Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/d519ee74ba7d8ba819f9e48781c86aec75bb809b.roa
File:                     d519ee74ba7d8ba819f9e48781c86aec75bb809b.roa (raw, json)
Hash identifier:          UHiBEjBm15ZBSr2XvLqIx6Z0Sa1PM/1iFwCz3hodwoI=
Subject key identifier:   A9:17:8C:95:98:B6:41:BB:21:DB:AD:AB:EF:CF:99:49:4E:AB:26:DA
Certificate issuer:       /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial:       165644
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/d519ee74ba7d8ba819f9e48781c86aec75bb809b.roa
Signing time:             Thu 20 Apr 2023 12:12:31 +0000
ROA not before:           Wed 19 Apr 2023 12:12:30 +0000
ROA not after:            Sun 20 Apr 2025 12:12:30 +0000
asID:                     267819
IP address blocks:        200.63.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463876 (0x165644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
        Validity
            Not Before: Apr 19 12:12:30 2023 GMT
            Not After : Apr 20 12:12:30 2025 GMT
        Subject: CN=d519ee74ba7d8ba819f9e48781c86aec75bb809b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:f8:20:a5:e0:16:b2:14:02:94:1b:68:24:
                    ac:1c:03:1e:1f:6f:c9:2c:15:f9:f6:ad:b7:3f:42:
                    21:91:8f:88:5d:48:4a:49:b6:20:05:f1:8d:99:01:
                    24:99:99:0b:da:3a:62:09:7b:5d:1a:72:1d:1d:f7:
                    ca:c3:68:e1:7b:91:98:f6:10:53:ea:cd:9d:5f:41:
                    f1:5c:b1:4f:7c:87:77:15:fe:12:da:bf:62:0f:b3:
                    26:f6:be:77:c5:81:6a:b2:12:f0:b7:ff:07:ad:42:
                    f3:98:cc:44:60:15:79:23:64:45:ac:74:36:8f:ab:
                    65:8b:38:55:1b:0e:22:3e:3f:33:db:8e:2a:46:a0:
                    a7:8f:30:2f:23:7c:4f:61:7a:c1:c2:3d:46:36:28:
                    75:c4:81:cf:f0:f2:cc:02:a9:f1:2e:77:77:00:e0:
                    e1:58:dc:83:1e:7e:1d:ef:93:37:eb:4e:cd:5c:1d:
                    ee:bb:8e:aa:4c:a9:1a:dd:79:73:75:3a:d9:9c:4d:
                    90:6d:e3:0a:57:77:c1:76:4e:d2:c6:8f:4f:f4:7c:
                    ac:b7:95:7c:46:b8:47:8f:47:4e:7b:9c:b0:e6:02:
                    9e:54:38:b0:87:0b:4a:e7:6b:aa:51:aa:dd:c7:f3:
                    c5:c4:ce:a3:39:92:ec:31:a0:34:0f:e7:03:35:97:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:8C:95:98:B6:41:BB:21:DB:AD:AB:EF:CF:99:49:4E:AB:26:DA
            X509v3 Authority Key Identifier:
                keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/d519ee74ba7d8ba819f9e48781c86aec75bb809b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:af:79:83:c4:f5:34:91:3f:9f:33:49:d9:b5:c0:d5:36:3e:
         b2:a7:ff:89:72:e4:21:54:8d:22:6a:1a:90:24:31:b3:b7:60:
         1e:da:a2:3a:7a:45:c1:90:96:65:7a:73:fe:ac:9b:51:59:36:
         62:d9:56:8b:20:f1:06:ff:8e:3e:a3:85:8a:8f:c9:13:ba:b7:
         7d:72:53:91:e4:36:ae:fb:7b:b8:19:83:d3:2b:22:08:3e:ac:
         fd:a9:9d:f4:d5:b5:8d:8c:5c:d0:e2:69:01:cf:63:ff:7e:02:
         f6:0c:2b:12:46:cc:6b:e2:c2:b1:3c:5e:12:3e:bd:b1:81:71:
         7f:e8:97:64:1a:a1:cd:c2:87:ad:60:67:52:8d:22:65:40:c4:
         9f:c9:b4:e9:c9:12:1e:b3:15:6a:43:32:0b:d4:fd:72:59:eb:
         b3:58:31:fd:bc:ae:bd:10:1c:26:cf:eb:b8:b3:38:e8:8e:f8:
         0b:d8:00:0c:89:98:2c:21:8f:b6:e1:7f:10:62:f1:a1:b4:9d:
         d0:07:14:45:03:bf:ab:79:0a:6e:3f:f8:2f:f7:ec:16:a6:bc:
         45:3f:19:12:bd:5f:7e:fd:14:45:66:45:b0:95:e9:6a:50:da:
         8c:6b:2e:03:a6:fc:b4:00:3a:78:48:b6:47:09:cd:4f:b2:d5:
         0e:97:b2:be
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFlZEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFl
MTE2ODcwNzg2NjdiZGNkNDUyYmI3YjBmMDBiYjg2ZGNmZWQ5NzIwHhcNMjMwNDE5
MTIxMjMwWhcNMjUwNDIwMTIxMjMwWjAzMTEwLwYDVQQDEyhkNTE5ZWU3NGJhN2Q4
YmE4MTlmOWU0ODc4MWM4NmFlYzc1YmI4MDliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApYT4IKXgFrIUApQbaCSsHAMeH2/JLBX59q23P0IhkY+IXUhK
SbYgBfGNmQEkmZkL2jpiCXtdGnIdHffKw2jhe5GY9hBT6s2dX0HxXLFPfId3Ff4S
2r9iD7Mm9r53xYFqshLwt/8HrULzmMxEYBV5I2RFrHQ2j6tlizhVGw4iPj8z244q
RqCnjzAvI3xPYXrBwj1GNih1xIHP8PLMAqnxLnd3AODhWNyDHn4d75M3607NXB3u
u46qTKka3XlzdTrZnE2QbeMKV3fBdk7Sxo9P9Hyst5V8RrhHj0dOe5yw5gKeVDiw
hwtK52uqUardx/PFxM6jOZLsMaA0D+cDNZfE5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKkXjJWYtkG7Idutq+/PmUlOqybaMB8GA1UdIwQYMBaAFDM1MpQCINoXY9tE
QryGBqwemb+nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWUxMTY4
NzA3ODY2N2JkY2Q0NTJiYjdiMGYwMGJiODZkY2ZlZDk3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU2YWJkY2MtZTBhNy00MzAyLWIyMGEtOGIwZTIw
M2FmOTE2L2Q1MTllZTc0YmE3ZDhiYTgxOWY5ZTQ4NzgxYzg2YWVjNzViYjgwOWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NTZhYmRjYy1lMGE3LTQzMDItYjIwYS04YjBl
MjAzYWY5MTYvMWUxMTY4NzA3ODY2N2JkY2Q0NTJiYjdiMGYwMGJiODZkY2ZlZDk3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg/XjANBgkqhkiG9w0BAQsFAAOCAQEAVK95g8T1NJE/nzNJ
2bXA1TY+sqf/iXLkIVSNImoakCQxs7dgHtqiOnpFwZCWZXpz/qybUVk2YtlWiyDx
Bv+OPqOFio/JE7q3fXJTkeQ2rvt7uBmD0ysiCD6s/amd9NW1jYxc0OJpAc9j/34C
9gwrEkbMa+LCsTxeEj69sYFxf+iXZBqhzcKHrWBnUo0iZUDEn8m06ckSHrMVakMy
C9T9clnrs1gx/byuvRAcJs/ruLM46I74C9gADImYLCGPtuF/EGLxobSd0AcURQO/
q3kKbj/4L/fsFqa8RT8ZEr1ffv0URWZFsJXpalDajGsuA6b8tAA6eEi2RwnNT7LV
Dpeyvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org