Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/74cb304a0acfca4d6ea031dbbde5fe806a22edfa.roa
File:                     74cb304a0acfca4d6ea031dbbde5fe806a22edfa.roa (raw, json)
Hash identifier:          1th4UwO9/99JQxHhJQJt3K/IiLq7mnRSKPyEsopuJJs=
Subject key identifier:   E0:C9:4B:FC:BE:EA:0D:60:84:42:EE:2F:8A:AA:42:6B:85:0F:F2:5F
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       036976
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/74cb304a0acfca4d6ea031dbbde5fe806a22edfa.roa
Signing time:             Wed 19 Jul 2023 21:54:33 +0000
ROA not before:           Tue 18 Jul 2023 21:54:33 +0000
ROA not after:            Sat 19 Jul 2025 21:54:33 +0000
asID:                     16629
IP address blocks:        200.42.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223606 (0x36976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 18 21:54:33 2023 GMT
            Not After : Jul 19 21:54:33 2025 GMT
        Subject: CN=74cb304a0acfca4d6ea031dbbde5fe806a22edfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:07:fd:72:32:99:ef:7f:28:eb:d6:fe:a1:
                    7e:5b:f4:25:48:7a:30:ea:7e:a0:91:84:d2:d7:86:
                    34:6d:e9:7a:8d:e7:38:cb:eb:84:5c:fb:2b:5f:cb:
                    13:da:9d:ea:71:4d:d0:fe:6c:d4:b4:2b:f3:08:c3:
                    9c:7f:8d:74:e5:11:61:37:ca:58:3b:49:d4:5f:69:
                    f7:5a:ee:19:22:6f:52:c0:2a:b5:3f:fd:ad:4c:cb:
                    7e:30:41:0a:ee:23:21:2e:a1:8d:d6:9e:db:e2:57:
                    5b:43:b4:96:f6:8d:a8:53:e4:49:e2:fe:89:80:91:
                    54:7b:8b:fd:f4:37:ab:89:6d:03:c3:d0:3a:53:8d:
                    e3:c8:fd:5e:ad:ea:fc:f8:8c:45:70:5b:31:10:0b:
                    07:4f:59:27:f3:73:cd:64:28:ae:29:e3:b9:20:0f:
                    a8:e1:db:a1:46:3f:6e:2c:a4:00:fe:7e:5b:5d:68:
                    e8:23:50:23:6c:4c:31:5f:64:85:1e:a4:43:07:8b:
                    59:a4:89:59:cc:7b:67:ce:80:1a:ed:c1:8a:e0:88:
                    8c:c8:25:a3:a8:1b:b1:e6:d0:fb:1d:c8:c2:55:5d:
                    00:76:0e:e1:80:e9:7a:8b:6d:6f:1c:51:42:cf:38:
                    b4:73:14:59:26:f6:e6:1d:da:7d:e6:a5:12:47:8e:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:4B:FC:BE:EA:0D:60:84:42:EE:2F:8A:AA:42:6B:85:0F:F2:5F
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/74cb304a0acfca4d6ea031dbbde5fe806a22edfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:72:83:80:65:ff:41:19:fd:7a:47:9b:9c:a1:0c:be:d3:04:
         6d:87:00:35:d0:95:5d:ad:ba:36:f8:31:09:8b:d2:6e:7d:9c:
         ca:7f:74:e0:69:88:cd:8f:00:6a:7c:c5:7a:ad:4f:42:4d:d0:
         6f:2d:d4:2d:59:01:21:e4:7e:fa:85:78:25:c8:a1:d9:b0:96:
         50:64:79:8d:2e:27:f9:14:03:37:72:cf:41:58:41:c3:4e:4d:
         3f:27:8c:f8:4c:ec:0c:98:a9:8c:d4:fb:62:55:9e:50:3a:8e:
         47:91:53:13:4e:5a:40:4c:42:f4:29:fc:05:36:cc:ef:85:b9:
         45:5d:c8:6c:05:aa:97:6d:2e:99:a6:af:ad:67:1e:90:33:e9:
         55:d8:fe:8d:93:64:2d:2d:f5:71:fb:f8:e8:1c:3b:cb:4f:c5:
         07:bb:fd:d3:b9:69:f0:92:f2:8d:71:ad:74:d6:98:39:3e:a4:
         62:be:a5:ef:c2:bf:7b:4c:3f:f0:12:3e:63:67:43:a1:94:79:
         38:cd:37:56:2d:46:89:48:0c:ca:6f:24:cd:af:c8:22:18:2c:
         78:40:63:26:75:31:9f:fc:ef:81:33:3e:23:97:b5:36:fc:2f:
         ca:c1:22:67:c1:75:67:01:38:db:36:d1:63:d7:e4:f4:b5:d4:
         3c:c7:2c:9c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA2l2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzE4
MjE1NDMzWhcNMjUwNzE5MjE1NDMzWjAzMTEwLwYDVQQDEyg3NGNiMzA0YTBhY2Zj
YTRkNmVhMDMxZGJiZGU1ZmU4MDZhMjJlZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgW4H/XIyme9/KOvW/qF+W/QlSHow6n6gkYTS14Y0bel6jec4
y+uEXPsrX8sT2p3qcU3Q/mzUtCvzCMOcf4105RFhN8pYO0nUX2n3Wu4ZIm9SwCq1
P/2tTMt+MEEK7iMhLqGN1p7b4ldbQ7SW9o2oU+RJ4v6JgJFUe4v99DeriW0Dw9A6
U43jyP1erer8+IxFcFsxEAsHT1kn83PNZCiuKeO5IA+o4duhRj9uLKQA/n5bXWjo
I1AjbEwxX2SFHqRDB4tZpIlZzHtnzoAa7cGK4IiMyCWjqBux5tD7HcjCVV0Adg7h
gOl6i21vHFFCzzi0cxRZJvbmHdp95qUSR45hzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFODJS/y+6g1ghELuL4qqQmuFD/JfMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzc0Y2IzMDRhMGFjZmNhNGQ2ZWEwMzFkYmJkZTVmZTgwNmEyMmVkZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgqvTANBgkqhkiG9w0BAQsFAAOCAQEAtnKDgGX/QRn9ekeb
nKEMvtMEbYcANdCVXa26NvgxCYvSbn2cyn904GmIzY8AanzFeq1PQk3Qby3ULVkB
IeR++oV4Jcih2bCWUGR5jS4n+RQDN3LPQVhBw05NPyeM+EzsDJipjNT7YlWeUDqO
R5FTE05aQExC9Cn8BTbM74W5RV3IbAWql20umaavrWcekDPpVdj+jZNkLS31cfv4
6Bw7y0/FB7v907lp8JLyjXGtdNaYOT6kYr6l78K/e0w/8BI+Y2dDoZR5OM03Vi1G
iUgMym8kza/IIhgseEBjJnUxn/zvgTM+I5e1NvwvysEiZ8F1ZwE42zbRY9fk9LXU
PMcsnA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org