Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/8b4db1f203741dc9893b89b4701cc112d87aa41c.roa
File:                     8b4db1f203741dc9893b89b4701cc112d87aa41c.roa (raw, json)
Hash identifier:          AOKeSG2bc4tAMro1DYk0QIUfikF9aW0lyIj4XGXRY3s=
Subject key identifier:   CF:AC:4A:D1:88:75:B8:BF:70:23:69:6D:D5:AA:06:05:A2:A8:A1:70
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       03168C
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/8b4db1f203741dc9893b89b4701cc112d87aa41c.roa
Signing time:             Wed 12 Jul 2023 15:43:38 +0000
ROA not before:           Tue 11 Jul 2023 15:43:37 +0000
ROA not after:            Sat 12 Jul 2025 15:43:37 +0000
asID:                     7418
IP address blocks:        200.90.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202380 (0x3168c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:43:37 2023 GMT
            Not After : Jul 12 15:43:37 2025 GMT
        Subject: CN=8b4db1f203741dc9893b89b4701cc112d87aa41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:a9:8c:73:91:36:31:c6:9c:2d:af:6f:47:
                    4a:43:03:ec:57:84:c0:93:37:bc:47:d1:49:64:00:
                    6a:49:a6:b9:97:77:e2:be:0a:09:d6:3c:1d:08:f8:
                    a4:af:5b:9e:5d:62:04:0f:50:97:e0:54:d7:b8:22:
                    a5:90:57:17:22:6d:43:7d:3f:1a:57:5d:21:d2:ae:
                    48:1f:f0:bc:99:13:36:46:30:d6:b1:e2:e8:13:0e:
                    79:cf:3e:b1:57:94:6c:7b:5c:dd:67:9f:3c:df:21:
                    9d:b1:7b:d6:b7:b7:48:00:a1:c0:dd:16:71:33:2e:
                    7b:d2:d5:b1:54:91:b9:1a:a1:f2:82:3f:ee:83:ce:
                    62:8f:f7:0a:6e:4d:e2:29:ea:b5:28:34:d6:9c:9a:
                    19:9f:07:28:f5:14:e2:be:d5:d1:58:a3:f4:e3:10:
                    c9:4a:21:db:e0:89:ee:2f:27:fa:81:d1:19:8e:6d:
                    50:0c:1c:f1:e3:02:11:dc:06:a7:83:99:46:f9:48:
                    4d:c9:19:63:df:41:88:1f:a1:4b:14:9e:d1:66:62:
                    7d:52:19:6e:43:9e:8d:fe:7a:8b:c8:ab:da:81:f4:
                    af:e6:fa:85:22:88:0f:a7:f3:9b:18:11:42:39:07:
                    76:b3:66:bd:1a:e1:6d:70:55:4f:a5:82:8d:1b:21:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:4A:D1:88:75:B8:BF:70:23:69:6D:D5:AA:06:05:A2:A8:A1:70
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/8b4db1f203741dc9893b89b4701cc112d87aa41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:65:8f:c6:f9:27:07:60:10:06:e1:ac:14:67:54:6f:0f:b3:
         4c:3e:be:d0:a2:48:ec:18:22:78:92:1a:7f:2e:4a:d8:5f:de:
         e0:bb:42:99:7c:ed:e4:f0:ac:17:35:ff:a9:5d:ed:3f:5e:d3:
         0b:e1:67:0f:a5:e3:2d:91:9e:86:e1:7e:69:60:9b:a5:23:bb:
         36:4f:ec:c9:fb:ee:8b:18:36:87:a6:24:4a:9e:1a:09:93:82:
         fb:c0:84:d1:d7:50:f2:63:f6:3c:d7:fc:53:1c:7f:69:50:76:
         2c:0f:74:c6:42:11:e5:69:8e:0f:d9:a5:66:94:dc:80:fb:14:
         b3:ac:8f:89:bd:aa:b0:a9:06:8a:cb:f1:4e:83:ae:f7:64:d9:
         61:35:30:24:0e:16:91:67:4a:38:c8:25:7f:8a:3a:5b:47:ef:
         ee:9e:72:f5:00:bb:ac:fd:5c:48:e2:96:b2:f3:92:7c:99:b1:
         b5:29:93:dc:30:35:23:78:87:80:14:b4:17:89:2d:97:fa:1d:
         54:75:30:44:48:e7:24:a3:ca:57:d0:c1:a3:12:a3:91:cb:e9:
         c5:cc:c0:fb:85:1f:c6:c2:7b:ff:71:90:c6:a6:89:d5:16:7b:
         e6:e3:36:c9:15:54:3c:b1:07:e5:f3:c4:7a:ae:f7:86:cf:8f:
         7f:31:45:a4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAxaMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEx
MTU0MzM3WhcNMjUwNzEyMTU0MzM3WjAzMTEwLwYDVQQDEyg4YjRkYjFmMjAzNzQx
ZGM5ODkzYjg5YjQ3MDFjYzExMmQ4N2FhNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApICpjHORNjHGnC2vb0dKQwPsV4TAkze8R9FJZABqSaa5l3fi
vgoJ1jwdCPikr1ueXWIED1CX4FTXuCKlkFcXIm1DfT8aV10h0q5IH/C8mRM2RjDW
seLoEw55zz6xV5Rse1zdZ5883yGdsXvWt7dIAKHA3RZxMy570tWxVJG5GqHygj/u
g85ij/cKbk3iKeq1KDTWnJoZnwco9RTivtXRWKP04xDJSiHb4InuLyf6gdEZjm1Q
DBzx4wIR3Aang5lG+UhNyRlj30GIH6FLFJ7RZmJ9UhluQ56N/nqLyKvagfSv5vqF
IogPp/ObGBFCOQd2s2a9GuFtcFVPpYKNGyF4pQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM+sStGIdbi/cCNpbdWqBgWiqKFwMB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzhiNGRiMWYyMDM3NDFkYzk4OTNiODliNDcwMWNjMTEyZDg3YWE0MWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBMhaoDANBgkqhkiG9w0BAQsFAAOCAQEA3WWPxvknB2AQBuGs
FGdUbw+zTD6+0KJI7BgieJIafy5K2F/e4LtCmXzt5PCsFzX/qV3tP17TC+FnD6Xj
LZGehuF+aWCbpSO7Nk/syfvuixg2h6YkSp4aCZOC+8CE0ddQ8mP2PNf8Uxx/aVB2
LA90xkIR5WmOD9mlZpTcgPsUs6yPib2qsKkGisvxToOu92TZYTUwJA4WkWdKOMgl
f4o6W0fv7p5y9QC7rP1cSOKWsvOSfJmxtSmT3DA1I3iHgBS0F4ktl/odVHUwREjn
JKPKV9DBoxKjkcvpxczA+4UfxsJ7/3GQxqaJ1RZ75uM2yRVUPLEH5fPEeq73hs+P
fzFFpA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org