Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e114ec7e6747562b4f371d3bacf79e65a74e00f2.roa
File:                     e114ec7e6747562b4f371d3bacf79e65a74e00f2.roa (raw, json)
Hash identifier:          k6MIcXTWFUEi1CBoVbbCIqNIMCtByhk0/lsegIom4lE=
Subject key identifier:   73:CE:65:EC:A9:03:30:E9:5A:52:F8:93:90:5E:BF:A0:06:4B:2F:10
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1EC48E
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e114ec7e6747562b4f371d3bacf79e65a74e00f2.roa
Signing time:             Mon 17 Apr 2023 23:16:08 +0000
ROA not before:           Sun 16 Apr 2023 23:16:08 +0000
ROA not after:            Thu 17 Apr 2025 23:16:08 +0000
asID:                     272978
IP address blocks:        131.161.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2016398 (0x1ec48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Apr 16 23:16:08 2023 GMT
            Not After : Apr 17 23:16:08 2025 GMT
        Subject: CN=e114ec7e6747562b4f371d3bacf79e65a74e00f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:2b:58:a2:68:04:1c:21:b3:90:69:a5:05:
                    3f:fe:c2:61:b2:01:ff:a7:30:07:8b:ce:51:d3:14:
                    0d:b3:42:9a:a0:66:72:26:5e:a0:9e:8a:29:0f:0c:
                    35:be:b6:3e:b7:3a:be:c1:bf:26:3d:ab:cd:3b:25:
                    e8:63:a2:18:70:d8:46:57:3c:24:4e:bd:96:f5:e9:
                    ae:21:df:56:56:0f:eb:03:24:7f:9c:60:70:e0:f1:
                    8a:85:10:92:69:fb:ff:a4:10:6e:7e:b8:51:ee:fc:
                    e3:87:ac:fd:3f:4d:9c:81:81:a2:ad:15:34:d4:3c:
                    fe:c9:cb:c4:05:07:b3:6d:b7:30:57:fe:d9:79:be:
                    9b:95:0f:37:8c:2e:53:9c:e9:03:00:94:c8:17:4c:
                    f6:2a:ea:20:4f:85:97:76:8f:74:f0:cd:67:d0:2c:
                    20:2c:ed:4a:71:78:65:cc:77:72:51:b5:6c:a7:92:
                    5b:cf:a1:0d:62:f4:06:c2:54:0a:7e:c5:22:30:ba:
                    56:a0:03:c3:f5:8b:25:ef:93:c3:ed:da:d7:2f:e1:
                    a1:bd:16:56:9c:61:84:69:31:52:b6:e2:da:79:7f:
                    10:32:68:03:7b:3e:ca:55:99:6e:22:d9:5d:b6:4d:
                    b2:d1:9a:56:56:3b:cb:b8:9f:49:82:9f:6e:11:37:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:65:EC:A9:03:30:E9:5A:52:F8:93:90:5E:BF:A0:06:4B:2F:10
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e114ec7e6747562b4f371d3bacf79e65a74e00f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:89:44:b0:8f:fb:ac:a7:16:88:d9:7a:46:8a:6e:d9:31:
         86:9c:19:94:3c:45:39:84:47:06:17:03:5c:97:61:96:5c:99:
         ce:d4:2e:c9:25:ba:f9:3d:fa:3e:36:20:5a:9d:75:7e:54:02:
         58:35:b3:a6:f2:7d:bb:5a:b3:3d:ba:15:c6:08:69:95:16:ef:
         05:b9:e2:40:31:3f:70:9a:04:0f:df:8c:5c:ba:ab:fe:7d:a9:
         09:2d:ac:1c:5e:93:23:7e:2c:a5:15:fd:1c:36:9e:cb:c0:f9:
         97:d5:3f:29:c6:ac:52:21:20:3b:0f:8c:22:e1:3d:12:d3:c8:
         2e:d1:d8:39:d9:59:3f:01:78:24:b2:d9:20:f8:3e:c6:7d:fd:
         6e:66:a9:8f:90:1c:65:1b:8c:25:2d:a7:89:1d:64:b4:99:f8:
         20:cc:9a:c1:2f:75:72:07:a5:4f:bf:ad:fb:a1:61:3b:dc:9a:
         9e:83:8f:b3:5a:1e:db:3e:50:40:d3:83:a6:ad:60:a4:f4:55:
         f7:5f:8a:b5:9c:31:fc:c2:a4:c9:cc:dd:5b:93:5b:c4:c9:0c:
         07:c8:7a:08:02:3f:7b:02:2f:69:18:68:9b:c9:fa:12:f2:b5:
         91:43:1c:6e:78:fb:65:f1:0e:69:c3:8c:46:23:0a:db:27:6f:
         44:c1:21:e7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHsSOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjMwNDE2
MjMxNjA4WhcNMjUwNDE3MjMxNjA4WjAzMTEwLwYDVQQDEyhlMTE0ZWM3ZTY3NDc1
NjJiNGYzNzFkM2JhY2Y3OWU2NWE3NGUwMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWgrWKJoBBwhs5BppQU//sJhsgH/pzAHi85R0xQNs0KaoGZy
Jl6gnoopDww1vrY+tzq+wb8mPavNOyXoY6IYcNhGVzwkTr2W9emuId9WVg/rAyR/
nGBw4PGKhRCSafv/pBBufrhR7vzjh6z9P02cgYGirRU01Dz+ycvEBQezbbcwV/7Z
eb6blQ83jC5TnOkDAJTIF0z2KuogT4WXdo908M1n0CwgLO1KcXhlzHdyUbVsp5Jb
z6ENYvQGwlQKfsUiMLpWoAPD9Ysl75PD7drXL+GhvRZWnGGEaTFStuLaeX8QMmgD
ez7KVZluItldtk2y0ZpWVjvLuJ9Jgp9uETft/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHPOZeypAzDpWlL4k5Bev6AGSy8QMB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmL2UxMTRlYzdlNjc0NzU2MmI0ZjM3MWQzYmFjZjc5ZTY1YTc0ZTAwZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIOhyDANBgkqhkiG9w0BAQsFAAOCAQEAFdmJRLCP+6ynFojZ
ekaKbtkxhpwZlDxFOYRHBhcDXJdhllyZztQuySW6+T36PjYgWp11flQCWDWzpvJ9
u1qzPboVxghplRbvBbniQDE/cJoED9+MXLqr/n2pCS2sHF6TI34spRX9HDaey8D5
l9U/KcasUiEgOw+MIuE9EtPILtHYOdlZPwF4JLLZIPg+xn39bmapj5AcZRuMJS2n
iR1ktJn4IMyawS91cgelT7+t+6FhO9yanoOPs1oe2z5QQNODpq1gpPRV91+KtZwx
/MKkyczdW5NbxMkMB8h6CAI/ewIvaRhom8n6EvK1kUMcbnj7ZfEOacOMRiMK2ydv
RMEh5w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org