Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/260e3d3c8e4cf080c7de53fa0480660220a5844e.roa
File:                     260e3d3c8e4cf080c7de53fa0480660220a5844e.roa (raw, json)
Hash identifier:          FAlfnbQByjlbCBowqIbDm2UIDtzKqm5MhVvgikPkhQw=
Subject key identifier:   58:6E:68:83:E5:66:E9:0F:9C:A3:74:FE:3C:98:CD:D2:9D:2C:7E:34
Certificate issuer:       /CN=be397152a75956fca76ee04ce9c8bda3b156244d
Certificate serial:       2373E7
Authority key identifier: 9D:6B:B7:07:44:26:0A:61:E0:4E:52:9C:A4:B3:E2:6C:A3:86:46:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be397152a75956fca76ee04ce9c8bda3b156244d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/260e3d3c8e4cf080c7de53fa0480660220a5844e.roa
Signing time:             Thu 24 Aug 2023 04:44:50 +0000
ROA not before:           Wed 23 Aug 2023 04:44:50 +0000
ROA not after:            Sun 24 Aug 2025 04:44:50 +0000
asID:                     27810
IP address blocks:        200.14.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323431 (0x2373e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be397152a75956fca76ee04ce9c8bda3b156244d
        Validity
            Not Before: Aug 23 04:44:50 2023 GMT
            Not After : Aug 24 04:44:50 2025 GMT
        Subject: CN=260e3d3c8e4cf080c7de53fa0480660220a5844e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:f9:e7:8a:7b:08:e8:b7:6c:34:d5:f0:a8:
                    6f:4e:16:d6:64:5d:75:00:b8:dd:61:fd:83:ef:09:
                    63:9e:db:5c:71:5a:5f:d9:15:d7:99:95:3a:bb:b5:
                    2e:63:24:ec:8e:47:66:4a:96:32:0a:44:4a:3e:f2:
                    67:7b:94:3d:ca:d1:24:47:59:c1:ff:f0:1b:a9:05:
                    1b:43:b7:c2:e5:9b:da:39:46:ce:81:f7:24:0b:31:
                    11:d7:b1:a9:35:50:0d:30:c3:40:33:cd:60:5a:3f:
                    3a:90:6d:59:ca:e2:56:bc:ab:78:3c:50:10:03:6d:
                    e6:6d:e6:3b:a3:3a:57:f6:9d:c9:9d:49:42:3e:c1:
                    2b:e8:03:33:e8:98:29:ea:ce:b8:1c:00:cc:bd:82:
                    e9:e2:11:0f:5a:8b:0d:f1:91:0d:57:21:98:ea:89:
                    4e:e1:e9:17:83:1f:d2:14:57:67:99:0f:84:bb:06:
                    1b:e9:93:a8:12:35:b3:a5:96:98:22:1f:7e:e5:3f:
                    e6:a7:b6:fd:5a:f2:81:df:c6:1d:0c:94:9a:ad:71:
                    a9:57:39:1c:1e:a3:26:d3:09:6e:c5:59:35:a8:17:
                    2f:66:1f:16:f4:c7:0c:e8:21:ee:77:01:00:12:e6:
                    e5:a0:51:c4:33:83:ae:ba:f7:37:a4:fa:5d:c4:e4:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6E:68:83:E5:66:E9:0F:9C:A3:74:FE:3C:98:CD:D2:9D:2C:7E:34
            X509v3 Authority Key Identifier:
                keyid:9D:6B:B7:07:44:26:0A:61:E0:4E:52:9C:A4:B3:E2:6C:A3:86:46:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be397152a75956fca76ee04ce9c8bda3b156244d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/260e3d3c8e4cf080c7de53fa0480660220a5844e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/be397152a75956fca76ee04ce9c8bda3b156244d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:df:d5:b9:ff:88:bb:52:7d:99:8c:9a:1b:81:ac:3e:ac:
         29:a7:2e:3a:0a:25:1f:b6:76:eb:95:4e:89:8c:45:1e:fd:72:
         ff:8a:83:53:e2:c2:d3:94:36:03:07:7c:a4:02:b3:f8:08:2c:
         99:13:5b:5c:65:e1:ce:c3:3c:be:7f:9f:20:c0:da:6c:38:7c:
         55:66:2c:f6:5f:e9:84:26:fa:31:5a:e0:ad:f4:a8:3e:af:53:
         da:5f:9e:71:47:5a:e0:f0:c0:77:a9:ba:e1:7b:43:47:88:fd:
         66:15:32:2e:06:92:c4:6c:a3:19:fe:72:c9:65:a8:2c:02:82:
         d2:aa:d1:43:ac:dc:b9:4b:89:1c:d2:81:49:cf:d6:21:58:61:
         48:95:65:83:5c:db:24:0b:39:f2:cf:f7:70:8c:d5:8d:6b:04:
         b5:f2:f8:8d:d4:bd:6d:28:15:fd:da:88:e7:9f:5a:2a:20:89:
         74:ef:a2:f7:19:c4:02:6d:30:64:ff:80:d7:7e:73:05:7f:5b:
         6e:66:c5:4b:c4:5e:ce:32:8d:a4:fa:2e:9d:ee:ef:bb:0e:10:
         2e:41:ea:2d:0d:1d:77:08:e7:80:f0:48:62:df:9c:8a:35:74:
         b1:1f:13:c6:07:bd:4e:4a:c7:00:8e:de:74:48:37:f5:36:48:
         5e:1d:11:af
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI3PnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
Mzk3MTUyYTc1OTU2ZmNhNzZlZTA0Y2U5YzhiZGEzYjE1NjI0NGQwHhcNMjMwODIz
MDQ0NDUwWhcNMjUwODI0MDQ0NDUwWjAzMTEwLwYDVQQDEygyNjBlM2QzYzhlNGNm
MDgwYzdkZTUzZmEwNDgwNjYwMjIwYTU4NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnPn554p7COi3bDTV8KhvThbWZF11ALjdYf2D7wljnttccVpf
2RXXmZU6u7UuYyTsjkdmSpYyCkRKPvJne5Q9ytEkR1nB//AbqQUbQ7fC5ZvaOUbO
gfckCzER17GpNVANMMNAM81gWj86kG1ZyuJWvKt4PFAQA23mbeY7ozpX9p3JnUlC
PsEr6AMz6Jgp6s64HADMvYLp4hEPWosN8ZENVyGY6olO4ekXgx/SFFdnmQ+EuwYb
6ZOoEjWzpZaYIh9+5T/mp7b9WvKB38YdDJSarXGpVzkcHqMm0wluxVk1qBcvZh8W
9McM6CHudwEAEubloFHEM4Ouuvc3pPpdxOSwPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFhuaIPlZukPnKN0/jyYzdKdLH40MB8GA1UdIwQYMBaAFJ1rtwdEJgph4E5S
nKSz4myjhkYaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmUzOTcx
NTJhNzU5NTZmY2E3NmVlMDRjZTljOGJkYTNiMTU2MjQ0ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2I3NjU1ZmQtNzk2NC00NDliLWJiZGQtYTNmYjVi
YmE2MjY2LzI2MGUzZDNjOGU0Y2YwODBjN2RlNTNmYTA0ODA2NjAyMjBhNTg0NGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYjc2NTVmZC03OTY0LTQ0OWItYmJkZC1hM2Zi
NWJiYTYyNjYvYmUzOTcxNTJhNzU5NTZmY2E3NmVlMDRjZTljOGJkYTNiMTU2MjQ0
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8gOKDANBgkqhkiG9w0BAQsFAAOCAQEAS6jf1bn/iLtSfZmM
mhuBrD6sKacuOgolH7Z265VOiYxFHv1y/4qDU+LC05Q2Awd8pAKz+AgsmRNbXGXh
zsM8vn+fIMDabDh8VWYs9l/phCb6MVrgrfSoPq9T2l+ecUda4PDAd6m64XtDR4j9
ZhUyLgaSxGyjGf5yyWWoLAKC0qrRQ6zcuUuJHNKBSc/WIVhhSJVlg1zbJAs58s/3
cIzVjWsEtfL4jdS9bSgV/dqI559aKiCJdO+i9xnEAm0wZP+A135zBX9bbmbFS8Re
zjKNpPoune7vuw4QLkHqLQ0ddwjngPBIYt+cijV0sR8Txge9TkrHAI7edEg39TZI
Xh0Rrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org