Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/95de1e6d3a02cd887e642e290da1ce1669ff105e.roa
File:                     95de1e6d3a02cd887e642e290da1ce1669ff105e.roa (raw, json)
Hash identifier:          6wbK1jf4G3jXuTL1t3FNYpV87sqzC2wwBSXByhxblRg=
Subject key identifier:   B6:DD:CD:4B:F4:E4:72:C3:9D:EC:7F:4A:17:22:59:31:9A:6A:4D:B5
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       250860
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/95de1e6d3a02cd887e642e290da1ce1669ff105e.roa
Signing time:             Tue 26 Sep 2023 17:13:29 +0000
ROA not before:           Mon 25 Sep 2023 17:12:48 +0000
ROA not after:            Fri 26 Sep 2025 17:12:48 +0000
asID:                     61468
IP address blocks:        200.93.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426976 (0x250860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Sep 25 17:12:48 2023 GMT
            Not After : Sep 26 17:12:48 2025 GMT
        Subject: CN=95de1e6d3a02cd887e642e290da1ce1669ff105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:5f:c2:71:da:d5:ee:24:ac:ac:f4:68:5e:
                    c3:f6:fb:56:eb:ad:23:f2:18:88:29:4a:0d:53:5f:
                    b4:19:51:d8:51:a1:92:2f:a7:91:a9:4c:cf:da:c3:
                    96:a8:01:32:3f:fe:54:35:25:0e:ed:c3:95:9e:cf:
                    a5:64:3a:3f:78:1f:dc:cd:7f:5f:12:3c:a7:03:ef:
                    40:91:c9:7b:3d:3e:d6:b4:ae:bb:71:d9:15:64:95:
                    c1:c9:e7:f8:19:98:21:dd:07:d3:8b:f4:67:97:a5:
                    7c:74:75:00:cb:c9:2a:23:1e:99:4a:4a:8d:54:0c:
                    ff:00:04:53:18:f6:0e:78:be:e6:64:5c:7b:95:ba:
                    2f:24:2a:ba:c0:9f:08:fc:3d:57:11:cf:a1:16:ca:
                    1e:17:25:2a:63:ea:4c:37:ac:97:48:d9:41:f4:eb:
                    55:43:2c:a8:0e:eb:ab:de:bf:78:ff:c2:df:e1:d8:
                    8b:79:74:ae:fe:6e:bb:59:8b:71:23:af:27:61:a9:
                    8e:35:d6:80:3d:ce:01:5a:44:16:59:99:a4:fa:1f:
                    84:f5:df:13:b2:90:be:8e:6f:88:9b:6a:69:99:88:
                    17:d5:73:e0:98:c6:58:d4:a5:e0:21:64:3e:56:db:
                    24:c1:ba:aa:49:a2:a0:93:01:4e:4d:61:b2:cb:d5:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:CD:4B:F4:E4:72:C3:9D:EC:7F:4A:17:22:59:31:9A:6A:4D:B5
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/95de1e6d3a02cd887e642e290da1ce1669ff105e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:02:e2:2f:f5:14:4b:86:7e:1b:df:35:2c:1e:e4:50:24:
         00:c8:64:83:4a:15:3c:c0:b8:60:db:35:d8:5e:c7:0b:7c:38:
         5c:75:74:d9:4b:82:0a:05:88:d1:62:13:16:31:f2:f9:19:82:
         ff:c7:db:ca:b5:e7:57:e1:f5:75:b0:15:45:54:83:85:8b:d0:
         a1:22:3b:52:85:f1:11:f7:82:af:43:46:59:4e:c0:27:5c:d1:
         98:d8:ca:81:d6:f0:77:92:28:4c:5c:72:ee:b9:25:6d:56:ce:
         3b:c7:5b:1f:52:f2:3f:30:a0:35:09:89:e6:14:89:a5:fc:85:
         9b:96:a7:d6:52:3c:65:14:6e:08:73:d7:f2:c7:a5:cb:3a:23:
         a1:46:a5:f5:62:5d:8d:7a:0c:3e:ae:5f:71:0a:6e:af:dd:09:
         da:ec:50:a3:90:23:ae:0a:4a:b7:88:73:6d:95:a6:8a:32:f0:
         e5:ff:64:4e:7d:fc:2d:ca:75:c8:d9:8a:e4:4c:10:a7:05:e9:
         33:1d:89:a8:d8:e3:83:00:64:29:ef:a2:80:d4:79:7d:15:f1:
         df:c0:77:04:ca:64:4b:fe:e9:87:61:fc:96:0b:69:88:71:71:
         6f:24:24:3d:1c:71:7a:f5:dd:3f:f5:40:59:1f:19:14:6a:10:
         d8:46:99:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJQhgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjMwOTI1
MTcxMjQ4WhcNMjUwOTI2MTcxMjQ4WjAzMTEwLwYDVQQDEyg5NWRlMWU2ZDNhMDJj
ZDg4N2U2NDJlMjkwZGExY2UxNjY5ZmYxMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgVRfwnHa1e4krKz0aF7D9vtW660j8hiIKUoNU1+0GVHYUaGS
L6eRqUzP2sOWqAEyP/5UNSUO7cOVns+lZDo/eB/czX9fEjynA+9Akcl7PT7WtK67
cdkVZJXByef4GZgh3QfTi/Rnl6V8dHUAy8kqIx6ZSkqNVAz/AARTGPYOeL7mZFx7
lbovJCq6wJ8I/D1XEc+hFsoeFyUqY+pMN6yXSNlB9OtVQyyoDuur3r94/8Lf4diL
eXSu/m67WYtxI68nYamONdaAPc4BWkQWWZmk+h+E9d8TspC+jm+Im2ppmYgX1XPg
mMZY1KXgIWQ+VtskwbqqSaKgkwFOTWGyy9X5kQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLbdzUv05HLDnex/ShciWTGaak21MB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0Lzk1ZGUxZTZkM2EwMmNkODg3ZTY0MmUyOTBkYTFjZTE2NjlmZjEwNWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhd4zANBgkqhkiG9w0BAQsFAAOCAQEAf/wC4i/1FEuGfhvf
NSwe5FAkAMhkg0oVPMC4YNs12F7HC3w4XHV02UuCCgWI0WITFjHy+RmC/8fbyrXn
V+H1dbAVRVSDhYvQoSI7UoXxEfeCr0NGWU7AJ1zRmNjKgdbwd5IoTFxy7rklbVbO
O8dbH1LyPzCgNQmJ5hSJpfyFm5an1lI8ZRRuCHPX8selyzojoUal9WJdjXoMPq5f
cQpur90J2uxQo5AjrgpKt4hzbZWmijLw5f9kTn38Lcp1yNmK5EwQpwXpMx2JqNjj
gwBkKe+igNR5fRXx38B3BMpkS/7ph2H8lgtpiHFxbyQkPRxxevXdP/VAWR8ZFGoQ
2EaZTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org