Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e08ea4da149307491a9da6b3858c5e56b21aba1.roa
File:                     9e08ea4da149307491a9da6b3858c5e56b21aba1.roa (raw, json)
Hash identifier:          p0ZthGQKrV7Aap659a1aea8OUJm6a+3Yvq1bwsnToZY=
Subject key identifier:   EF:43:AC:0A:78:AA:03:90:B6:FE:8E:D2:73:FC:B2:46:3B:64:DA:36
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02F2BA
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e08ea4da149307491a9da6b3858c5e56b21aba1.roa
Signing time:             Wed 12 Jul 2023 15:34:25 +0000
ROA not before:           Tue 11 Jul 2023 15:34:25 +0000
ROA not after:            Sat 12 Jul 2025 15:34:25 +0000
asID:                     15311
IP address blocks:        200.113.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193210 (0x2f2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 11 15:34:25 2023 GMT
            Not After : Jul 12 15:34:25 2025 GMT
        Subject: CN=9e08ea4da149307491a9da6b3858c5e56b21aba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:79:c8:de:42:27:20:7b:1f:03:e9:78:10:
                    23:9f:2e:a1:7e:5e:10:de:4b:5d:f9:dd:a5:90:63:
                    f9:91:d1:ea:6d:4e:65:a6:e9:ba:51:f9:66:1c:88:
                    01:81:e8:b7:ad:cd:7b:ab:c3:57:34:8e:02:50:56:
                    20:7d:1f:2d:d4:9e:46:9b:f6:88:28:29:55:25:40:
                    bd:0a:96:4e:a0:12:f3:f4:2e:fd:e5:22:21:b0:bf:
                    bd:7d:eb:a8:b6:cc:7a:6b:51:a9:77:40:32:77:6f:
                    ee:e0:24:8b:ea:32:b6:eb:2b:05:03:86:7c:57:c6:
                    49:18:e6:76:3c:a7:2b:38:a8:d4:7d:1b:0e:1c:e4:
                    a3:be:64:10:74:74:5d:4f:8c:2b:c6:f7:7f:55:1a:
                    9c:d3:52:55:2b:27:e6:f7:c6:25:c6:8f:ce:47:35:
                    41:15:7f:82:64:e9:28:9e:43:ac:29:b2:06:17:27:
                    56:85:9d:63:fe:c2:14:82:78:38:b0:9a:c6:c5:eb:
                    b5:fa:5b:6a:a2:82:90:9f:30:d5:d0:e2:1c:26:04:
                    6f:40:37:af:41:61:f6:54:87:59:9c:de:12:e7:26:
                    19:33:b6:6f:9a:ff:1a:8a:e4:8c:ae:60:c1:23:e5:
                    8e:4f:4f:45:1d:a9:f6:7b:eb:0e:df:d0:e9:92:41:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:43:AC:0A:78:AA:03:90:B6:FE:8E:D2:73:FC:B2:46:3B:64:DA:36
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/9e08ea4da149307491a9da6b3858c5e56b21aba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:90:cf:ed:24:91:af:93:4a:c3:4d:27:bd:bd:8a:e5:a4:c7:
         c3:d2:0a:6f:b7:b2:92:d6:01:28:00:41:bb:f5:8c:06:3d:56:
         3c:62:80:53:21:25:e6:31:e7:b0:30:f0:9c:07:89:93:03:f5:
         21:32:28:4c:e2:91:bd:f1:70:8a:6c:0c:a7:94:23:8f:36:6d:
         bf:1e:8f:a4:04:6f:30:0e:7f:36:53:fd:62:db:a5:b0:4f:39:
         bd:ba:0f:ad:c5:a3:a7:88:67:3d:c8:8d:78:1f:e7:34:83:28:
         1e:67:67:ff:1f:20:e5:b1:86:8e:bd:78:88:8f:3c:51:f2:b8:
         68:c8:e3:ba:ba:80:a0:14:ea:b8:4f:8d:2e:14:ab:95:07:2a:
         81:79:80:49:63:08:36:54:25:52:f2:5e:f8:44:14:2f:64:d5:
         43:54:77:1a:4d:1f:1f:d0:21:86:39:70:78:cd:51:42:32:8c:
         12:75:e9:1a:fd:07:83:cf:7c:f8:57:9d:d9:6d:a2:46:92:9e:
         97:cc:50:4a:12:48:f0:d0:03:87:83:86:81:da:c3:df:cc:10:
         63:83:6f:b7:19:06:ff:d6:37:7c:13:b1:f7:c4:df:82:3d:30:
         0b:79:58:a1:3b:6a:87:a7:a0:6c:ea:b7:72:df:14:b1:d8:0c:
         05:bf:a9:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAvK6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg1
ZDQyOGVkNzY2NzAxYjU5MzU1OGEyMmUxZmMwOGMxN2FjYzZlMjcwHhcNMjMwNzEx
MTUzNDI1WhcNMjUwNzEyMTUzNDI1WjAzMTEwLwYDVQQDEyg5ZTA4ZWE0ZGExNDkz
MDc0OTFhOWRhNmIzODU4YzVlNTZiMjFhYmExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAre15yN5CJyB7HwPpeBAjny6hfl4Q3ktd+d2lkGP5kdHqbU5l
pum6UflmHIgBgei3rc17q8NXNI4CUFYgfR8t1J5Gm/aIKClVJUC9CpZOoBLz9C79
5SIhsL+9feuotsx6a1Gpd0Ayd2/u4CSL6jK26ysFA4Z8V8ZJGOZ2PKcrOKjUfRsO
HOSjvmQQdHRdT4wrxvd/VRqc01JVKyfm98Ylxo/ORzVBFX+CZOkonkOsKbIGFydW
hZ1j/sIUgng4sJrGxeu1+ltqooKQnzDV0OIcJgRvQDevQWH2VIdZnN4S5yYZM7Zv
mv8aiuSMrmDBI+WOT09FHan2e+sO39DpkkHDBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO9DrAp4qgOQtv6O0nP8skY7ZNo2MB8GA1UdIwQYMBaAFJWVjQpUS4dtXXTJ
+maZxquWcU7TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODVkNDI4
ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDlmNGQzMTYtOTAxYy00YzZiLWJiZDYtNGNiYjcw
M2IwY2ZkLzllMDhlYTRkYTE0OTMwNzQ5MWE5ZGE2YjM4NThjNWU1NmIyMWFiYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWY0ZDMxNi05MDFjLTRjNmItYmJkNi00Y2Ji
NzAzYjBjZmQvODVkNDI4ZWQ3NjY3MDFiNTkzNTU4YTIyZTFmYzA4YzE3YWNjNmUy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBchxYDANBgkqhkiG9w0BAQsFAAOCAQEAeJDP7SSRr5NKw00n
vb2K5aTHw9IKb7eyktYBKABBu/WMBj1WPGKAUyEl5jHnsDDwnAeJkwP1ITIoTOKR
vfFwimwMp5QjjzZtvx6PpARvMA5/NlP9YtulsE85vboPrcWjp4hnPciNeB/nNIMo
Hmdn/x8g5bGGjr14iI88UfK4aMjjurqAoBTquE+NLhSrlQcqgXmASWMINlQlUvJe
+EQUL2TVQ1R3Gk0fH9AhhjlweM1RQjKMEnXpGv0Hg898+Fed2W2iRpKel8xQShJI
8NADh4OGgdrD38wQY4NvtxkG/9Y3fBOx98Tfgj0wC3lYoTtqh6egbOq3ct8UsdgM
Bb+pew==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org