Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa
File:                     bcad812db3357ade25d5fbba3ec501a2079e6a05.roa (raw, json)
Hash identifier:          ThO8f8HpdTx+8AUuiaaIPncufatiqPd9i79uCaKZs8w=
Subject key identifier:   1E:82:61:EF:3C:BB:1C:03:84:FA:BB:57:43:04:7F:17:9E:E4:13:96
Certificate issuer:       /CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Certificate serial:       118F03
Authority key identifier: AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa
Signing time:             Sat 20 May 2023 08:30:01 +0000
ROA not before:           Fri 19 May 2023 08:30:01 +0000
ROA not after:            Sun 18 May 2025 08:30:01 +0000
asID:                     28458
IP address blocks:        200.106.164.0/24 maxlen: 24
                          200.106.165.0/24 maxlen: 24
                          200.106.166.0/24 maxlen: 24
                          200.106.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150723 (0x118f03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
        Validity
            Not Before: May 19 08:30:01 2023 GMT
            Not After : May 18 08:30:01 2025 GMT
        Subject: CN=bcad812db3357ade25d5fbba3ec501a2079e6a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:3e:ba:23:37:4c:fd:59:78:7f:c8:11:e0:
                    2a:db:fc:49:6f:2f:f7:ef:d5:3e:60:13:f1:63:ad:
                    d8:3c:93:6d:9d:9f:ef:7e:d7:a9:20:21:db:a2:d6:
                    90:e1:2d:91:28:87:e7:e4:5e:64:c1:20:af:ea:da:
                    63:6f:9a:04:f8:66:c9:96:8f:cb:83:2a:5e:97:70:
                    c9:49:4d:1d:7c:db:3e:0e:d1:d4:2c:56:4b:90:d8:
                    de:93:15:8b:25:7f:57:6e:ba:ea:0e:72:f1:77:f5:
                    2e:9f:b6:1c:d7:81:d9:9d:13:f7:2c:2b:a7:03:4e:
                    d8:2a:b8:73:75:42:af:60:e9:6d:6c:56:6e:00:f5:
                    17:23:0b:fd:82:5e:20:c2:37:e5:19:6a:23:79:b6:
                    6e:c8:5d:87:b9:79:28:e5:af:fd:e4:9c:26:95:3e:
                    73:4f:6c:4f:dd:a8:66:fa:9b:34:ef:41:35:68:d1:
                    e1:0d:ac:aa:06:1d:96:f2:23:2c:fc:96:81:c5:85:
                    a6:73:29:14:bb:d7:04:d5:41:7c:39:ea:13:1d:83:
                    11:1e:92:9d:18:47:d5:9c:2e:fa:4f:40:b5:09:b7:
                    eb:71:83:b8:84:9b:dd:3b:d3:71:52:73:2f:9d:86:
                    98:f8:3b:9a:89:be:06:42:b0:fe:2f:51:9a:79:13:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:61:EF:3C:BB:1C:03:84:FA:BB:57:43:04:7F:17:9E:E4:13:96
            X509v3 Authority Key Identifier:
                keyid:AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/bcad812db3357ade25d5fbba3ec501a2079e6a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:45:46:62:1f:fd:32:fa:8f:80:5c:58:4f:04:54:ea:f9:2b:
         89:1e:38:7c:5a:76:ce:48:7e:db:6b:d6:c7:d6:1e:c6:94:f0:
         18:64:9b:a4:fc:dc:fd:c9:f8:ce:64:99:01:37:52:3c:b6:3c:
         20:9b:49:f4:d3:15:0f:ce:f6:83:f1:ae:7c:a0:ce:16:aa:e0:
         32:5a:d2:a2:ce:53:03:1c:c8:8c:6c:4a:98:ea:a9:cd:ae:2e:
         67:c9:76:5c:3f:e8:ad:61:9e:71:c0:90:33:0b:86:b0:a3:04:
         dd:b0:64:83:47:f1:8d:f5:00:3b:b4:5a:2b:94:8a:7c:4e:09:
         a7:64:a9:3e:0b:32:9e:df:21:db:a3:e3:3d:92:02:e1:16:ff:
         c0:f7:62:29:cd:c7:65:5d:86:b0:16:6a:76:c3:bc:8e:2d:44:
         ff:28:44:b5:5d:ba:98:51:d3:60:73:49:9c:3d:19:55:25:95:
         42:ff:3b:f9:94:2c:f6:6b:59:c2:39:96:4f:12:38:07:a9:7f:
         37:d2:88:f4:68:08:f0:39:0a:31:97:22:2a:08:fc:2b:6a:c2:
         19:69:6c:1d:64:18:d4:94:35:d4:0f:0d:47:9a:f2:6b:77:30:
         83:b6:73:cf:4c:3f:95:53:58:b9:3f:31:98:11:6b:a5:c4:cb:
         84:b7:8c:07
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEY8DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
OGY0MDg4YzllYzRiNTZiYzgzOGEzNDk5Zjc2OGQ1Y2Y3M2JhYjkwHhcNMjMwNTE5
MDgzMDAxWhcNMjUwNTE4MDgzMDAxWjAzMTEwLwYDVQQDEyhiY2FkODEyZGIzMzU3
YWRlMjVkNWZiYmEzZWM1MDFhMjA3OWU2YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjxQ+uiM3TP1ZeH/IEeAq2/xJby/379U+YBPxY63YPJNtnZ/v
ftepICHbotaQ4S2RKIfn5F5kwSCv6tpjb5oE+GbJlo/Lgypel3DJSU0dfNs+DtHU
LFZLkNjekxWLJX9XbrrqDnLxd/Uun7Yc14HZnRP3LCunA07YKrhzdUKvYOltbFZu
APUXIwv9gl4gwjflGWojebZuyF2HuXko5a/95JwmlT5zT2xP3ahm+ps070E1aNHh
DayqBh2W8iMs/JaBxYWmcykUu9cE1UF8OeoTHYMRHpKdGEfVnC76T0C1CbfrcYO4
hJvdO9NxUnMvnYaY+Duaib4GQrD+L1GaeRPSxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB6CYe88uxwDhPq7V0MEfxee5BOWMB8GA1UdIwQYMBaAFK++qQNjicXbVC+m
AI63XFf0iophMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjI4ZjQw
ODhjOWVjNGI1NmJjODM4YTM0OTlmNzY4ZDVjZjczYmFiOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI4OTY5ODQtYzEyZC00OWI5LWE0MjUtZjUyY2Zk
YTMxZGNlL2JjYWQ4MTJkYjMzNTdhZGUyNWQ1ZmJiYTNlYzUwMWEyMDc5ZTZhMDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjg5Njk4NC1jMTJkLTQ5YjktYTQyNS1mNTJj
ZmRhMzFkY2UvMjI4ZjQwODhjOWVjNGI1NmJjODM4YTM0OTlmNzY4ZDVjZjczYmFi
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAshqpDANBgkqhkiG9w0BAQsFAAOCAQEABUVGYh/9MvqPgFxY
TwRU6vkriR44fFp2zkh+22vWx9YexpTwGGSbpPzc/cn4zmSZATdSPLY8IJtJ9NMV
D872g/GufKDOFqrgMlrSos5TAxzIjGxKmOqpza4uZ8l2XD/orWGeccCQMwuGsKME
3bBkg0fxjfUAO7RaK5SKfE4Jp2SpPgsynt8h26PjPZIC4Rb/wPdiKc3HZV2GsBZq
dsO8ji1E/yhEtV26mFHTYHNJnD0ZVSWVQv87+ZQs9mtZwjmWTxI4B6l/N9KI9GgI
8DkKMZciKgj8K2rCGWlsHWQY1JQ11A8NR5rya3cwg7Zzz0w/lVNYuT8xmBFrpcTL
hLeMBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org