Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f9faa49cb0b7fac00a221b14412f1baddb20263.roa
File:                     4f9faa49cb0b7fac00a221b14412f1baddb20263.roa (raw, json)
Hash identifier:          6tsMTMVyzVz6tXINmW6xSYwuStiPg9tgatu5Cq0Vv18=
Subject key identifier:   1B:25:A8:DD:7D:E6:51:94:71:CC:B5:18:69:B9:23:E1:8E:66:18:93
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02BF95
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f9faa49cb0b7fac00a221b14412f1baddb20263.roa
Signing time:             Wed 12 Jul 2023 15:28:42 +0000
ROA not before:           Tue 11 Jul 2023 15:28:42 +0000
ROA not after:            Sat 12 Jul 2025 15:28:42 +0000
asID:                     15311
IP address blocks:        200.113.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180117 (0x2bf95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:28:42 2023 GMT
            Not After : Jul 12 15:28:42 2025 GMT
        Subject: CN=4f9faa49cb0b7fac00a221b14412f1baddb20263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:fe:f1:74:51:30:8f:56:0b:c2:9f:48:ac:
                    f9:ec:85:bd:08:4c:c7:d3:cd:9b:ba:a5:91:c8:34:
                    78:04:4f:0f:44:7b:5c:ea:77:50:a9:e1:f3:ad:45:
                    bf:16:ee:31:11:e1:89:c2:3c:96:b5:e8:e6:0e:83:
                    a5:99:b9:6c:09:8e:2e:6b:51:d9:82:e7:e0:7b:99:
                    d6:63:52:2d:5d:8c:20:3e:c2:88:91:01:6b:35:d8:
                    1d:97:f0:cf:46:9c:09:04:38:d6:0f:da:9e:7e:63:
                    6c:4b:66:b4:e5:03:7c:a9:b6:e6:27:95:08:ba:11:
                    b1:f9:6f:da:42:0d:03:cb:6c:c9:71:4e:db:39:32:
                    f4:34:ba:6e:a3:4d:29:fe:c9:89:a6:6b:d4:9f:b6:
                    86:4d:85:14:50:b8:53:a5:2f:4d:95:ca:f3:eb:7d:
                    67:41:8f:99:8a:47:4a:1b:1d:10:8c:33:58:79:9e:
                    16:f9:f4:c8:bc:30:b0:8c:34:7a:91:59:97:32:5c:
                    0c:e1:8e:84:6a:ca:c9:f4:1a:99:79:5c:42:9a:31:
                    dc:f4:d8:82:d8:da:c3:a7:4f:90:93:d7:c0:e7:2b:
                    18:55:7f:cf:af:04:28:7e:91:16:09:2e:22:f9:b3:
                    a0:34:c1:12:46:18:00:75:f8:2d:3b:22:56:f9:66:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:A8:DD:7D:E6:51:94:71:CC:B5:18:69:B9:23:E1:8E:66:18:93
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f9faa49cb0b7fac00a221b14412f1baddb20263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:c2:d1:01:c8:6b:79:da:74:23:2c:9d:f4:f7:aa:96:af:
         d5:cf:08:86:3e:04:52:8b:9d:aa:32:21:cd:9d:de:34:73:8b:
         7a:ff:86:da:04:5a:2b:2b:8f:32:46:8e:a1:4e:a2:1d:a5:85:
         8c:c5:cb:77:a7:d4:b7:cb:86:ff:59:d2:f7:49:78:e0:f3:1d:
         f6:d9:ee:bd:78:73:40:3e:b2:65:ed:6b:e7:fd:59:a4:73:ba:
         21:64:2c:b2:8a:5e:e9:b5:d8:6f:bd:df:85:38:32:cf:bb:de:
         54:fa:c3:25:b3:2d:32:52:6c:8c:dd:7b:bc:14:25:73:57:3a:
         f2:74:27:11:d4:38:d6:a9:ee:a8:3a:d3:5c:53:ec:c0:f7:20:
         80:2d:90:49:f3:58:ab:11:ff:f1:ef:ce:06:a6:76:47:be:7d:
         ac:53:29:16:42:e4:97:a7:ae:6e:fe:0f:e0:08:62:56:92:3f:
         e7:c9:97:d2:c2:fc:86:a6:63:8a:83:38:c7:18:d8:58:2c:76:
         23:cc:6b:8d:e7:09:d7:1e:60:69:2c:c4:a6:4b:0b:a4:59:c0:
         57:3b:df:58:d8:26:e8:0e:60:68:54:22:29:38:ea:cc:76:3c:
         9c:b4:4f:35:df:19:81:2b:80:16:79:8f:ac:fb:29:79:a8:25:
         a4:f7:4a:bf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAr+VMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEx
MTUyODQyWhcNMjUwNzEyMTUyODQyWjAzMTEwLwYDVQQDEyg0ZjlmYWE0OWNiMGI3
ZmFjMDBhMjIxYjE0NDEyZjFiYWRkYjIwMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlQ3+8XRRMI9WC8KfSKz57IW9CEzH082buqWRyDR4BE8PRHtc
6ndQqeHzrUW/Fu4xEeGJwjyWtejmDoOlmblsCY4ua1HZgufge5nWY1ItXYwgPsKI
kQFrNdgdl/DPRpwJBDjWD9qefmNsS2a05QN8qbbmJ5UIuhGx+W/aQg0Dy2zJcU7b
OTL0NLpuo00p/smJpmvUn7aGTYUUULhTpS9Nlcrz631nQY+ZikdKGx0QjDNYeZ4W
+fTIvDCwjDR6kVmXMlwM4Y6EasrJ9BqZeVxCmjHc9NiC2NrDp0+Qk9fA5ysYVX/P
rwQofpEWCS4i+bOgNMESRhgAdfgtOyJW+WbcZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBslqN195lGUccy1GGm5I+GOZhiTMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzRmOWZhYTQ5Y2IwYjdmYWMwMGEyMjFiMTQ0MTJmMWJhZGRiMjAyNjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMhxIDANBgkqhkiG9w0BAQsFAAOCAQEAGaDC0QHIa3nadCMs
nfT3qpav1c8Ihj4EUoudqjIhzZ3eNHOLev+G2gRaKyuPMkaOoU6iHaWFjMXLd6fU
t8uG/1nS90l44PMd9tnuvXhzQD6yZe1r5/1ZpHO6IWQssope6bXYb73fhTgyz7ve
VPrDJbMtMlJsjN17vBQlc1c68nQnEdQ41qnuqDrTXFPswPcggC2QSfNYqxH/8e/O
BqZ2R759rFMpFkLkl6eubv4P4AhiVpI/58mX0sL8hqZjioM4xxjYWCx2I8xrjecJ
1x5gaSzEpksLpFnAVzvfWNgm6A5gaFQiKTjqzHY8nLRPNd8ZgSuAFnmPrPspeagl
pPdKvw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org