Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/4fa97fab96ac56f762d040df933e7907c78a7c8b.roa
File:                     4fa97fab96ac56f762d040df933e7907c78a7c8b.roa (raw, json)
Hash identifier:          sL2lnWRPRMVipy2+DGkqrmkYBU/mMRfc4pg4BQF8kWc=
Subject key identifier:   C3:1D:83:FD:99:DC:9D:E4:03:8D:E1:A4:F9:66:A1:EA:5F:43:46:C5
Certificate issuer:       /CN=f83c7972f748e456afbce3d2da7d5d9e8484b933
Certificate serial:       1741DA
Authority key identifier: 53:F6:B9:65:4D:6B:AF:1B:42:DD:5B:87:4A:9B:32:30:63:33:64:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f83c7972f748e456afbce3d2da7d5d9e8484b933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/4fa97fab96ac56f762d040df933e7907c78a7c8b.roa
Signing time:             Thu 03 Aug 2023 23:09:44 +0000
ROA not before:           Wed 02 Aug 2023 23:09:42 +0000
ROA not after:            Thu 03 Aug 2028 23:09:42 +0000
asID:                     265844
IP address blocks:        200.115.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524186 (0x1741da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83c7972f748e456afbce3d2da7d5d9e8484b933
        Validity
            Not Before: Aug  2 23:09:42 2023 GMT
            Not After : Aug  3 23:09:42 2028 GMT
        Subject: CN=4fa97fab96ac56f762d040df933e7907c78a7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:01:e0:b1:51:28:18:bf:47:fb:e1:aa:10:
                    f1:c0:d0:34:43:4f:d1:e9:9f:9a:de:52:39:c1:c6:
                    45:74:d1:b6:87:96:07:20:3f:d6:7e:af:d9:ea:87:
                    3c:88:5f:c0:dc:c2:42:74:fd:a0:b9:95:19:07:c1:
                    d3:7c:02:c8:4c:b9:20:d4:6d:69:5d:62:ba:b7:d4:
                    28:d4:9b:32:31:9b:ad:8c:77:44:5a:44:46:54:81:
                    48:a4:c3:03:a6:dc:b4:6a:38:4e:d8:02:c9:03:5b:
                    fd:44:f1:21:a9:59:cb:58:3d:92:42:20:32:16:af:
                    33:ef:e1:d4:96:d5:3d:d4:4e:c9:11:1d:96:ed:98:
                    76:d7:f6:de:2e:1e:61:4d:c7:bf:65:96:e8:d7:64:
                    f5:f5:e6:ae:f5:ec:5c:3f:e0:da:c0:df:23:72:94:
                    b2:ec:bf:71:d6:bc:bb:17:45:91:65:96:c0:c4:ea:
                    64:96:84:7f:3b:33:35:09:e6:33:da:d1:41:8b:de:
                    1f:46:e2:8a:4d:43:a9:51:72:88:a1:2a:c7:85:0f:
                    39:1b:84:1a:5f:06:74:14:52:17:97:04:d3:0f:45:
                    ff:b8:23:92:c5:67:6d:5e:87:b4:ab:c4:38:eb:9d:
                    5f:e4:65:62:e7:86:22:49:2a:44:d1:34:b7:e3:9b:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:83:FD:99:DC:9D:E4:03:8D:E1:A4:F9:66:A1:EA:5F:43:46:C5
            X509v3 Authority Key Identifier:
                keyid:53:F6:B9:65:4D:6B:AF:1B:42:DD:5B:87:4A:9B:32:30:63:33:64:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f83c7972f748e456afbce3d2da7d5d9e8484b933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/4fa97fab96ac56f762d040df933e7907c78a7c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/f83c7972f748e456afbce3d2da7d5d9e8484b933.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:1a:3e:3d:73:95:ff:2f:80:cd:fc:9f:25:ea:c5:6a:56:
         28:65:a3:9c:a7:a8:b0:c9:ae:15:e4:2e:ab:65:76:ab:f6:cb:
         3e:8f:e7:4c:a6:fb:00:29:ac:b0:7e:ef:8a:c1:ef:3b:b8:6a:
         bd:74:df:58:bb:b8:db:0e:68:a9:0a:cf:b1:d4:af:9c:74:9a:
         14:d1:47:50:1f:98:b7:d2:88:e6:83:df:db:ff:47:ed:ec:87:
         34:e1:58:45:a3:35:72:9e:58:dc:4e:da:14:97:a3:85:45:28:
         3f:04:d3:70:3d:de:e9:29:88:f9:93:34:bb:11:c5:ce:ec:8e:
         ec:30:d0:7c:94:c0:f5:fa:e6:aa:25:1c:ef:f1:e1:28:3a:e0:
         4a:be:4f:27:ce:83:7c:48:3b:13:0b:d7:5e:04:af:3f:f3:a0:
         9e:45:41:7a:9b:b2:6a:ab:43:a0:b8:86:33:18:27:6e:92:ba:
         f6:fd:60:f8:f0:59:d6:24:eb:4d:d5:e1:4a:7b:24:b3:ac:e5:
         7c:fe:10:c6:6e:af:4a:e3:2b:ef:e6:ef:1c:2b:52:26:ef:64:
         9a:39:3a:34:5d:80:f9:69:69:44:63:3f:8b:55:48:22:c5:fe:
         e3:03:62:e6:86:49:3c:dd:52:43:39:e2:b8:97:b0:aa:3e:94:
         67:78:95:cf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF0HaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
M2M3OTcyZjc0OGU0NTZhZmJjZTNkMmRhN2Q1ZDllODQ4NGI5MzMwHhcNMjMwODAy
MjMwOTQyWhcNMjgwODAzMjMwOTQyWjAzMTEwLwYDVQQDEyg0ZmE5N2ZhYjk2YWM1
NmY3NjJkMDQwZGY5MzNlNzkwN2M3OGE3YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgmoB4LFRKBi/R/vhqhDxwNA0Q0/R6Z+a3lI5wcZFdNG2h5YH
ID/Wfq/Z6oc8iF/A3MJCdP2guZUZB8HTfALITLkg1G1pXWK6t9Qo1JsyMZutjHdE
WkRGVIFIpMMDpty0ajhO2ALJA1v9RPEhqVnLWD2SQiAyFq8z7+HUltU91E7JER2W
7Zh21/beLh5hTce/ZZbo12T19eau9excP+DawN8jcpSy7L9x1ry7F0WRZZbAxOpk
loR/OzM1CeYz2tFBi94fRuKKTUOpUXKIoSrHhQ85G4QaXwZ0FFIXlwTTD0X/uCOS
xWdtXoe0q8Q4651f5GVi54YiSSpE0TS345uKNwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMMdg/2Z3J3kA43hpPlmoepfQ0bFMB8GA1UdIwQYMBaAFFP2uWVNa68bQt1b
h0qbMjBjM2QNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgzYzc5
NzJmNzQ4ZTQ1NmFmYmNlM2QyZGE3ZDVkOWU4NDg0YjkzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI5OWQxNTMtMjNkYS00M2I3LThjNGEtMTJlZjM4
ZmRjMzU0LzRmYTk3ZmFiOTZhYzU2Zjc2MmQwNDBkZjkzM2U3OTA3Yzc4YTdjOGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjk5ZDE1My0yM2RhLTQzYjctOGM0YS0xMmVm
MzhmZGMzNTQvZjgzYzc5NzJmNzQ4ZTQ1NmFmYmNlM2QyZGE3ZDVkOWU4NDg0Yjkz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzDzANBgkqhkiG9w0BAQsFAAOCAQEAXgYaPj1zlf8vgM38
nyXqxWpWKGWjnKeosMmuFeQuq2V2q/bLPo/nTKb7ACmssH7visHvO7hqvXTfWLu4
2w5oqQrPsdSvnHSaFNFHUB+Yt9KI5oPf2/9H7eyHNOFYRaM1cp5Y3E7aFJejhUUo
PwTTcD3e6SmI+ZM0uxHFzuyO7DDQfJTA9frmqiUc7/HhKDrgSr5PJ86DfEg7EwvX
XgSvP/OgnkVBepuyaqtDoLiGMxgnbpK69v1g+PBZ1iTrTdXhSnsks6zlfP4Qxm6v
SuMr7+bvHCtSJu9kmjk6NF2A+WlpRGM/i1VIIsX+4wNi5oZJPN1SQzniuJewqj6U
Z3iVzw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org