Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1b7aab6b6d1e3d5c6eacb4b0233f1efb094cc123.roa
File:                     1b7aab6b6d1e3d5c6eacb4b0233f1efb094cc123.roa (raw, json)
Hash identifier:          9XZnWfRXlibtZGoh708icQKJIxvVGjexFsylKBNMlwA=
Subject key identifier:   CC:81:40:65:FA:97:80:1C:F3:94:10:52:57:C1:AF:68:AF:D5:D5:E6
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       23844A
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1b7aab6b6d1e3d5c6eacb4b0233f1efb094cc123.roa
Signing time:             Thu 14 Sep 2023 20:19:23 +0000
ROA not before:           Wed 13 Sep 2023 20:19:21 +0000
ROA not after:            Sun 14 Sep 2025 20:19:21 +0000
asID:                     198949
IP address blocks:        200.91.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327626 (0x23844a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Sep 13 20:19:21 2023 GMT
            Not After : Sep 14 20:19:21 2025 GMT
        Subject: CN=1b7aab6b6d1e3d5c6eacb4b0233f1efb094cc123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:57:10:f8:d3:9e:95:da:e6:a9:a8:79:8d:
                    4e:65:7d:85:ef:f7:4b:28:ac:94:ac:86:14:47:dd:
                    bb:ba:ba:5b:90:e0:94:48:77:e5:a4:3c:56:a0:bb:
                    3b:67:23:7d:0f:ca:c4:1a:65:66:1f:75:ac:11:ae:
                    26:a8:2f:bb:fd:1c:33:17:b8:a8:73:5c:de:20:7a:
                    01:ba:24:79:a7:5b:80:e3:fd:0f:9a:b4:b7:52:5d:
                    66:aa:eb:74:ef:50:60:fb:ff:41:dd:6c:d8:e8:8f:
                    4e:5b:91:02:8e:ff:b6:85:c8:f0:d1:f7:3f:d0:72:
                    ef:15:11:18:9c:1b:b9:72:59:89:31:c0:52:a8:44:
                    04:aa:ea:31:a9:df:53:85:c3:62:6f:eb:de:b9:33:
                    12:6c:7a:9d:0f:b4:63:b9:20:00:6e:be:4e:8a:b5:
                    9a:eb:69:14:38:4a:78:93:22:fd:0d:2b:66:ba:dd:
                    82:b2:20:b5:bb:51:8d:a3:59:ef:7b:31:32:a5:06:
                    a8:b6:72:72:13:7b:4d:94:4c:48:58:67:f0:13:56:
                    9f:72:07:51:ea:34:5c:c2:db:23:8b:db:8f:3a:0a:
                    33:50:0c:75:7c:47:25:0f:7f:f4:bb:4c:15:b6:c8:
                    38:bf:da:54:60:22:5d:e1:af:35:cc:1a:33:98:48:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:40:65:FA:97:80:1C:F3:94:10:52:57:C1:AF:68:AF:D5:D5:E6
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/1b7aab6b6d1e3d5c6eacb4b0233f1efb094cc123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:06:65:98:e0:7e:c0:0e:19:11:fe:07:a8:81:4d:34:f0:
         59:50:09:7e:54:9a:1c:2d:ee:d9:c2:76:a6:3f:48:4a:1d:84:
         46:84:7a:3d:1f:29:84:09:fd:05:27:f0:08:60:93:cd:37:07:
         d8:9c:22:33:b7:85:c0:bc:2d:20:4a:ad:e8:e5:8c:c3:74:4e:
         86:fe:4e:75:08:fb:d9:6a:52:1e:6a:91:8e:79:3f:09:cf:f5:
         94:77:83:ea:f6:7f:5d:7c:8c:19:a9:c9:95:9f:b0:57:4b:ee:
         71:14:d0:88:1b:a4:00:b0:1f:19:40:98:64:dc:bf:b9:8b:85:
         f4:d3:35:ad:32:85:ab:47:bb:e2:16:9a:b0:1d:0e:90:2f:9f:
         0c:24:df:19:91:74:f1:3c:11:02:c5:0e:c4:bc:4d:2f:4e:4b:
         42:62:5e:6c:7f:6e:fb:a7:ac:d4:f7:fb:0a:f3:74:b2:3d:53:
         09:06:14:00:d2:e1:c6:93:13:18:74:8b:e4:d7:36:5f:67:ad:
         02:6f:95:17:87:9f:c4:07:f5:8e:5b:9c:05:fe:81:96:88:66:
         c7:98:ef:c6:73:26:38:49:5c:d1:8b:03:00:0a:a9:c6:a9:83:
         73:c5:30:ab:ce:b1:b4:27:23:23:05:db:2f:3a:6d:46:ec:58:
         9f:90:77:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI4RKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM3
YzE1ZmFmYTMwYmZjZDc5YmY5OTUxMjYyNTczMTU4ZDk4YTI3NWUwHhcNMjMwOTEz
MjAxOTIxWhcNMjUwOTE0MjAxOTIxWjAzMTEwLwYDVQQDEygxYjdhYWI2YjZkMWUz
ZDVjNmVhY2I0YjAyMzNmMWVmYjA5NGNjMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAng5XEPjTnpXa5qmoeY1OZX2F7/dLKKyUrIYUR927urpbkOCU
SHflpDxWoLs7ZyN9D8rEGmVmH3WsEa4mqC+7/RwzF7ioc1zeIHoBuiR5p1uA4/0P
mrS3Ul1mqut071Bg+/9B3WzY6I9OW5ECjv+2hcjw0fc/0HLvFREYnBu5clmJMcBS
qEQEquoxqd9ThcNib+veuTMSbHqdD7RjuSAAbr5OirWa62kUOEp4kyL9DStmut2C
siC1u1GNo1nvezEypQaotnJyE3tNlExIWGfwE1afcgdR6jRcwtsji9uPOgozUAx1
fEclD3/0u0wVtsg4v9pUYCJd4a81zBozmEiizQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMyBQGX6l4Ac85QQUlfBr2iv1dXmMB8GA1UdIwQYMBaAFKGwewo8koNx/Cou
jrXotarzdPBHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzdjMTVm
YWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI2YTNhY2MtMmE0Yy00ZmJjLWEyYTYtOTUwZmQx
ZTI2NjdkLzFiN2FhYjZiNmQxZTNkNWM2ZWFjYjRiMDIzM2YxZWZiMDk0Y2MxMjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjZhM2FjYy0yYTRjLTRmYmMtYTJhNi05NTBm
ZDFlMjY2N2QvYzdjMTVmYWZhMzBiZmNkNzliZjk5NTEyNjI1NzMxNThkOThhMjc1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhbnjANBgkqhkiG9w0BAQsFAAOCAQEAYT8GZZjgfsAOGRH+
B6iBTTTwWVAJflSaHC3u2cJ2pj9ISh2ERoR6PR8phAn9BSfwCGCTzTcH2JwiM7eF
wLwtIEqt6OWMw3ROhv5OdQj72WpSHmqRjnk/Cc/1lHeD6vZ/XXyMGanJlZ+wV0vu
cRTQiBukALAfGUCYZNy/uYuF9NM1rTKFq0e74haasB0OkC+fDCTfGZF08TwRAsUO
xLxNL05LQmJebH9u+6es1Pf7CvN0sj1TCQYUANLhxpMTGHSL5Nc2X2etAm+VF4ef
xAf1jlucBf6Blohmx5jvxnMmOElc0YsDAAqpxqmDc8Uwq86xtCcjIwXbLzptRuxY
n5B3gQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org