Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/2e3a6cfcb09b346edb041ec27b7df7deaa040ace.roa
File:                     2e3a6cfcb09b346edb041ec27b7df7deaa040ace.roa (raw, json)
Hash identifier:          ygRXC+XnaTE2sr+pIAeaYSyy7+N2iwqg2jx+0wgqV+k=
Subject key identifier:   E2:BF:2F:62:43:C0:3F:95:41:1F:33:CB:48:DB:0B:7C:9F:F0:EB:08
Certificate issuer:       /CN=bd7470bf15ce9876c85e0d7efef9582f422f82e6
Certificate serial:       0D2392
Authority key identifier: 30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/2e3a6cfcb09b346edb041ec27b7df7deaa040ace.roa
Signing time:             Wed 24 Mar 2021 14:36:37 +0000
ROA not before:           Wed 24 Mar 2021 14:36:37 +0000
ROA not after:            Tue 24 Mar 2026 14:36:37 +0000
asID:                     262226
IP address blocks:        200.115.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861074 (0xd2392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7470bf15ce9876c85e0d7efef9582f422f82e6
        Validity
            Not Before: Mar 24 14:36:37 2021 GMT
            Not After : Mar 24 14:36:37 2026 GMT
        Subject: CN=2e3a6cfcb09b346edb041ec27b7df7deaa040ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:10:56:5c:32:f1:55:29:c3:c4:8d:68:75:
                    91:47:51:3d:53:fc:b1:74:20:16:a0:f0:f2:33:1c:
                    01:66:88:47:95:49:fd:d5:b2:9f:51:94:4f:60:99:
                    bf:dd:42:a3:bd:b7:23:03:3c:9c:5a:4a:00:96:fe:
                    be:d0:60:12:ea:00:dc:92:0d:88:b8:ee:d5:33:0d:
                    71:b6:11:54:f2:b8:8d:d1:d6:60:47:a8:63:50:db:
                    6d:b1:bc:62:4b:36:85:d5:3b:29:63:c4:39:df:a6:
                    3f:20:11:02:45:7d:2a:3b:d6:f7:2b:1d:53:9d:cc:
                    9e:ed:94:02:ae:d2:90:31:04:4e:39:2a:99:5e:74:
                    2f:0d:ed:ac:ac:05:d8:d8:2d:2a:20:c8:b7:2c:20:
                    64:47:4c:c4:c1:6e:92:bd:3a:fa:f3:ae:1e:b8:f6:
                    4a:97:dd:50:47:85:90:49:bf:5b:63:98:d0:51:80:
                    1f:31:21:33:52:fb:a6:e5:98:07:02:31:96:eb:45:
                    2f:ae:07:ef:d3:b0:eb:3a:a5:3d:9a:90:8d:22:a1:
                    86:d4:5d:51:4d:99:5e:82:71:b0:a1:60:41:f7:97:
                    fc:72:7d:98:a8:5e:d4:08:53:64:56:25:68:9d:7e:
                    c2:b7:80:c4:29:1e:78:80:f2:e9:98:45:01:9d:29:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:2F:62:43:C0:3F:95:41:1F:33:CB:48:DB:0B:7C:9F:F0:EB:08
            X509v3 Authority Key Identifier:
                keyid:30:B2:26:EA:4A:C4:E7:5D:C4:06:92:9D:C2:E8:55:9B:BE:08:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7470bf15ce9876c85e0d7efef9582f422f82e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/2e3a6cfcb09b346edb041ec27b7df7deaa040ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8be7c618-7a86-475a-9a4a-20cfd59ee66b/bd7470bf15ce9876c85e0d7efef9582f422f82e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:ba:27:54:96:46:9b:d8:de:f2:2c:87:3e:da:7d:dd:42:
         9d:b9:df:86:5f:56:de:26:56:f4:6b:e4:74:a8:15:08:08:db:
         5e:8a:27:bf:33:4f:28:7a:c3:19:3d:b8:dc:10:28:34:66:a0:
         fa:19:c3:df:9a:1f:a5:a7:79:31:95:3c:2d:89:89:f2:ea:50:
         17:17:a8:8d:06:ca:e7:e4:b9:3f:27:51:66:2c:29:56:28:90:
         6b:e3:67:23:57:17:dc:96:e3:98:74:d5:ec:a1:80:4b:52:79:
         e0:93:1b:5b:95:52:69:ef:73:2b:b9:62:c7:34:9c:82:64:a4:
         58:d2:f8:a0:7f:31:15:86:36:24:6a:d4:58:8c:80:8b:88:30:
         64:45:7a:04:e9:8c:d9:73:84:69:99:9f:6a:c1:a3:43:93:b8:
         20:5d:b5:46:14:21:82:53:fe:55:7f:ed:3b:6f:57:45:3a:fa:
         44:52:b6:d2:35:30:bc:b7:d2:0c:e8:11:fd:c2:a9:16:c6:e8:
         81:9d:27:73:2e:cb:82:33:bc:00:08:56:02:4f:e9:dc:a5:72:
         63:a9:2e:4e:0d:0e:9c:2d:15:38:2d:0e:10:cd:b3:e9:66:c7:
         8a:ce:c5:85:c5:af:20:1b:84:40:0a:36:a2:be:8c:07:08:3c:
         ec:da:01:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSOSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
NzQ3MGJmMTVjZTk4NzZjODVlMGQ3ZWZlZjk1ODJmNDIyZjgyZTYwHhcNMjEwMzI0
MTQzNjM3WhcNMjYwMzI0MTQzNjM3WjAzMTEwLwYDVQQDEygyZTNhNmNmY2IwOWIz
NDZlZGIwNDFlYzI3YjdkZjdkZWFhMDQwYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAneoQVlwy8VUpw8SNaHWRR1E9U/yxdCAWoPDyMxwBZohHlUn9
1bKfUZRPYJm/3UKjvbcjAzycWkoAlv6+0GAS6gDckg2IuO7VMw1xthFU8riN0dZg
R6hjUNttsbxiSzaF1TspY8Q536Y/IBECRX0qO9b3Kx1Tncye7ZQCrtKQMQROOSqZ
XnQvDe2srAXY2C0qIMi3LCBkR0zEwW6SvTr6864euPZKl91QR4WQSb9bY5jQUYAf
MSEzUvum5ZgHAjGW60Uvrgfv07DrOqU9mpCNIqGG1F1RTZlegnGwoWBB95f8cn2Y
qF7UCFNkViVonX7Ct4DEKR54gPLpmEUBnSkF3wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOK/L2JDwD+VQR8zy0jbC3yf8OsIMB8GA1UdIwQYMBaAFDCyJupKxOddxAaS
ncLoVZu+CPZrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ3NDcw
YmYxNWNlOTg3NmM4NWUwZDdlZmVmOTU4MmY0MjJmODJlNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGJlN2M2MTgtN2E4Ni00NzVhLTlhNGEtMjBjZmQ1
OWVlNjZiLzJlM2E2Y2ZjYjA5YjM0NmVkYjA0MWVjMjdiN2RmN2RlYWEwNDBhY2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84YmU3YzYxOC03YTg2LTQ3NWEtOWE0YS0yMGNm
ZDU5ZWU2NmIvYmQ3NDcwYmYxNWNlOTg3NmM4NWUwZDdlZmVmOTU4MmY0MjJmODJl
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhztTANBgkqhkiG9w0BAQsFAAOCAQEAUz26J1SWRpvY3vIs
hz7afd1Cnbnfhl9W3iZW9GvkdKgVCAjbXoonvzNPKHrDGT243BAoNGag+hnD35of
pad5MZU8LYmJ8upQFxeojQbK5+S5PydRZiwpViiQa+NnI1cX3JbjmHTV7KGAS1J5
4JMbW5VSae9zK7lixzScgmSkWNL4oH8xFYY2JGrUWIyAi4gwZEV6BOmM2XOEaZmf
asGjQ5O4IF21RhQhglP+VX/tO29XRTr6RFK20jUwvLfSDOgR/cKpFsbogZ0ncy7L
gjO8AAhWAk/p3KVyY6kuTg0OnC0VOC0OEM2z6WbHis7FhcWvIBuEQAo2or6MBwg8
7NoBwg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org