Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/74753bdc0bc741fcae589dca7e4303dd1ce6ca80.roa
File:                     74753bdc0bc741fcae589dca7e4303dd1ce6ca80.roa (raw, json)
Hash identifier:          hd9HBhcABck3EyMbwdyTAEXnyjKiHQnIkr8VaE2SkBs=
Subject key identifier:   F3:CE:BD:2A:EE:21:EE:2B:DA:E5:30:0F:41:32:45:4A:A3:B1:8F:11
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       0B5F35
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/74753bdc0bc741fcae589dca7e4303dd1ce6ca80.roa
Signing time:             Mon 24 Apr 2023 18:42:57 +0000
ROA not before:           Sun 23 Apr 2023 18:42:56 +0000
ROA not after:            Thu 24 Apr 2025 18:42:56 +0000
asID:                     11315
IP address blocks:        200.68.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745269 (0xb5f35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Apr 23 18:42:56 2023 GMT
            Not After : Apr 24 18:42:56 2025 GMT
        Subject: CN=74753bdc0bc741fcae589dca7e4303dd1ce6ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:77:b0:9c:ca:be:11:13:d2:68:47:88:76:0f:
                    fa:80:11:e7:31:10:24:55:08:d6:88:d8:ff:df:45:
                    47:5b:99:ac:e3:dc:e2:65:7f:69:c9:72:95:f7:90:
                    a2:89:c5:b0:bd:bd:c8:1c:fe:e9:ed:1b:4a:08:ce:
                    ab:af:dd:c6:31:e5:6b:29:a8:50:c4:49:06:63:41:
                    76:92:1b:c5:4b:c4:1f:00:e2:e8:e5:fd:63:e9:51:
                    4c:b0:b7:cb:94:61:9b:e5:46:45:83:8b:b3:46:49:
                    2c:00:22:b0:e8:4e:5c:c6:7b:06:d8:f1:9d:9d:8e:
                    37:41:49:86:8b:96:53:4a:f4:59:0e:4c:ca:6b:5f:
                    a1:2e:43:cb:6a:13:0f:ed:7b:1a:be:36:6a:ff:c4:
                    44:4e:b1:12:22:21:50:e6:56:c1:e8:dd:7c:ec:71:
                    42:02:65:98:b2:c8:5d:a6:eb:a3:f5:81:05:a0:6a:
                    44:cc:40:df:09:63:d3:08:e0:3c:a3:e4:f6:f8:f3:
                    42:b2:6b:ef:61:d1:2c:07:c9:b2:d8:86:5c:a0:05:
                    a3:ba:78:6b:9a:08:7f:e0:3a:f6:f3:8e:82:99:49:
                    90:64:0d:c3:dd:84:eb:01:2b:52:e5:d4:4e:72:b6:
                    03:81:85:d9:89:ae:cb:46:eb:f0:5f:e2:e0:10:59:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:BD:2A:EE:21:EE:2B:DA:E5:30:0F:41:32:45:4A:A3:B1:8F:11
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/74753bdc0bc741fcae589dca7e4303dd1ce6ca80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:7b:16:ad:89:24:98:6c:14:f8:fb:2b:7d:e9:51:3e:bf:
         d3:6e:66:d9:0e:e2:f2:f1:50:cf:e5:32:61:68:30:68:07:33:
         80:e2:c5:b2:39:18:45:61:97:68:d7:7f:57:d9:e0:e3:e9:7c:
         cf:5e:d6:b4:93:76:ba:fa:67:81:0e:01:8d:ec:fe:3f:0a:36:
         cc:2d:60:9a:45:bf:f7:9e:58:bb:b1:26:5b:22:ea:00:f8:a6:
         d7:e1:ae:50:5d:b7:95:00:96:36:5b:7d:2b:d2:d1:10:76:9b:
         45:f8:17:c7:f2:86:17:88:d4:3d:aa:a2:11:86:85:ce:51:53:
         09:55:09:c0:03:a7:25:e0:7e:e9:6b:cd:80:2e:bc:a1:ef:7e:
         1d:3e:c6:11:69:02:22:8a:ac:b3:63:8d:8d:57:25:b9:09:f7:
         36:70:86:71:a8:8b:1e:36:0e:23:a0:9d:80:d2:47:3e:70:ee:
         5e:b5:21:80:2f:78:65:8b:b1:07:4d:09:b7:a2:23:78:0c:6b:
         ec:c8:21:d8:09:46:4e:b2:14:12:0c:71:a2:c0:5f:b6:d3:1b:
         cf:0c:42:25:34:fc:69:d7:c1:ce:e7:4d:55:5d:99:34:b4:d2:
         46:bf:17:e6:fa:2d:6b:9a:83:6c:7f:2b:a1:b3:d3:45:3f:69:
         40:50:e2:46
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC181MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
Mzc5Y2Q3MTIyOWYyMTdiOWY4MzRiYmM0ZTNmYTI0ZjcwMTRmODkwHhcNMjMwNDIz
MTg0MjU2WhcNMjUwNDI0MTg0MjU2WjAzMTEwLwYDVQQDEyg3NDc1M2JkYzBiYzc0
MWZjYWU1ODlkY2E3ZTQzMDNkZDFjZTZjYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgXewnMq+ERPSaEeIdg/6gBHnMRAkVQjWiNj/30VHW5ms49zi
ZX9pyXKV95CiicWwvb3IHP7p7RtKCM6rr93GMeVrKahQxEkGY0F2khvFS8QfAOLo
5f1j6VFMsLfLlGGb5UZFg4uzRkksACKw6E5cxnsG2PGdnY43QUmGi5ZTSvRZDkzK
a1+hLkPLahMP7XsavjZq/8RETrESIiFQ5lbB6N187HFCAmWYsshdpuuj9YEFoGpE
zEDfCWPTCOA8o+T2+PNCsmvvYdEsB8my2IZcoAWjunhrmgh/4Dr2846CmUmQZA3D
3YTrAStS5dROcrYDgYXZia7LRuvwX+LgEFlirwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPPOvSruIe4r2uUwD0EyRUqjsY8RMB8GA1UdIwQYMBaAFIsW7y9yQDIoEOj3
32Fllr30HLgdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzgzNzlj
ZDcxMjI5ZjIxN2I5ZjgzNGJiYzRlM2ZhMjRmNzAxNGY4OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTExZTYwNjMtNzBkOC00N2VkLThkM2YtZWYwNmRm
NGMzNzIyLzc0NzUzYmRjMGJjNzQxZmNhZTU4OWRjYTdlNDMwM2RkMWNlNmNhODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MTFlNjA2My03MGQ4LTQ3ZWQtOGQzZi1lZjA2
ZGY0YzM3MjIvNzgzNzljZDcxMjI5ZjIxN2I5ZjgzNGJiYzRlM2ZhMjRmNzAxNGY4
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMhE8DANBgkqhkiG9w0BAQsFAAOCAQEAWuJ7Fq2JJJhsFPj7
K33pUT6/025m2Q7i8vFQz+UyYWgwaAczgOLFsjkYRWGXaNd/V9ng4+l8z17WtJN2
uvpngQ4Bjez+Pwo2zC1gmkW/955Yu7EmWyLqAPim1+GuUF23lQCWNlt9K9LREHab
RfgXx/KGF4jUPaqiEYaFzlFTCVUJwAOnJeB+6WvNgC68oe9+HT7GEWkCIoqss2ON
jVcluQn3NnCGcaiLHjYOI6CdgNJHPnDuXrUhgC94ZYuxB00Jt6IjeAxr7Mgh2AlG
TrIUEgxxosBfttMbzwxCJTT8adfBzudNVV2ZNLTSRr8X5vota5qDbH8robPTRT9p
QFDiRg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org