Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2a2c33598efadd0c700423c78ad5adc73810f625.roa
File:                     2a2c33598efadd0c700423c78ad5adc73810f625.roa (raw, json)
Hash identifier:          Bz98Z+q1HaoWizuy0Any6K/8cLJOGE+AzFZ6neEntuk=
Subject key identifier:   88:77:E2:D2:C1:D7:3D:B0:55:5D:21:9A:05:0D:0E:F9:7C:E3:E7:8B
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       0C1AC4
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2a2c33598efadd0c700423c78ad5adc73810f625.roa
Signing time:             Mon 05 Jul 2021 13:48:58 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     269928
IP address blocks:        200.108.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793284 (0xc1ac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=2a2c33598efadd0c700423c78ad5adc73810f625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:73:a9:33:d0:b0:2b:7a:ad:57:16:52:1c:94:
                    55:a2:fa:5f:44:c3:47:30:d2:d8:f0:72:bc:85:5f:
                    d1:91:9c:e0:08:7b:c3:f8:f4:88:93:9f:81:40:69:
                    23:91:f7:cc:b9:af:04:21:4f:f5:50:f1:2d:67:6d:
                    28:1b:1f:18:40:95:a4:50:46:6c:1c:23:0b:60:0f:
                    95:d0:67:d4:c7:18:4b:b9:df:98:d9:f7:80:05:04:
                    63:f4:ce:09:04:6f:83:5a:ee:c1:eb:86:81:6d:36:
                    94:04:a9:6f:de:7d:ad:47:d6:ef:33:bf:33:91:24:
                    e3:97:6d:20:86:48:e6:11:10:5f:e5:f8:6c:cd:ff:
                    9e:7b:a0:f0:a8:2d:e9:06:e2:64:f9:27:b1:98:7c:
                    bf:c0:b6:6c:76:54:d6:1b:b6:13:7f:76:63:d1:71:
                    c7:2b:d6:fd:8e:97:d4:e6:38:2f:4c:f5:92:a2:8a:
                    40:de:9f:e0:61:30:5f:55:4e:2c:23:0d:4a:10:01:
                    a0:24:74:d5:73:48:2f:ec:7c:35:c2:f9:6d:7e:ad:
                    58:be:38:d4:ca:ee:bf:28:a9:17:86:09:b8:cd:d7:
                    df:0e:79:92:57:f0:8c:61:3f:6e:52:0e:9f:b7:67:
                    54:1a:14:d7:c6:36:5e:1d:2b:1a:85:20:32:c6:0f:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:E2:D2:C1:D7:3D:B0:55:5D:21:9A:05:0D:0E:F9:7C:E3:E7:8B
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2a2c33598efadd0c700423c78ad5adc73810f625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:2e:bb:45:1b:f2:85:f2:9b:84:09:c1:d0:8a:df:36:1f:
         68:6f:f4:f2:a0:42:a0:c1:66:63:28:0a:3b:3e:94:d8:e2:12:
         17:c6:9c:6c:79:be:22:bc:da:97:ed:a6:2b:de:b3:7a:3d:5b:
         91:d1:79:56:1e:b2:7f:39:ad:11:45:05:f4:44:4e:22:6c:73:
         7e:16:10:8d:46:3f:6f:0c:6e:f4:34:b3:45:93:34:20:8f:a1:
         bd:75:95:80:98:52:ac:15:21:22:be:da:94:31:6a:ae:86:74:
         3b:37:64:85:8e:9f:1c:67:00:bb:8c:58:f4:c4:15:01:9c:64:
         5d:07:95:e2:2d:83:be:03:fc:d4:ce:7d:db:e3:2c:1b:26:83:
         d2:32:55:48:29:7b:e4:6f:9c:f7:6c:88:b4:c2:90:78:44:7e:
         c9:4d:fd:4a:b4:a8:1b:2a:17:6d:81:6a:d9:69:85:36:5e:4b:
         20:f5:16:7a:aa:95:67:d6:4f:7d:a1:00:82:15:d8:bf:f4:18:
         80:dd:a4:d6:ce:75:d7:ca:32:b7:bf:d5:19:b2:35:6c:da:0c:
         4f:bb:6e:6e:12:93:3d:ca:9c:b2:c3:5e:39:32:0b:e9:f8:73:
         ea:45:72:c3:1c:0e:e9:fb:4f:23:44:64:1d:ef:b3:2f:0d:11:
         e2:9c:bc:96
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDBrEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
NDBkMTA1MjRkNTdhZGY3MmFiMmQ1NTUzMDA3OGQ2OGYyN2FjNWEwHhcNMjEwNzA1
MDMwMDAwWhcNMjMwNzA1MDMwMDAwWjAzMTEwLwYDVQQDEygyYTJjMzM1OThlZmFk
ZDBjNzAwNDIzYzc4YWQ1YWRjNzM4MTBmNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3HOpM9CwK3qtVxZSHJRVovpfRMNHMNLY8HK8hV/RkZzgCHvD
+PSIk5+BQGkjkffMua8EIU/1UPEtZ20oGx8YQJWkUEZsHCMLYA+V0GfUxxhLud+Y
2feABQRj9M4JBG+DWu7B64aBbTaUBKlv3n2tR9bvM78zkSTjl20ghkjmERBf5fhs
zf+ee6DwqC3pBuJk+SexmHy/wLZsdlTWG7YTf3Zj0XHHK9b9jpfU5jgvTPWSoopA
3p/gYTBfVU4sIw1KEAGgJHTVc0gv7Hw1wvltfq1YvjjUyu6/KKkXhgm4zdffDnmS
V/CMYT9uUg6ft2dUGhTXxjZeHSsahSAyxg9cnwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIh34tLB1z2wVV0hmgUNDvl84+eLMB8GA1UdIwQYMBaAFLOd0TUjWMoySv+4
a+BbejK+yGxSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI0MGQx
MDUyNGQ1N2FkZjcyYWIyZDU1NTMwMDc4ZDY4ZjI3YWM1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFjN2RjMjUtM2RhZi00N2Q3LTk5NGItZWU0ODcx
NDJjMGRkLzJhMmMzMzU5OGVmYWRkMGM3MDA0MjNjNzhhZDVhZGM3MzgxMGY2MjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWM3ZGMyNS0zZGFmLTQ3ZDctOTk0Yi1lZTQ4
NzE0MmMwZGQvYmI0MGQxMDUyNGQ1N2FkZjcyYWIyZDU1NTMwMDc4ZDY4ZjI3YWM1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhsvjANBgkqhkiG9w0BAQsFAAOCAQEAkdQuu0Ub8oXym4QJ
wdCK3zYfaG/08qBCoMFmYygKOz6U2OISF8acbHm+Irzal+2mK96zej1bkdF5Vh6y
fzmtEUUF9EROImxzfhYQjUY/bwxu9DSzRZM0II+hvXWVgJhSrBUhIr7alDFqroZ0
OzdkhY6fHGcAu4xY9MQVAZxkXQeV4i2DvgP81M592+MsGyaD0jJVSCl75G+c92yI
tMKQeER+yU39SrSoGyoXbYFq2WmFNl5LIPUWeqqVZ9ZPfaEAghXYv/QYgN2k1s51
18oyt7/VGbI1bNoMT7tubhKTPcqcssNeOTIL6fhz6kVywxwO6ftPI0RkHe+zLw0R
4py8lg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org