Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/fcdc003d549253bfc94d312ab039769c43c18ecf.roa
File:                     fcdc003d549253bfc94d312ab039769c43c18ecf.roa (raw, json)
Hash identifier:          mmuoeYY4kc0vav3SXowRYyIn7ytjy2z+AHesZtwElls=
Subject key identifier:   FC:1E:6E:9B:A9:D7:A9:4A:B0:4E:C4:15:F2:01:D5:55:78:4A:B8:C2
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       1030BD
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/fcdc003d549253bfc94d312ab039769c43c18ecf.roa
Signing time:             Tue 06 Jul 2021 13:14:28 +0000
ROA not before:           Tue 06 Jul 2021 03:00:00 +0000
ROA not after:            Thu 06 Jul 2023 03:00:00 +0000
asID:                     19244
IP address blocks:        200.27.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061053 (0x1030bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jul  6 03:00:00 2021 GMT
            Not After : Jul  6 03:00:00 2023 GMT
        Subject: CN=fcdc003d549253bfc94d312ab039769c43c18ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:0a:04:93:59:20:fe:66:33:f7:65:b2:e7:
                    5a:2e:d8:8c:85:85:37:08:36:bb:23:3e:55:42:10:
                    a6:6e:93:5b:05:0c:b1:d5:ae:53:7f:2e:a7:41:f8:
                    cc:ad:a4:9a:ed:be:6c:67:a3:eb:f9:8d:29:71:26:
                    41:6f:ec:5f:50:6b:a8:ae:ae:45:03:f0:b7:9b:48:
                    45:e4:eb:ef:0d:10:b4:f2:af:1f:56:4d:81:85:39:
                    24:c7:2a:27:f5:1f:01:12:70:01:11:67:ed:51:a3:
                    e8:93:74:f8:71:54:17:1e:4c:29:4c:da:e2:81:f8:
                    ca:87:43:b5:6f:5a:a2:8a:b4:08:77:97:c4:9c:a4:
                    03:0b:86:90:00:da:b5:a5:33:d1:eb:0a:a8:ce:90:
                    20:dd:fb:28:57:c7:1d:30:74:17:43:11:6e:c7:52:
                    4e:77:75:85:d2:8d:8d:72:5f:06:89:aa:a2:5c:cc:
                    6e:d8:1a:42:d3:44:b8:aa:a7:f3:22:9e:f8:f8:ae:
                    fc:89:76:0b:b7:20:86:b8:27:6c:63:fd:51:b2:ae:
                    1b:a0:da:88:46:cc:04:2d:07:81:2b:fd:46:4c:04:
                    19:4d:65:2a:62:04:a2:44:85:a4:91:04:8d:8c:53:
                    73:17:1a:e7:fe:a9:81:99:01:eb:4d:4a:2e:d9:1b:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:6E:9B:A9:D7:A9:4A:B0:4E:C4:15:F2:01:D5:55:78:4A:B8:C2
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/fcdc003d549253bfc94d312ab039769c43c18ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:cf:d3:d9:e6:aa:31:d2:80:0e:13:53:f8:6d:be:d4:63:8c:
         91:9f:a2:33:0a:e3:78:cf:29:52:2c:a0:2c:22:77:b1:a1:a6:
         3e:53:6a:53:23:49:a2:98:01:ce:27:97:65:56:6f:12:12:e9:
         d6:66:3f:f3:7e:83:2f:be:6b:c6:3c:cb:65:ba:d1:af:65:eb:
         1b:35:a7:38:11:56:c4:e8:cf:72:3e:34:d3:29:5f:1e:b2:b3:
         b4:0a:81:aa:06:66:ca:7a:92:53:d1:28:bb:13:f0:b3:67:34:
         8a:9d:02:be:62:bf:2d:47:d1:e2:c7:ab:6f:c1:d5:02:9b:e8:
         9a:0e:ab:8a:30:41:b2:f7:4f:53:76:7e:57:64:b3:16:37:75:
         ec:0f:2f:00:9a:a4:1a:a2:ac:22:34:06:94:6e:06:6a:79:32:
         8c:d5:4a:2b:29:30:53:07:36:29:85:e5:64:60:7d:b5:5a:f4:
         70:06:46:c8:bc:6c:c4:60:01:7d:a3:21:92:b2:1d:71:e3:7d:
         a0:a8:94:df:dc:ff:33:d7:77:33:da:5a:9f:f6:cc:f3:6e:d5:
         8a:0b:36:a3:1b:81:7d:b2:d7:b4:ac:4c:b9:7e:70:9c:7f:b1:
         44:7d:3f:55:9c:e1:55:c5:59:fc:ce:78:95:18:4d:0b:3f:89:
         16:9c:fe:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEDC9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
YTM0Y2U5M2FjYmZlNzBjNGRlNjQ1MzhkY2EwODk0YjY3MGYwZDIwHhcNMjEwNzA2
MDMwMDAwWhcNMjMwNzA2MDMwMDAwWjAzMTEwLwYDVQQDEyhmY2RjMDAzZDU0OTI1
M2JmYzk0ZDMxMmFiMDM5NzY5YzQzYzE4ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhQsKBJNZIP5mM/dlsudaLtiMhYU3CDa7Iz5VQhCmbpNbBQyx
1a5Tfy6nQfjMraSa7b5sZ6Pr+Y0pcSZBb+xfUGuorq5FA/C3m0hF5OvvDRC08q8f
Vk2BhTkkxyon9R8BEnABEWftUaPok3T4cVQXHkwpTNrigfjKh0O1b1qiirQId5fE
nKQDC4aQANq1pTPR6wqozpAg3fsoV8cdMHQXQxFux1JOd3WF0o2Ncl8GiaqiXMxu
2BpC00S4qqfzIp74+K78iXYLtyCGuCdsY/1Rsq4boNqIRswELQeBK/1GTAQZTWUq
YgSiRIWkkQSNjFNzFxrn/qmBmQHrTUou2Rsm0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPwebpup16lKsE7EFfIB1VV4SrjCMB8GA1UdIwQYMBaAFF+F026iJxQ1QEkZ
je07lBYn/dU1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FhMzRj
ZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRlNDM3NDMtY2ViYi00ZjI5LTk1NmUtMzYwZDhk
MjIwZjU0L2ZjZGMwMDNkNTQ5MjUzYmZjOTRkMzEyYWIwMzk3NjljNDNjMThlY2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGU0Mzc0My1jZWJiLTRmMjktOTU2ZS0zNjBk
OGQyMjBmNTQvN2FhMzRjZTkzYWNiZmU3MGM0ZGU2NDUzOGRjYTA4OTRiNjcwZjBk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgbCzANBgkqhkiG9w0BAQsFAAOCAQEAzM/T2eaqMdKADhNT
+G2+1GOMkZ+iMwrjeM8pUiygLCJ3saGmPlNqUyNJopgBzieXZVZvEhLp1mY/836D
L75rxjzLZbrRr2XrGzWnOBFWxOjPcj400ylfHrKztAqBqgZmynqSU9EouxPws2c0
ip0CvmK/LUfR4serb8HVApvomg6rijBBsvdPU3Z+V2SzFjd17A8vAJqkGqKsIjQG
lG4GankyjNVKKykwUwc2KYXlZGB9tVr0cAZGyLxsxGABfaMhkrIdceN9oKiU39z/
M9d3M9pan/bM827Vigs2oxuBfbLXtKxMuX5wnH+xRH0/VZzhVcVZ/M54lRhNCz+J
Fpz+og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org