Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d2562cffef34104aaea5e7ef360e2f69eae5c632.roa
File:                     d2562cffef34104aaea5e7ef360e2f69eae5c632.roa (raw, json)
Hash identifier:          M3NE3ZL6wnikVde6iuMtJmAYDgzdMWGEKHjCEqE0a38=
Subject key identifier:   7F:D4:81:40:C2:70:8C:1A:FD:1B:C4:D6:45:2C:00:1F:7D:04:D1:53
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       0557B0
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d2562cffef34104aaea5e7ef360e2f69eae5c632.roa
Signing time:             Sun 13 Mar 2022 16:34:56 +0000
ROA not before:           Fri 03 Dec 2021 03:00:00 +0000
ROA not after:            Sun 03 Dec 2023 03:00:00 +0000
asID:                     206446
IP address blocks:        200.26.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350128 (0x557b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Dec  3 03:00:00 2021 GMT
            Not After : Dec  3 03:00:00 2023 GMT
        Subject: CN=d2562cffef34104aaea5e7ef360e2f69eae5c632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:23:06:26:af:ac:9e:ff:6a:0e:85:a6:8e:
                    e5:ea:e3:5e:62:c9:8d:54:5c:c1:25:fb:ba:e6:09:
                    35:1a:9e:fa:7c:9b:b2:6d:d2:49:3b:ca:5b:35:ba:
                    4f:29:84:c9:9e:98:df:d7:a1:cf:6c:69:1a:94:eb:
                    9d:52:73:66:2e:44:f2:34:a2:c7:1b:e0:8c:ed:51:
                    85:5d:b9:1e:13:83:b7:5d:07:10:ce:ab:86:f9:cc:
                    a8:77:db:55:d5:84:31:c0:7e:d4:55:4b:bb:18:be:
                    4a:e6:2b:59:39:f7:99:6a:ce:2e:fa:08:a3:71:05:
                    b0:d3:0b:80:84:f7:9a:73:d6:40:27:31:60:20:78:
                    84:da:2d:83:64:45:b3:f9:2c:12:63:67:eb:5e:6a:
                    61:b8:02:22:69:a6:46:a4:11:41:d2:f6:91:0b:76:
                    b4:29:af:c3:1f:c1:a9:33:78:5c:c1:ea:3d:42:45:
                    d7:ed:43:fd:78:5b:97:62:b1:26:d4:b5:44:5d:86:
                    0e:71:a5:29:c2:b1:7f:9a:4c:6f:af:7e:e6:0f:5e:
                    82:72:5a:ab:1e:cd:3d:59:6d:5b:3f:68:72:35:4f:
                    bf:5a:d0:0f:8c:58:e7:c0:ec:83:bb:fb:6e:31:a6:
                    f8:7f:0f:95:f2:fa:5b:d1:e5:d3:37:4e:aa:cf:9e:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:81:40:C2:70:8C:1A:FD:1B:C4:D6:45:2C:00:1F:7D:04:D1:53
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d2562cffef34104aaea5e7ef360e2f69eae5c632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:1e:72:89:ac:07:e3:96:b9:9d:18:32:28:a0:16:32:4d:
         df:39:63:f5:37:37:e2:82:1c:27:b0:4a:c5:78:8e:27:84:6b:
         50:b4:af:88:ef:71:5c:d5:5e:04:0a:36:93:72:17:93:3d:ba:
         5e:a8:53:86:f0:06:a5:34:d5:8a:5f:17:6d:6c:a6:60:6b:b8:
         93:99:d6:cb:13:60:b3:8a:7e:3c:75:47:9d:cc:2f:c8:a3:9b:
         09:6d:4e:0b:a4:d7:7c:fd:f7:61:3f:8d:d6:c2:dd:8e:e1:41:
         3c:20:71:d7:b1:71:a3:57:77:11:61:59:af:22:4b:37:58:9b:
         01:29:92:4e:38:15:b9:2e:20:11:87:7f:29:f9:ba:bd:34:be:
         54:36:3a:5f:13:97:a3:1e:79:c3:02:c7:c6:50:23:bb:58:8c:
         62:f9:14:bf:e8:c8:57:21:1e:22:0a:73:9e:4f:5c:88:3e:3c:
         3b:f1:9d:ef:79:66:e7:8a:f3:ae:8f:ff:ef:70:d8:f0:e6:5f:
         2e:3f:f3:93:9c:d4:4c:ca:a2:6d:94:be:de:77:4c:ed:88:91:
         8f:8b:34:3b:0b:c4:10:3f:e7:ae:46:72:de:85:63:f5:96:9a:
         ec:7a:7b:39:2d:49:13:c9:6d:31:ab:98:ae:d4:e3:2d:37:9c:
         38:ae:67:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBVewMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
OGM5NDQ3NzFkMjNiYjg5OWVkMDdkMTcxMjExYmFhZjBjOWU5N2UwHhcNMjExMjAz
MDMwMDAwWhcNMjMxMjAzMDMwMDAwWjAzMTEwLwYDVQQDEyhkMjU2MmNmZmVmMzQx
MDRhYWVhNWU3ZWYzNjBlMmY2OWVhZTVjNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuwUjBiavrJ7/ag6Fpo7l6uNeYsmNVFzBJfu65gk1Gp76fJuy
bdJJO8pbNbpPKYTJnpjf16HPbGkalOudUnNmLkTyNKLHG+CM7VGFXbkeE4O3XQcQ
zquG+cyod9tV1YQxwH7UVUu7GL5K5itZOfeZas4u+gijcQWw0wuAhPeac9ZAJzFg
IHiE2i2DZEWz+SwSY2frXmphuAIiaaZGpBFB0vaRC3a0Ka/DH8GpM3hcweo9QkXX
7UP9eFuXYrEm1LVEXYYOcaUpwrF/mkxvr37mD16CclqrHs09WW1bP2hyNU+/WtAP
jFjnwOyDu/tuMab4fw+V8vpb0eXTN06qz55+VQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH/UgUDCcIwa/RvE1kUsAB99BNFTMB8GA1UdIwQYMBaAFOC3pzxFtXZjUxgw
K5D9v0UWSl4ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjQ4Yzk0
NDc3MWQyM2JiODk5ZWQwN2QxNzEyMTFiYWFmMGM5ZTk3ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjcxMjMwY2UtYTk1MC00YTBiLWI4Y2QtMGY0Y2Q4
ZWIzMjE5L2QyNTYyY2ZmZWYzNDEwNGFhZWE1ZTdlZjM2MGUyZjY5ZWFlNWM2MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNzEyMzBjZS1hOTUwLTRhMGItYjhjZC0wZjRj
ZDhlYjMyMTkvYjQ4Yzk0NDc3MWQyM2JiODk5ZWQwN2QxNzEyMTFiYWFmMGM5ZTk3
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgauzANBgkqhkiG9w0BAQsFAAOCAQEAhSsecomsB+OWuZ0Y
MiigFjJN3zlj9Tc34oIcJ7BKxXiOJ4RrULSviO9xXNVeBAo2k3IXkz26XqhThvAG
pTTVil8XbWymYGu4k5nWyxNgs4p+PHVHncwvyKObCW1OC6TXfP33YT+N1sLdjuFB
PCBx17Fxo1d3EWFZryJLN1ibASmSTjgVuS4gEYd/Kfm6vTS+VDY6XxOXox55wwLH
xlAju1iMYvkUv+jIVyEeIgpznk9ciD48O/Gd73lm54rzro//73DY8OZfLj/zk5zU
TMqibZS+3ndM7YiRj4s0OwvEED/nrkZy3oVj9Zaa7Hp7OS1JE8ltMauYrtTjLTec
OK5now==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org