db:45:bc:d5:c8:c1:d0:7e:48:68:6d:
                    f2:cd:0e:57:16:7b:7c:50:df:ac:99:fd:06:24:48:
                    27:78:74:9b:34:db:3a:ae:0c:a5:24:0b:0b:e0:74:
                    53:3d:4b:15:a4:e8:81:40:17:ea:62:12:36:d3:2d:
                    bc:4a:f4:e4:ed:15:7b:d3:39:dc:87:e7:85:87:01:
                    46:2a:8c:3f:fb:89:73:ff:9f:d0:07:94:10:69:fc:
                    54:55:16:1a:20:09:a0:d6:49:7d:9a:27:e5:48:d8:
                    b6:57:9f:cf:d2:5d:eb:3d:0a:26:26:59:80:e3:d1:
                    63:c8:34:8f:15:4b:b7:a4:61:bd:a5:24:2f:ba:cf:
                    f0:2f:65:fb:a7:49:8c:ba:78:85:41:72:91:7a:82:
                    80:e3:2e:04:a7:db:10:7c:15:62:6a:ab:6a:5f:de:
                    04:f0:2c:33:8e:02:b5:96:cc:a5:6a:bd:e3:56:08:
                    84:92:3d:3e:72:c5:46:7b:cd:1e:c7:a4:65:60:92:
                    87:de:65:8d:67:31:ed:91:a2:35:73:46:67:7c:d5:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:1C:DD:FC:13:22:8D:3B:CE:C1:94:FC:65:5B:71:46:82:B6:F2
            X509v3 Authority Key Identifier:
                keyid:04:07:64:CB:7D:CA:DD:10:F6:23:3B:8C:5A:05:19:DA:3A:A5:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd270e2e7c0dcc9b425710f445fd28ad35578566.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/80f3df1f49d76887132be786dea66f0ceb848223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7456dfbd-3a0b-4904-8706-1bda602e7d75/fd270e2e7c0dcc9b425710f445fd28ad35578566.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:75:68:d7:6d:e3:c6:37:d9:9b:b2:31:28:67:02:1d:17:28:
         09:fc:2e:0d:79:cb:a2:36:ca:17:62:a1:2d:40:01:ba:95:c9:
         48:07:95:ab:8c:27:62:e5:7c:87:81:6e:b1:5c:6c:66:91:e2:
         9d:0d:89:6d:b4:dd:b6:c9:5c:dc:68:2b:27:a1:15:ae:c7:1b:
         6c:89:d6:9f:2d:eb:c9:21:a3:0d:96:6f:88:dc:42:43:dd:98:
         49:f3:41:68:28:53:75:f0:45:5c:ba:af:7d:ab:c8:31:65:50:
         d4:6b:d7:99:e0:c3:7c:0e:90:ba:09:26:ff:29:25:ea:1d:f3:
         fd:2a:aa:1a:5d:a6:08:a7:9b:3b:17:d8:50:17:b2:68:89:e1:
         a2:68:27:90:89:37:b8:39:5c:52:84:fb:b7:0f:06:d3:1a:67:
         77:0c:0b:48:76:c4:dc:bb:85:7c:82:5c:cc:f8:9f:e9:55:16:
         85:7a:8a:ac:cf:03:cd:9e:6d:ff:64:16:06:9e:e3:8e:b7:e9:
         f6:00:68:78:a4:80:4a:ba:d1:b0:fc:d5:47:fb:6a:62:d4:19:
         53:bb:93:86:84:1c:ce:40:00:08:92:ef:1d:94:5b:f5:01:75:
         a2:f9:8e:f7:d9:e8:d0:1f:74:08:b6:1d:39:9e:b8:70:48:84:
         70:71:b1:6a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDElwyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
MjcwZTJlN2MwZGNjOWI0MjU3MTBmNDQ1ZmQyOGFkMzU1Nzg1NjYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4MGYzZGYxZjQ5ZDc2
ODg3MTMyYmU3ODZkZWE2NmYwY2ViODQ4MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhZxlaXKwMvGJo3WOU3Vdjl0pkDXQNEGRZ+1oJXJUSIHqAgnZ
81+THkTZxcvxmVcB20W81cjB0H5IaG3yzQ5XFnt8UN+smf0GJEgneHSbNNs6rgyl
JAsL4HRTPUsVpOiBQBfqYhI20y28SvTk7RV70znch+eFhwFGKow/+4lz/5/QB5QQ
afxUVRYaIAmg1kl9miflSNi2V5/P0l3rPQomJlmA49FjyDSPFUu3pGG9pSQvus/w
L2X7p0mMuniFQXKReoKA4y4Ep9sQfBViaqtqX94E8CwzjgK1lsylar3jVgiEkj0+
csVGe80ex6RlYJKH3mWNZzHtkaI1c0ZnfNVDqQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBkYHN38EyKNO87BlPxlW3FGgrbyMB8GA1UdIwQYMBaAFAQHZMt9yt0Q9iM7
jFoFGdo6pUG3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNzBl
MmU3YzBkY2M5YjQyNTcxMGY0NDVmZDI4YWQzNTU3ODU2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQ1NmRmYmQtM2EwYi00OTA0LTg3MDYtMWJkYTYw
MmU3ZDc1LzgwZjNkZjFmNDlkNzY4ODcxMzJiZTc4NmRlYTY2ZjBjZWI4NDgyMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDU2ZGZiZC0zYTBiLTQ5MDQtODcwNi0xYmRh
NjAyZTdkNzUvZmQyNzBlMmU3YzBkY2M5YjQyNTcxMGY0NDVmZDI4YWQzNTU3ODU2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcghGjANBgkqhkiG9w0BAQsFAAOCAQEAcnVo123jxjfZm7Ix
KGcCHRcoCfwuDXnLojbKF2KhLUABupXJSAeVq4wnYuV8h4FusVxsZpHinQ2JbbTd
tslc3GgrJ6EVrscbbInWny3rySGjDZZviNxCQ92YSfNBaChTdfBFXLqvfavIMWVQ
1GvXmeDDfA6Qugkm/ykl6h3z/SqqGl2mCKebOxfYUBeyaInhomgnkIk3uDlcUoT7
tw8G0xpndwwLSHbE3LuFfIJczPif6VUWhXqKrM8DzZ5t/2QWBp7jjrfp9gBoeKSA
SrrRsPzVR/tqYtQZU7uThoQczkAACJLvHZRb9QF1ovmO99no0B90CLYdOZ64cEiE
cHGxag==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org