Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/30cfe3957b9ec5b3fe9f8c173b78aadd93ef5341.roa
File:                     30cfe3957b9ec5b3fe9f8c173b78aadd93ef5341.roa (raw, json)
Hash identifier:          ioQkU5msesDsHkiRbjAPQxY3cymiUlYgx5xKu/hfFX0=
Subject key identifier:   E8:C0:59:6C:C6:65:29:8B:27:04:07:B6:03:F7:AB:2F:88:95:D9:11
Certificate issuer:       /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial:       22C38A
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/30cfe3957b9ec5b3fe9f8c173b78aadd93ef5341.roa
Signing time:             Thu 17 Aug 2023 02:08:32 +0000
ROA not before:           Wed 16 Aug 2023 02:08:32 +0000
ROA not after:            Sun 17 Aug 2025 02:08:32 +0000
asID:                     272036
IP address blocks:        200.12.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278282 (0x22c38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
        Validity
            Not Before: Aug 16 02:08:32 2023 GMT
            Not After : Aug 17 02:08:32 2025 GMT
        Subject: CN=30cfe3957b9ec5b3fe9f8c173b78aadd93ef5341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:e1:6d:12:1f:50:ac:9e:0f:44:17:6f:3f:
                    48:b5:45:b5:e8:5b:42:c1:c4:7f:34:02:2d:9c:f1:
                    42:bd:49:34:b5:a4:2f:f1:48:7c:43:3d:f9:2c:5d:
                    22:3d:de:07:3b:53:07:5d:0a:a1:05:0e:55:41:62:
                    68:2b:04:30:a8:2a:53:c9:be:42:38:35:ec:0c:ea:
                    54:25:30:f1:b1:6f:34:33:86:d7:50:a9:63:d4:b3:
                    11:5a:85:1f:0b:8d:65:bc:c2:6b:f6:cc:11:d7:41:
                    6d:fc:6b:f4:a7:dc:58:28:ee:19:42:f8:e8:0b:55:
                    4b:da:ef:93:4e:ba:c1:99:1c:84:4f:db:59:c6:0f:
                    0c:2d:b6:95:95:be:dd:42:d0:69:1d:b8:09:0c:a8:
                    84:55:42:22:e0:59:8d:0e:16:ef:1e:ef:2e:f6:bf:
                    07:ed:20:86:7e:4f:5e:be:37:d9:2e:3e:71:e3:14:
                    f7:1a:f3:68:4a:43:58:b9:06:a6:a7:0e:4e:28:05:
                    e5:10:6e:a2:c0:5f:0a:af:b9:21:90:ea:db:b1:5e:
                    34:b6:8b:d9:ba:c4:7a:77:11:52:29:f8:08:68:7d:
                    83:8c:fe:17:8f:87:45:cb:35:9f:28:0c:02:c0:9f:
                    25:79:f6:09:8b:75:df:90:da:94:01:c9:d7:d9:b8:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:59:6C:C6:65:29:8B:27:04:07:B6:03:F7:AB:2F:88:95:D9:11
            X509v3 Authority Key Identifier:
                keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/30cfe3957b9ec5b3fe9f8c173b78aadd93ef5341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:56:21:8b:7c:7d:22:c2:17:48:80:26:00:c3:f4:67:4a:
         29:b1:60:33:21:e5:f8:eb:9f:8b:24:d3:57:15:62:39:ef:45:
         b3:cc:eb:35:a3:81:a6:7a:78:27:25:e3:f2:ef:5b:f2:47:ed:
         0d:f8:1c:e5:28:49:f5:22:b0:1d:fd:19:03:09:90:5c:fd:ad:
         8a:dd:7b:a5:53:58:d7:c5:01:9f:0e:25:cf:8b:19:aa:88:94:
         c2:9a:e6:4c:a1:24:18:bc:26:95:72:c4:9c:9d:9b:f9:8a:1d:
         c7:d6:9d:f0:3b:59:d8:b2:10:7f:6b:4f:25:15:11:d8:af:11:
         17:fd:32:5e:ff:2e:ab:81:17:bd:1f:13:42:41:c4:c6:b9:4a:
         1c:ca:05:b8:59:92:3d:a0:18:20:1a:12:52:ed:db:67:02:db:
         e8:a4:fc:f5:6a:f4:7d:b4:e4:d9:ce:0f:ba:4e:4f:49:4f:57:
         a9:0e:41:0e:6a:f0:71:3d:29:92:0b:9b:42:f5:03:da:6a:a4:
         4b:9c:fe:95:33:54:49:ef:11:57:57:02:a6:9c:43:c3:b8:6b:
         aa:28:4a:0f:7e:45:e7:0e:4d:87:ec:63:bf:92:33:4b:25:32:
         6d:03:47:47:5e:2e:d2:98:aa:a9:b0:c4:3d:a2:09:b8:a7:8a:
         72:ca:5b:bc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIsOKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRk
NjUxNGQ4OTk0OGU2ZDQxOTg4YjYwYzEyMjg3NjVhMjRmZDc1MzYwHhcNMjMwODE2
MDIwODMyWhcNMjUwODE3MDIwODMyWjAzMTEwLwYDVQQDEygzMGNmZTM5NTdiOWVj
NWIzZmU5ZjhjMTczYjc4YWFkZDkzZWY1MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj1DhbRIfUKyeD0QXbz9ItUW16FtCwcR/NAItnPFCvUk0taQv
8Uh8Qz35LF0iPd4HO1MHXQqhBQ5VQWJoKwQwqCpTyb5CODXsDOpUJTDxsW80M4bX
UKlj1LMRWoUfC41lvMJr9swR10Ft/Gv0p9xYKO4ZQvjoC1VL2u+TTrrBmRyET9tZ
xg8MLbaVlb7dQtBpHbgJDKiEVUIi4FmNDhbvHu8u9r8H7SCGfk9evjfZLj5x4xT3
GvNoSkNYuQampw5OKAXlEG6iwF8Kr7khkOrbsV40tovZusR6dxFSKfgIaH2DjP4X
j4dFyzWfKAwCwJ8lefYJi3XfkNqUAcnX2bjtrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOjAWWzGZSmLJwQHtgP3qy+IldkRMB8GA1UdIwQYMBaAFLvMThKAHApZs7+j
7pqyKKvzM9B9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGQ2NTE0
ZDg5OTQ4ZTZkNDE5ODhiNjBjMTIyODc2NWEyNGZkNzUzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDE4YmExMzgtZmVhOS00OWExLWI0Y2YtMmY5OTg4
YWNlMWM4LzMwY2ZlMzk1N2I5ZWM1YjNmZTlmOGMxNzNiNzhhYWRkOTNlZjUzNDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMThiYTEzOC1mZWE5LTQ5YTEtYjRjZi0yZjk5
ODhhY2UxYzgvNGQ2NTE0ZDg5OTQ4ZTZkNDE5ODhiNjBjMTIyODc2NWEyNGZkNzUz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgM+TANBgkqhkiG9w0BAQsFAAOCAQEASaBWIYt8fSLCF0iA
JgDD9GdKKbFgMyHl+OufiyTTVxViOe9Fs8zrNaOBpnp4JyXj8u9b8kftDfgc5ShJ
9SKwHf0ZAwmQXP2tit17pVNY18UBnw4lz4sZqoiUwprmTKEkGLwmlXLEnJ2b+Yod
x9ad8DtZ2LIQf2tPJRUR2K8RF/0yXv8uq4EXvR8TQkHExrlKHMoFuFmSPaAYIBoS
Uu3bZwLb6KT89Wr0fbTk2c4Puk5PSU9XqQ5BDmrwcT0pkgubQvUD2mqkS5z+lTNU
Se8RV1cCppxDw7hrqihKD35F5w5Nh+xjv5IzSyUybQNHR14u0piqqbDEPaIJuKeK
cspbvA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org