Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/e0a5db801b50cfc721df0fd0e0bbe91154abf34e.roa
File:                     e0a5db801b50cfc721df0fd0e0bbe91154abf34e.roa (raw, json)
Hash identifier:          H0m7Q0eycftFa01rg00Nban7L4nBoVFM4UC4GiWDfz8=
Subject key identifier:   24:70:A2:BF:CC:9B:BE:A1:61:B1:18:43:78:D0:16:D5:69:57:B6:06
Certificate issuer:       /CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Certificate serial:       172A44
Authority key identifier: BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/e0a5db801b50cfc721df0fd0e0bbe91154abf34e.roa
Signing time:             Mon 14 Aug 2023 16:30:28 +0000
ROA not before:           Sun 13 Aug 2023 16:30:28 +0000
ROA not after:            Thu 14 Aug 2025 16:30:28 +0000
asID:                     265554
IP address blocks:        200.112.192.0/21 maxlen: 21
                          200.112.200.0/22 maxlen: 22
                          200.112.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518148 (0x172a44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
        Validity
            Not Before: Aug 13 16:30:28 2023 GMT
            Not After : Aug 14 16:30:28 2025 GMT
        Subject: CN=e0a5db801b50cfc721df0fd0e0bbe91154abf34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:ca:da:0f:e2:9f:d0:20:e6:2a:a9:4c:38:
                    0c:15:11:e7:9f:c3:39:eb:e0:f6:ab:55:b9:95:cb:
                    c7:4e:f4:b4:8b:a5:f2:a4:d2:0f:04:99:64:49:c9:
                    9d:28:29:ce:61:ae:e3:63:a2:93:15:10:e7:22:00:
                    98:48:66:57:a0:6c:4f:59:aa:d4:38:26:2d:9c:80:
                    57:24:1b:b8:41:48:8d:53:9e:8e:4e:f0:1c:cf:05:
                    57:57:25:e9:be:f4:44:38:22:77:1f:52:52:d0:51:
                    1a:73:19:43:b5:fe:b9:4d:62:c0:c3:f3:fb:47:b5:
                    63:25:e0:95:b6:69:44:6b:42:e8:3f:22:9a:9b:5e:
                    48:e2:e4:9e:7c:a2:17:60:ca:20:aa:1c:39:9c:84:
                    6a:7e:1a:5e:6c:79:4e:a3:4d:b2:b4:f7:aa:74:1f:
                    66:51:ca:5e:3e:34:ac:3e:71:13:f0:fc:0a:d6:a7:
                    cf:ba:aa:4b:af:23:e7:5b:b4:b8:24:7a:c5:9f:e8:
                    a0:1a:01:14:c5:9f:a2:85:19:50:9d:6c:66:8c:91:
                    d2:45:97:9f:60:27:c7:9a:31:d7:ca:a7:3e:a1:c0:
                    96:08:e6:4c:7b:ed:72:d8:ac:95:4a:25:19:22:f4:
                    0e:9d:5c:50:32:e2:08:0a:3b:43:54:2d:17:a7:27:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:A2:BF:CC:9B:BE:A1:61:B1:18:43:78:D0:16:D5:69:57:B6:06
            X509v3 Authority Key Identifier:
                keyid:BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/e0a5db801b50cfc721df0fd0e0bbe91154abf34e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0-200.112.203.255
                  200.112.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:98:88:60:19:0a:bb:62:c4:27:49:fb:b4:ea:c9:cb:93:af:
         8f:bc:b5:16:de:12:ed:f8:19:ba:af:7b:68:8b:eb:52:a2:67:
         58:03:c4:da:0c:ba:43:2e:ba:a8:9e:2e:c6:95:e3:b3:2b:ab:
         d1:2b:f3:39:4a:8c:ec:97:3a:31:5d:fe:4d:ea:74:7a:bf:62:
         70:1b:9f:a0:eb:7b:6e:b4:a4:f5:12:0f:3f:5e:de:95:4b:26:
         40:e5:f3:9a:cd:02:1b:6a:b8:f8:b6:08:68:4e:8c:26:4a:36:
         ac:b7:76:51:77:89:99:85:1e:cb:fe:da:e4:9c:28:de:e2:15:
         eb:3e:78:b4:3e:58:fa:c8:19:e0:c4:51:02:df:f5:81:a3:ae:
         04:f7:0b:5a:9e:be:9f:d1:08:9e:11:ee:66:98:b3:0b:b3:8d:
         a3:49:66:dc:0c:2a:ed:b4:4e:43:ea:a3:a8:e5:92:7c:86:05:
         aa:62:0d:3a:d8:ce:27:36:f6:3e:bf:b6:87:95:aa:9f:3e:1e:
         23:57:df:e2:2c:19:52:a6:a3:1a:c8:e4:13:6e:1f:b6:59:52:
         1e:15:38:31:d4:6b:fc:39:18:19:0d:8b:34:41:64:36:ac:37:
         b5:49:8c:6c:37:9c:c7:2b:4a:ab:aa:71:cc:bd:29:81:70:9a:
         52:8b:e8:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDFypEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
MGRmN2Y3OThjZDM1ZTM4Njc5ZDYyNWZkM2EzYmM3NWFhNmI1ZjIwHhcNMjMwODEz
MTYzMDI4WhcNMjUwODE0MTYzMDI4WjAzMTEwLwYDVQQDEyhlMGE1ZGI4MDFiNTBj
ZmM3MjFkZjBmZDBlMGJiZTkxMTU0YWJmMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkgrK2g/in9Ag5iqpTDgMFRHnn8M56+D2q1W5lcvHTvS0i6Xy
pNIPBJlkScmdKCnOYa7jY6KTFRDnIgCYSGZXoGxPWarUOCYtnIBXJBu4QUiNU56O
TvAczwVXVyXpvvREOCJ3H1JS0FEacxlDtf65TWLAw/P7R7VjJeCVtmlEa0LoPyKa
m15I4uSefKIXYMogqhw5nIRqfhpebHlOo02ytPeqdB9mUcpePjSsPnET8PwK1qfP
uqpLryPnW7S4JHrFn+igGgEUxZ+ihRlQnWxmjJHSRZefYCfHmjHXyqc+ocCWCOZM
e+1y2KyVSiUZIvQOnVxQMuIICjtDVC0Xpyc2dwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFCRwor/Mm76hYbEYQ3jQFtVpV7YGMB8GA1UdIwQYMBaAFLvBD84I7jJMs/Kv
e5LK6tqnrjz0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmYwZGY3
Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODMxNzVjMWQtZjE0Ni00YWEzLWFlZWQtN2RkYzMw
MWEwYTNlL2UwYTVkYjgwMWI1MGNmYzcyMWRmMGZkMGUwYmJlOTExNTRhYmYzNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MzE3NWMxZC1mMTQ2LTRhYTMtYWVlZC03ZGRj
MzAxYTBhM2UvMmYwZGY3Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFDAMAwQGyHDAAwQCyHDIAwQByHDOMA0GCSqGSIb3DQEBCwUAA4IB
AQAhmIhgGQq7YsQnSfu06snLk6+PvLUW3hLt+Bm6r3toi+tSomdYA8TaDLpDLrqo
ni7GleOzK6vRK/M5SozslzoxXf5N6nR6v2JwG5+g63tutKT1Eg8/Xt6VSyZA5fOa
zQIbarj4tghoTowmSjast3ZRd4mZhR7L/trknCje4hXrPni0Plj6yBngxFEC3/WB
o64E9wtanr6f0QieEe5mmLMLs42jSWbcDCrttE5D6qOo5ZJ8hgWqYg062M4nNvY+
v7aHlaqfPh4jV9/iLBlSpqMayOQTbh+2WVIeFTgx1Gv8ORgZDYs0QWQ2rDe1SYxs
N5zHK0qrqnHMvSmBcJpSi+iO
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org