Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/a49b0a25cb8a3b7b7f3de1d0c043462a96eb0e1a.roa
File:                     a49b0a25cb8a3b7b7f3de1d0c043462a96eb0e1a.roa (raw, json)
Hash identifier:          2hY7IJdCRuPDX50ZioKOyeqvksYv/XoVt/c1TT7ij1g=
Subject key identifier:   18:70:6A:42:7F:DB:1B:2D:32:54:75:F3:34:56:AA:8E:5B:AB:55:23
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       23DF
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/a49b0a25cb8a3b7b7f3de1d0c043462a96eb0e1a.roa
Signing time:             Mon 30 Oct 2023 17:18:05 +0000
ROA not before:           Mon 30 Oct 2023 17:18:05 +0000
ROA not after:            Thu 30 Oct 2025 17:18:05 +0000
asID:                     273111
IP address blocks:        200.50.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9183 (0x23df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:18:05 2023 GMT
            Not After : Oct 30 17:18:05 2025 GMT
        Subject: CN=a49b0a25cb8a3b7b7f3de1d0c043462a96eb0e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5b:e3:8a:be:97:22:ca:1c:a3:af:52:61:f9:
                    30:41:b6:83:b2:e3:2a:f1:c4:1e:7c:f0:f5:12:ea:
                    32:a5:d6:5f:f9:bb:9f:71:43:d6:93:79:38:bd:df:
                    8e:44:97:b6:17:8e:16:ed:3e:77:62:04:25:83:59:
                    15:70:36:e0:19:c5:d2:58:13:3a:78:26:3d:23:03:
                    39:49:a9:18:73:d2:21:05:49:2c:cf:95:16:12:57:
                    21:47:76:c3:87:d5:76:c9:8b:d8:33:01:cd:d5:25:
                    67:29:56:bf:f9:6b:e9:98:ed:cc:db:d0:d8:5e:eb:
                    19:0f:84:f0:7d:2e:ad:04:08:60:3d:bd:0b:b5:50:
                    07:5e:d5:58:07:b4:25:d5:75:ff:91:76:5b:0c:a9:
                    b6:11:9e:f6:10:71:94:8c:e1:88:3f:e4:ce:3c:a3:
                    32:26:c7:44:fc:75:14:55:5d:c3:c9:d5:35:a6:22:
                    95:f2:1a:54:86:85:b2:32:96:c2:22:d0:10:02:c4:
                    06:8c:09:fa:73:2d:d3:48:0b:a9:b9:ed:da:37:63:
                    83:ca:33:ae:5d:a2:18:da:b0:96:25:7a:0b:d2:e9:
                    6d:70:c5:8b:82:ce:be:1e:f4:56:8c:62:b3:bc:96:
                    20:9a:0e:b0:be:71:72:cd:fb:6c:25:90:fb:88:77:
                    83:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:70:6A:42:7F:DB:1B:2D:32:54:75:F3:34:56:AA:8E:5B:AB:55:23
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/a49b0a25cb8a3b7b7f3de1d0c043462a96eb0e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:8d:39:2a:ac:14:d6:36:be:99:da:c2:98:d4:5b:a2:d6:
         55:07:60:b6:f6:e7:bb:e2:13:a3:71:e7:36:77:e8:1c:43:d1:
         98:a3:8e:41:bc:f2:f2:ef:10:ee:fd:d3:1b:a6:c8:32:8b:e2:
         e5:13:f3:fd:27:c1:18:e1:56:6f:ec:df:cb:12:cb:29:c1:47:
         5a:74:95:94:88:a1:cb:85:f3:f0:a9:f9:5d:dd:f3:3b:32:0f:
         be:c1:cb:b6:45:b3:c5:a1:f5:64:51:59:b2:e5:53:a7:21:e3:
         28:78:e8:29:5d:48:94:26:89:1b:82:c1:fe:21:5d:65:6a:3c:
         1d:5b:c5:ae:00:ce:c6:b4:3b:94:ed:a7:48:77:6b:2a:50:86:
         cb:5e:33:c1:d9:e6:c4:46:68:2f:a2:4c:d2:5d:a1:5a:4b:83:
         9d:a5:86:fc:88:f9:ff:0d:70:45:bd:65:13:89:61:0d:f5:e2:
         e6:33:db:d6:00:7e:de:be:84:fd:1d:e1:e4:9a:97:0f:a0:24:
         07:52:03:fa:c7:e0:55:a8:95:f4:a1:a3:61:58:4f:5d:e4:49:
         ab:4f:4c:21:af:4e:4b:a9:5c:bd:c9:df:53:da:0b:bf:18:0a:
         e1:1d:74:c0:af:76:e4:49:4e:75:a0:c0:2d:f6:e4:3f:0a:63:
         54:f5:41:08
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICI98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmM2
YTM0MzQ5N2I3YTI2Yzc4YTg2YTE5ZGFmNmMyMDY1YTcyMTgyMjAeFw0yMzEwMzAx
NzE4MDVaFw0yNTEwMzAxNzE4MDVaMDMxMTAvBgNVBAMTKGE0OWIwYTI1Y2I4YTNi
N2I3ZjNkZTFkMGMwNDM0NjJhOTZlYjBlMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4W+OKvpciyhyjr1Jh+TBBtoOy4yrxxB588PUS6jKl1l/5u59x
Q9aTeTi9345El7YXjhbtPndiBCWDWRVwNuAZxdJYEzp4Jj0jAzlJqRhz0iEFSSzP
lRYSVyFHdsOH1XbJi9gzAc3VJWcpVr/5a+mY7czb0Nhe6xkPhPB9Lq0ECGA9vQu1
UAde1VgHtCXVdf+RdlsMqbYRnvYQcZSM4Yg/5M48ozImx0T8dRRVXcPJ1TWmIpXy
GlSGhbIylsIi0BACxAaMCfpzLdNIC6m57do3Y4PKM65dohjasJYlegvS6W1wxYuC
zr4e9FaMYrO8liCaDrC+cXLN+2wlkPuId4NbAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUGHBqQn/bGy0yVHXzNFaqjlurVSMwHwYDVR0jBBgwFoAUlxmiopeL8JjWQI0W
/JUf8B13c+YwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mYzZhMzQz
NDk3YjdhMjZjNzhhODZhMTlkYWY2YzIwNjVhNzIxODIyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85ZTE4NjJhYi03NmI2LTRkNzQtOTdkMS1jYzdlYmNj
ZWY1NDUvYTQ5YjBhMjVjYjhhM2I3YjdmM2RlMWQwYzA0MzQ2MmE5NmViMGUxYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzllMTg2MmFiLTc2YjYtNGQ3NC05N2QxLWNjN2Vi
Y2NlZjU0NS9mYzZhMzQzNDk3YjdhMjZjNzhhODZhMTlkYWY2YzIwNjVhNzIxODIy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQByDKaMA0GCSqGSIb3DQEBCwUAA4IBAQAmPY05KqwU1ja+mdrC
mNRbotZVB2C29ue74hOjcec2d+gcQ9GYo45BvPLy7xDu/dMbpsgyi+LlE/P9J8EY
4VZv7N/LEsspwUdadJWUiKHLhfPwqfld3fM7Mg++wcu2RbPFofVkUVmy5VOnIeMo
eOgpXUiUJokbgsH+IV1lajwdW8WuAM7GtDuU7adId2sqUIbLXjPB2ebERmgvokzS
XaFaS4OdpYb8iPn/DXBFvWUTiWEN9eLmM9vWAH7evoT9HeHkmpcPoCQHUgP6x+BV
qJX0oaNhWE9d5EmrT0whr05LqVy9yd9T2gu/GArhHXTAr3bkSU51oMAt9uQ/CmNU
9UEI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org