Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/c84a8edfb094a0e20d95cb752e895286425e1a6f.roa
File:                     c84a8edfb094a0e20d95cb752e895286425e1a6f.roa (raw, json)
Hash identifier:          wn0uIWvPvBd711X+OKIWJU0avIzddYkpXGZUBZ/kfk0=
Subject key identifier:   2D:74:23:AB:CA:D3:19:19:8A:44:03:81:02:1D:A4:9C:7A:51:FF:1C
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       2141F2
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/c84a8edfb094a0e20d95cb752e895286425e1a6f.roa
Signing time:             Fri 05 May 2023 20:55:22 +0000
ROA not before:           Thu 04 May 2023 20:54:59 +0000
ROA not after:            Mon 05 May 2025 20:54:59 +0000
asID:                     272043
IP address blocks:        200.25.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179570 (0x2141f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: May  4 20:54:59 2023 GMT
            Not After : May  5 20:54:59 2025 GMT
        Subject: CN=c84a8edfb094a0e20d95cb752e895286425e1a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:b5:fb:2e:b0:4f:7b:1c:94:df:ca:82:3e:
                    b9:1f:c9:51:86:20:c3:f6:84:96:ed:e7:f6:00:6e:
                    90:34:e2:99:e5:39:4e:6b:12:79:34:5f:6e:02:6e:
                    65:39:f1:2b:31:1b:52:b2:4b:b5:73:4b:79:42:02:
                    2f:24:62:2c:51:ab:78:b6:68:b8:25:48:29:b6:2c:
                    c8:52:53:7c:8a:88:4c:c1:83:eb:f1:f7:fa:44:e1:
                    84:d4:17:29:4b:af:f4:d0:62:b8:92:1a:f9:d4:b3:
                    1c:77:d2:8b:81:4c:09:9e:fe:e0:bf:a7:eb:9b:5c:
                    3a:6f:66:93:78:f0:ef:f9:17:b5:fe:59:7a:5f:d5:
                    d3:83:6a:93:51:db:0b:d5:55:4e:f2:c8:d8:e9:89:
                    4b:9f:49:43:2b:07:4e:c1:24:23:37:37:07:e0:d4:
                    c4:35:91:eb:40:2c:00:37:02:4d:b7:f6:c0:a8:05:
                    fb:d1:a2:7f:3e:9e:19:8d:82:ac:9e:36:35:01:f4:
                    83:a2:31:f2:05:74:a9:86:58:da:9f:09:54:13:40:
                    c5:a2:3c:3e:bf:59:85:ef:a7:81:1b:12:9a:70:4c:
                    76:e5:b1:42:c1:96:32:97:f6:ad:4f:9f:e6:0a:a0:
                    8d:f0:10:d6:2a:24:c2:8e:c6:cf:94:80:f5:b3:8b:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:74:23:AB:CA:D3:19:19:8A:44:03:81:02:1D:A4:9C:7A:51:FF:1C
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/c84a8edfb094a0e20d95cb752e895286425e1a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:98:cf:86:8b:e5:20:8f:53:cd:49:84:0b:65:1f:1a:42:55:
         c5:eb:e6:2a:9a:36:b9:65:5d:1b:43:9f:84:86:4e:03:b0:e9:
         4c:e5:1b:a7:ba:05:06:8f:b3:c6:5b:5e:a4:c7:fe:f6:71:f6:
         22:54:70:b4:8f:ee:97:02:d6:15:96:ad:2b:9b:82:0b:bc:15:
         dd:b1:41:8d:04:20:1a:d4:50:c2:22:7d:04:1e:4a:42:fc:85:
         84:a0:00:5d:28:cd:e3:29:1f:fb:ec:5f:5f:ef:43:34:ab:f9:
         9b:80:a9:f9:c0:6a:8e:19:aa:7b:c4:d2:7c:56:4b:5b:3d:9e:
         9b:19:b0:0f:15:cb:66:ca:c1:0e:0b:1b:d6:da:17:07:d1:a5:
         1e:70:9d:51:ca:75:5b:b3:a1:95:c7:e8:40:84:08:29:d3:67:
         35:93:76:6e:5f:47:43:4c:9c:68:a2:6a:51:e5:e7:72:2d:a0:
         e9:9c:ae:ad:8f:6e:7e:a3:0a:64:d9:98:4b:d8:fe:7e:5b:61:
         55:e0:cd:11:6a:2c:93:44:8f:a7:42:6b:76:e7:a6:c0:c4:c6:
         2b:8a:da:41:51:9e:b1:16:8a:9e:3e:ae:e6:04:82:5d:87:2c:
         ac:0d:aa:5f:a8:72:6f:73:64:3f:bc:a8:42:c9:b3:14:cd:bf:
         3f:01:8b:53
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIUHyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY5
N2ViOWIyNTNmYTU0NmY4N2IzZjc2MTY3ZjI4M2JjYzM3MDAzNjEwHhcNMjMwNTA0
MjA1NDU5WhcNMjUwNTA1MjA1NDU5WjAzMTEwLwYDVQQDEyhjODRhOGVkZmIwOTRh
MGUyMGQ5NWNiNzUyZTg5NTI4NjQyNWUxYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyvS1+y6wT3sclN/Kgj65H8lRhiDD9oSW7ef2AG6QNOKZ5TlO
axJ5NF9uAm5lOfErMRtSsku1c0t5QgIvJGIsUat4tmi4JUgptizIUlN8iohMwYPr
8ff6ROGE1BcpS6/00GK4khr51LMcd9KLgUwJnv7gv6frm1w6b2aTePDv+Re1/ll6
X9XTg2qTUdsL1VVO8sjY6YlLn0lDKwdOwSQjNzcH4NTENZHrQCwANwJNt/bAqAX7
0aJ/Pp4ZjYKsnjY1AfSDojHyBXSphljanwlUE0DFojw+v1mF76eBGxKacEx25bFC
wZYyl/atT5/mCqCN8BDWKiTCjsbPlID1s4uu/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC10I6vK0xkZikQDgQIdpJx6Uf8cMB8GA1UdIwQYMBaAFOgIY7ziIgGTR4SY
RE4X0EUNX1AXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjk3ZWI5
YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTdmNWNkMTQtYWRkNy00YjcwLTljM2EtNDM3MTYz
M2Y1NWRhL2M4NGE4ZWRmYjA5NGEwZTIwZDk1Y2I3NTJlODk1Mjg2NDI1ZTFhNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lN2Y1Y2QxNC1hZGQ3LTRiNzAtOWMzYS00Mzcx
NjMzZjU1ZGEvZjk3ZWI5YjI1M2ZhNTQ2Zjg3YjNmNzYxNjdmMjgzYmNjMzcwMDM2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgZQDANBgkqhkiG9w0BAQsFAAOCAQEAk5jPhovlII9TzUmE
C2UfGkJVxevmKpo2uWVdG0OfhIZOA7DpTOUbp7oFBo+zxltepMf+9nH2IlRwtI/u
lwLWFZatK5uCC7wV3bFBjQQgGtRQwiJ9BB5KQvyFhKAAXSjN4ykf++xfX+9DNKv5
m4Cp+cBqjhmqe8TSfFZLWz2emxmwDxXLZsrBDgsb1toXB9GlHnCdUcp1W7Ohlcfo
QIQIKdNnNZN2bl9HQ0ycaKJqUeXnci2g6ZyurY9ufqMKZNmYS9j+flthVeDNEWos
k0SPp0JrduemwMTGK4raQVGesRaKnj6u5gSCXYcsrA2qX6hyb3NkP7yoQsmzFM2/
PwGLUw==
-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:38 2024 by rpki-client on console-fra.rpki-client.org