Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/276dc5d6c79a2d8fd064c708d5c366dcb64ded0c.roa
File:                     276dc5d6c79a2d8fd064c708d5c366dcb64ded0c.roa (raw, json)
Hash identifier:          BYriVy6gU8de5HvLwc6PGOPIyBCZzOgi4TVsusszHhs=
Subject key identifier:   B5:D4:C8:A2:E7:6C:9D:9A:1E:1D:8B:D7:D4:51:B2:EE:37:43:55:BB
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02D159
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/276dc5d6c79a2d8fd064c708d5c366dcb64ded0c.roa
Signing time:             Wed 12 Jul 2023 15:30:06 +0000
ROA not before:           Tue 11 Jul 2023 15:30:06 +0000
ROA not after:            Sat 12 Jul 2025 15:30:06 +0000
asID:                     16629
IP address blocks:        200.113.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184665 (0x2d159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:30:06 2023 GMT
            Not After : Jul 12 15:30:06 2025 GMT
        Subject: CN=276dc5d6c79a2d8fd064c708d5c366dcb64ded0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:44:f3:9c:41:6d:2a:ba:ce:0f:b8:8b:d1:
                    26:9b:9a:7b:9d:82:cb:a4:0d:98:94:b7:15:2b:11:
                    a0:58:93:43:9a:43:1a:fd:02:60:75:f7:fa:c2:b1:
                    67:b7:0c:05:d4:5d:ca:53:76:2d:bc:5d:3c:9a:5d:
                    1e:2a:b5:9a:2a:92:54:73:27:96:c2:0b:da:7e:91:
                    0d:9e:83:8f:eb:fc:8a:48:07:36:07:de:9c:4c:16:
                    6c:c3:72:41:14:d7:16:3d:b9:da:75:83:ab:46:3a:
                    d4:87:3a:ed:48:ac:5c:a5:cc:61:d0:b6:9a:86:aa:
                    2d:9b:9a:01:8d:d0:4f:37:d5:1f:2b:03:4e:8f:84:
                    32:15:50:8e:10:b2:0e:6f:f8:b2:83:ba:de:4f:1d:
                    b2:73:11:b9:60:34:9e:c2:6f:2e:9c:0b:6e:cf:74:
                    e6:0f:6b:ed:f4:63:6e:a8:5c:e2:8e:cd:96:3a:02:
                    d3:7d:27:fd:cc:12:e9:c3:4e:5f:12:33:fa:e4:0f:
                    3d:d9:7d:fe:17:99:a3:d7:58:9c:65:7f:44:c4:ff:
                    72:a7:cd:c6:4e:97:c4:60:75:91:1f:8c:15:46:2d:
                    c3:c2:1c:da:a0:15:42:01:c2:44:59:d7:57:73:a5:
                    2f:85:48:3b:34:3f:fc:1d:6c:02:6a:8f:7f:68:f2:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D4:C8:A2:E7:6C:9D:9A:1E:1D:8B:D7:D4:51:B2:EE:37:43:55:BB
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/276dc5d6c79a2d8fd064c708d5c366dcb64ded0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:f5:ad:62:61:44:5e:c2:dd:e6:40:cb:bd:10:6a:26:4e:
         15:58:85:29:7a:75:66:dc:29:27:55:60:7c:85:cc:70:55:17:
         53:a8:06:a3:30:f9:49:1b:f4:8f:b8:37:47:a6:9c:cf:c1:d4:
         d6:9e:1e:b1:3f:2e:4f:d9:41:56:a4:f7:2f:ed:cb:b5:e9:a8:
         ee:9b:79:3b:6a:ad:fd:4b:8c:14:ad:8b:3d:3b:dc:e0:cc:8e:
         dc:ac:70:bc:97:d7:13:0e:3b:41:aa:fb:88:bd:45:f1:e3:b0:
         63:d0:b4:8c:e8:33:36:c4:c8:b4:6e:96:99:32:91:ec:65:ea:
         a8:03:43:19:26:26:e8:39:01:b0:93:74:f2:8c:fb:f0:2b:0c:
         60:05:e5:b9:49:e0:af:f8:4a:6e:62:bd:5e:8b:a0:0e:0b:13:
         f9:bb:f9:cf:91:84:a9:69:7c:22:5d:4e:4e:90:1f:ac:01:79:
         d4:81:42:6b:41:d4:82:21:f9:b3:2b:d1:d8:9e:cb:48:47:da:
         49:ec:26:61:e8:18:fd:c4:fd:bb:4f:c4:31:0d:24:a5:48:1c:
         83:72:cf:02:27:31:07:ce:4f:d3:8e:f1:1d:aa:e0:e1:49:07:
         bf:3c:f0:0b:17:71:92:be:a9:ff:2d:d9:0e:bf:74:b7:7b:fb:
         da:fd:01:ea
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAtFZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEx
MTUzMDA2WhcNMjUwNzEyMTUzMDA2WjAzMTEwLwYDVQQDEygyNzZkYzVkNmM3OWEy
ZDhmZDA2NGM3MDhkNWMzNjZkY2I2NGRlZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtkJE85xBbSq6zg+4i9Emm5p7nYLLpA2YlLcVKxGgWJNDmkMa
/QJgdff6wrFntwwF1F3KU3YtvF08ml0eKrWaKpJUcyeWwgvafpENnoOP6/yKSAc2
B96cTBZsw3JBFNcWPbnadYOrRjrUhzrtSKxcpcxh0Laahqotm5oBjdBPN9UfKwNO
j4QyFVCOELIOb/iyg7reTx2ycxG5YDSewm8unAtuz3TmD2vt9GNuqFzijs2WOgLT
fSf9zBLpw05fEjP65A892X3+F5mj11icZX9ExP9yp83GTpfEYHWRH4wVRi3Dwhza
oBVCAcJEWddXc6UvhUg7ND/8HWwCao9/aPLijwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLXUyKLnbJ2aHh2L19RRsu43Q1W7MB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzI3NmRjNWQ2Yzc5YTJkOGZkMDY0YzcwOGQ1YzM2NmRjYjY0ZGVkMGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMhxMDANBgkqhkiG9w0BAQsFAAOCAQEAJrX1rWJhRF7C3eZA
y70QaiZOFViFKXp1ZtwpJ1VgfIXMcFUXU6gGozD5SRv0j7g3R6acz8HU1p4esT8u
T9lBVqT3L+3Ltemo7pt5O2qt/UuMFK2LPTvc4MyO3KxwvJfXEw47Qar7iL1F8eOw
Y9C0jOgzNsTItG6WmTKR7GXqqANDGSYm6DkBsJN08oz78CsMYAXluUngr/hKbmK9
XougDgsT+bv5z5GEqWl8Il1OTpAfrAF51IFCa0HUgiH5syvR2J7LSEfaSewmYegY
/cT9u0/EMQ0kpUgcg3LPAicxB85P047xHarg4UkHvzzwCxdxkr6p/y3ZDr90t3v7
2v0B6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org