Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0b92ba2e35b5e266a567434887cd4d1268c198a7.roa
File:                     0b92ba2e35b5e266a567434887cd4d1268c198a7.roa (raw, json)
Hash identifier:          9VerpkbYu144DaRfGtdygY+lDc5XBXIytuGhFcP/6cE=
Subject key identifier:   93:61:45:D0:79:8A:74:74:DE:C3:32:7C:29:70:C9:DD:7F:58:E8:31
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A054F
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0b92ba2e35b5e266a567434887cd4d1268c198a7.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     13440
IP address blocks:        200.33.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656719 (0xa054f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=0b92ba2e35b5e266a567434887cd4d1268c198a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:04:7d:86:16:55:b7:58:e5:52:0b:4f:d8:
                    2a:81:92:73:aa:16:ea:1a:29:87:d3:f0:29:90:02:
                    c6:22:3b:c0:69:0e:8d:6c:ba:08:f5:34:d4:52:f1:
                    db:39:df:d1:b7:3c:3e:9b:d6:f2:65:52:71:cc:a0:
                    c8:e1:bd:11:7f:eb:28:3a:24:4a:e1:52:58:f2:8c:
                    b1:a4:e1:90:de:d0:0c:c4:72:10:08:4f:fe:a5:c9:
                    bf:9e:93:be:70:72:ed:a1:3e:9e:50:0d:d9:d3:a1:
                    74:24:e4:ad:6d:29:8c:84:d3:7a:f5:4b:9e:6a:78:
                    61:ef:eb:43:f1:e9:3a:44:79:a3:4e:00:70:e9:4d:
                    eb:66:87:4b:f2:e4:fa:c4:11:f4:ef:aa:20:25:85:
                    40:79:ae:61:d2:dc:1a:5d:6e:f2:e2:b7:a8:3f:28:
                    28:93:f4:29:26:70:37:6c:b1:5a:c0:7b:15:33:22:
                    95:70:b7:76:83:d3:53:86:cf:06:fb:7f:7b:06:a5:
                    c9:20:6b:42:82:6c:21:70:d2:f0:64:c8:a5:71:47:
                    b1:51:c2:07:47:41:82:79:19:de:a1:c3:47:03:81:
                    22:5d:70:b3:48:ee:e6:2c:39:1e:89:bd:b5:05:2b:
                    43:ae:9d:f5:e0:64:4f:de:57:1f:36:d7:1a:54:58:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:45:D0:79:8A:74:74:DE:C3:32:7C:29:70:C9:DD:7F:58:E8:31
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/0b92ba2e35b5e266a567434887cd4d1268c198a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:4b:20:31:84:b0:3b:85:f5:68:8d:aa:f6:0d:0a:2f:3f:
         c0:43:c8:98:20:d1:ef:cb:5b:7e:da:99:fc:9d:48:23:9a:14:
         05:49:07:0e:28:95:09:77:5c:b3:62:3a:05:f4:1d:de:a3:71:
         36:d6:8d:10:46:8d:e0:15:1a:a2:ca:e2:00:7a:85:9b:6d:60:
         9b:bd:6b:e6:ef:c7:0e:0c:a0:cb:0f:58:c4:fd:2c:6b:85:f5:
         be:00:44:48:f8:3f:3d:a5:e4:62:0a:66:dd:52:a7:42:d1:76:
         f9:09:f4:8a:23:98:0a:de:8f:f9:7e:fb:0e:d2:1f:93:d0:a4:
         5d:0f:f1:0e:ce:c1:a1:40:f2:87:26:3b:03:76:21:cc:fe:7b:
         62:c0:19:c4:68:9e:d1:98:5b:fe:b7:35:32:a0:e8:de:53:bb:
         15:3c:41:c1:18:66:45:78:35:b8:f9:33:c7:a3:a3:01:17:65:
         ed:4b:6f:34:4a:75:82:f7:4d:da:ef:32:49:16:2c:b9:b3:d6:
         a7:fe:16:e9:dc:ae:37:75:be:32:69:30:25:fd:1f:2c:58:da:
         29:38:16:2a:bb:35:a0:3d:0b:03:7a:f4:50:55:f5:3a:c8:f3:
         9e:27:63:9e:f7:53:32:9a:0d:09:bf:bb:37:cd:a7:4b:02:61:
         2a:45:60:3b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCgVPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjEwMzI0
MTQ0MzE2WhcNMjYwMzI0MTQ0MzE2WjAzMTEwLwYDVQQDEygwYjkyYmEyZTM1YjVl
MjY2YTU2NzQzNDg4N2NkNGQxMjY4YzE5OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgRwEfYYWVbdY5VILT9gqgZJzqhbqGimH0/ApkALGIjvAaQ6N
bLoI9TTUUvHbOd/Rtzw+m9byZVJxzKDI4b0Rf+soOiRK4VJY8oyxpOGQ3tAMxHIQ
CE/+pcm/npO+cHLtoT6eUA3Z06F0JOStbSmMhNN69Uueanhh7+tD8ek6RHmjTgBw
6U3rZodL8uT6xBH076ogJYVAea5h0twaXW7y4reoPygok/QpJnA3bLFawHsVMyKV
cLd2g9NThs8G+397BqXJIGtCgmwhcNLwZMilcUexUcIHR0GCeRneocNHA4EiXXCz
SO7mLDkeib21BStDrp314GRP3lcfNtcaVFiITwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJNhRdB5inR03sMyfClwyd1/WOgxMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5LzBiOTJiYTJlMzViNWUyNjZhNTY3NDM0ODg3Y2Q0ZDEyNjhjMTk4YTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMghVDANBgkqhkiG9w0BAQsFAAOCAQEAKwxLIDGEsDuF9WiN
qvYNCi8/wEPImCDR78tbftqZ/J1II5oUBUkHDiiVCXdcs2I6BfQd3qNxNtaNEEaN
4BUaosriAHqFm21gm71r5u/HDgygyw9YxP0sa4X1vgBESPg/PaXkYgpm3VKnQtF2
+Qn0iiOYCt6P+X77DtIfk9CkXQ/xDs7BoUDyhyY7A3YhzP57YsAZxGie0Zhb/rc1
MqDo3lO7FTxBwRhmRXg1uPkzx6OjARdl7UtvNEp1gvdN2u8ySRYsubPWp/4W6dyu
N3W+MmkwJf0fLFjaKTgWKrs1oD0LA3r0UFX1OsjznidjnvdTMpoNCb+7N82nSwJh
KkVgOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org