Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/dec06d68b047565e4fab5a7e84922655ad041c7e.roa
File:                     dec06d68b047565e4fab5a7e84922655ad041c7e.roa (raw, json)
Hash identifier:          SoB20sjEQ2qm859HoobLbl+GGhVjaDySfZpv+ruRMak=
Subject key identifier:   7F:2C:AF:7E:19:05:0D:6E:0E:50:3C:46:60:BA:D6:9F:8D:C0:8E:54
Certificate issuer:       /CN=c9f9959a4af7ed016956f8404136fa80a861d193
Certificate serial:       227518
Authority key identifier: ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9f9959a4af7ed016956f8404136fa80a861d193.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/dec06d68b047565e4fab5a7e84922655ad041c7e.roa
Signing time:             Mon 02 Oct 2023 14:04:41 +0000
ROA not before:           Sun 01 Oct 2023 14:04:40 +0000
ROA not after:            Thu 02 Oct 2025 15:04:40 +0000
asID:                     27725
IP address blocks:        200.0.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258200 (0x227518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f9959a4af7ed016956f8404136fa80a861d193
        Validity
            Not Before: Oct  1 14:04:40 2023 GMT
            Not After : Oct  2 15:04:40 2025 GMT
        Subject: CN=dec06d68b047565e4fab5a7e84922655ad041c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:eb:19:be:94:d9:c7:49:97:46:48:23:9e:
                    f0:e1:51:33:68:f4:c2:d9:32:d6:f0:64:c6:b7:42:
                    d6:01:c1:fe:c5:bd:68:4f:00:c0:d5:45:43:53:ae:
                    23:18:42:14:c1:5f:bb:d3:c5:24:ef:a1:17:aa:30:
                    09:bf:c3:55:78:d3:6d:4d:49:4b:c8:f7:28:cf:f6:
                    6b:49:69:c4:6c:91:63:91:88:05:f0:ff:96:29:08:
                    a9:f6:53:dd:88:72:97:be:c3:5e:f6:43:26:72:f5:
                    ff:1d:e3:19:f9:38:d5:b7:5a:8b:9d:86:99:72:58:
                    49:de:79:7e:d8:5a:2b:78:5b:39:d5:a6:d6:0a:4a:
                    ec:4b:11:d4:83:e4:78:6e:d2:77:7b:3b:79:59:c3:
                    38:f7:1b:31:fc:b6:4f:6d:61:d5:3b:c9:85:da:ab:
                    59:eb:62:58:1d:30:e3:8a:a1:be:4b:21:8f:86:2d:
                    3a:30:45:ce:14:99:63:08:ea:55:a3:fa:0c:45:30:
                    10:e5:79:4c:06:7d:e4:be:f1:7c:ed:2b:84:47:16:
                    0c:14:d9:3d:b3:55:2b:20:c1:7c:09:56:b5:b2:01:
                    58:b9:0c:b9:58:d4:45:cc:97:e8:f2:ee:4f:98:ae:
                    8a:3a:1e:98:bd:08:3a:f2:96:a1:a9:3c:06:55:08:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:AF:7E:19:05:0D:6E:0E:50:3C:46:60:BA:D6:9F:8D:C0:8E:54
            X509v3 Authority Key Identifier:
                keyid:ED:B7:A8:9E:B4:8C:3B:84:03:6E:7C:A4:04:2F:3B:62:67:9F:AB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9f9959a4af7ed016956f8404136fa80a861d193.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/dec06d68b047565e4fab5a7e84922655ad041c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cc057650-a151-4a96-beb3-43bd19253c51/c9f9959a4af7ed016956f8404136fa80a861d193.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:bb:15:f4:22:f2:66:30:0b:49:95:4e:4e:70:df:8c:e2:
         45:8a:4d:4e:51:47:3f:c8:f4:e5:6d:1d:54:ee:89:69:82:1d:
         15:a0:49:8a:e4:65:83:0c:f2:08:19:91:d6:7b:42:24:de:0e:
         31:4a:6e:fb:9b:f7:94:64:41:29:4e:4e:8a:e6:73:89:6d:b7:
         a6:b4:40:b6:12:59:83:40:a7:b6:83:6d:bf:6e:e9:7a:cb:93:
         65:d8:62:cb:92:c8:9c:b3:18:75:55:a9:75:70:50:39:bc:0b:
         09:e8:6e:98:06:bf:2d:de:2f:4d:ab:45:f9:c6:46:73:db:8e:
         8c:0d:cd:d0:ba:3f:8f:0d:5c:e1:de:ad:4c:49:78:69:99:95:
         4f:00:75:f1:48:ed:7d:42:95:fd:9e:99:8d:0f:44:aa:73:56:
         f3:e1:99:66:5b:80:f7:94:4a:30:ae:20:d2:2f:65:2a:3f:78:
         43:14:af:24:06:03:53:08:62:7e:45:cc:89:23:7b:bb:7e:d4:
         60:c4:3f:1d:39:7b:4a:8b:15:7f:c7:0a:ce:99:07:ca:3f:ba:
         c9:23:16:63:34:2a:78:3e:60:6d:02:89:01:f1:4f:38:b7:d8:
         38:b9:6d:fc:48:3a:b1:d3:fd:bd:b9:54:ff:a3:75:72:74:89:
         81:33:c0:4f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDInUYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
Zjk5NTlhNGFmN2VkMDE2OTU2Zjg0MDQxMzZmYTgwYTg2MWQxOTMwHhcNMjMxMDAx
MTQwNDQwWhcNMjUxMDAyMTUwNDQwWjAzMTEwLwYDVQQDEyhkZWMwNmQ2OGIwNDc1
NjVlNGZhYjVhN2U4NDkyMjY1NWFkMDQxYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAra7rGb6U2cdJl0ZII57w4VEzaPTC2TLW8GTGt0LWAcH+xb1o
TwDA1UVDU64jGEIUwV+708Uk76EXqjAJv8NVeNNtTUlLyPcoz/ZrSWnEbJFjkYgF
8P+WKQip9lPdiHKXvsNe9kMmcvX/HeMZ+TjVt1qLnYaZclhJ3nl+2ForeFs51abW
CkrsSxHUg+R4btJ3ezt5WcM49xsx/LZPbWHVO8mF2qtZ62JYHTDjiqG+SyGPhi06
MEXOFJljCOpVo/oMRTAQ5XlMBn3kvvF87SuERxYMFNk9s1UrIMF8CVa1sgFYuQy5
WNRFzJfo8u5PmK6KOh6YvQg68pahqTwGVQjHRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH8sr34ZBQ1uDlA8RmC61p+NwI5UMB8GA1UdIwQYMBaAFO23qJ60jDuEA258
pAQvO2Jnn6s1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzlmOTk1
OWE0YWY3ZWQwMTY5NTZmODQwNDEzNmZhODBhODYxZDE5My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2MwNTc2NTAtYTE1MS00YTk2LWJlYjMtNDNiZDE5
MjUzYzUxL2RlYzA2ZDY4YjA0NzU2NWU0ZmFiNWE3ZTg0OTIyNjU1YWQwNDFjN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzA1NzY1MC1hMTUxLTRhOTYtYmViMy00M2Jk
MTkyNTNjNTEvYzlmOTk1OWE0YWY3ZWQwMTY5NTZmODQwNDEzNmZhODBhODYxZDE5
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsgAGDANBgkqhkiG9w0BAQsFAAOCAQEAPR+7FfQi8mYwC0mV
Tk5w34ziRYpNTlFHP8j05W0dVO6JaYIdFaBJiuRlgwzyCBmR1ntCJN4OMUpu+5v3
lGRBKU5OiuZziW23prRAthJZg0CntoNtv27pesuTZdhiy5LInLMYdVWpdXBQObwL
CehumAa/Ld4vTatF+cZGc9uOjA3N0Lo/jw1c4d6tTEl4aZmVTwB18UjtfUKV/Z6Z
jQ9EqnNW8+GZZluA95RKMK4g0i9lKj94QxSvJAYDUwhifkXMiSN7u37UYMQ/HTl7
SosVf8cKzpkHyj+6ySMWYzQqeD5gbQKJAfFPOLfYOLlt/Eg6sdP9vblU/6N1cnSJ
gTPATw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org