Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/b54cf20891c2f74884b64e73208e9b49dfbe9292.roa
File:                     b54cf20891c2f74884b64e73208e9b49dfbe9292.roa (raw, json)
Hash identifier:          EKqhSmkcyEFsjE+scBUQBdSM+VNGubKkI71M5HoVuXc=
Subject key identifier:   23:0D:2B:1D:CC:19:33:67:DB:0D:EB:02:38:7B:B4:E5:AA:4C:32:5C
Certificate issuer:       /CN=f83c7972f748e456afbce3d2da7d5d9e8484b933
Certificate serial:       17406F
Authority key identifier: 53:F6:B9:65:4D:6B:AF:1B:42:DD:5B:87:4A:9B:32:30:63:33:64:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f83c7972f748e456afbce3d2da7d5d9e8484b933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/b54cf20891c2f74884b64e73208e9b49dfbe9292.roa
Signing time:             Thu 03 Aug 2023 23:09:43 +0000
ROA not before:           Wed 02 Aug 2023 23:09:42 +0000
ROA not after:            Thu 03 Aug 2028 23:09:42 +0000
asID:                     265844
IP address blocks:        200.115.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523823 (0x17406f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83c7972f748e456afbce3d2da7d5d9e8484b933
        Validity
            Not Before: Aug  2 23:09:42 2023 GMT
            Not After : Aug  3 23:09:42 2028 GMT
        Subject: CN=b54cf20891c2f74884b64e73208e9b49dfbe9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:24:4b:fd:a0:8e:05:ab:a8:89:91:af:6f:
                    d0:3f:04:05:93:4a:0e:e6:d8:d6:3b:15:56:e2:a7:
                    55:e7:a1:5f:4a:67:61:9c:64:c1:64:f0:f0:40:6e:
                    34:05:2d:d2:eb:89:4e:14:6a:68:4f:f6:d2:fd:45:
                    21:c9:f5:ee:c3:70:84:07:79:03:0c:1c:04:0f:b0:
                    b7:67:87:7a:b4:75:59:c1:09:f3:44:0d:e9:90:a5:
                    d2:06:09:2f:14:dd:6a:c8:9c:cf:8f:ba:b9:72:78:
                    77:4a:aa:2d:1f:b5:f6:08:81:1e:cb:d2:77:8e:36:
                    7f:98:95:46:f8:17:06:8c:b8:22:53:40:cb:91:7f:
                    8c:dc:6b:82:64:0d:dd:9e:b8:6d:11:3a:f9:2e:de:
                    c2:f0:9c:e9:f7:69:16:96:8a:8c:71:c2:2f:e9:c6:
                    5b:ad:ba:ed:a9:35:1d:ed:b6:01:ab:dd:c3:8b:bb:
                    b1:6b:2f:3c:82:69:e7:e5:57:1a:7c:64:5a:3b:83:
                    4d:d9:f9:8e:1a:a4:4c:46:af:c5:39:89:b0:8b:15:
                    b3:d0:e3:7a:3e:f6:a2:e8:1e:a4:02:96:0f:fc:7c:
                    3e:0e:f5:a1:f3:7c:d8:6e:5b:9b:09:0e:e7:a3:f0:
                    87:54:11:b1:3f:22:94:9e:90:d1:28:a1:7f:c1:4c:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:2B:1D:CC:19:33:67:DB:0D:EB:02:38:7B:B4:E5:AA:4C:32:5C
            X509v3 Authority Key Identifier:
                keyid:53:F6:B9:65:4D:6B:AF:1B:42:DD:5B:87:4A:9B:32:30:63:33:64:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f83c7972f748e456afbce3d2da7d5d9e8484b933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/b54cf20891c2f74884b64e73208e9b49dfbe9292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/f83c7972f748e456afbce3d2da7d5d9e8484b933.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e2:31:4c:b9:8a:9e:c1:66:cf:ce:9b:09:e5:76:89:90:e2:
         4a:f5:50:c2:1a:33:24:6b:bd:5a:7c:99:3a:e9:db:50:ea:69:
         0a:fd:d1:82:f7:6d:86:82:5c:a3:e7:11:e2:98:26:cf:4a:bc:
         31:f0:0e:38:25:10:f9:95:59:20:c0:bc:ad:42:2a:bd:c6:f5:
         41:ce:38:bc:01:d4:e1:ae:d0:d2:54:2f:61:8a:b9:70:a6:3a:
         ad:41:38:e3:2e:52:c2:b8:14:44:d9:15:7f:f7:1f:b3:84:96:
         2f:13:e3:92:7a:60:ef:8a:bd:82:6b:08:e8:9c:bf:59:6f:e7:
         84:7f:ed:b5:38:5a:1a:31:9f:8a:63:9c:f8:96:37:8b:da:1f:
         5d:4a:0d:79:c8:49:dc:5f:19:47:47:7c:a2:61:79:bf:c9:3d:
         d5:f7:50:9a:98:9a:d7:76:75:e2:2a:ee:d4:2b:cd:e9:59:81:
         6c:89:b9:68:78:b6:15:39:18:56:a6:e8:ad:33:43:e8:24:58:
         b5:84:fc:3e:7b:f7:8d:4d:b7:6d:49:0e:1e:ae:c8:fa:19:4c:
         8b:1b:96:83:d0:90:e0:52:6e:65:41:51:14:55:bd:98:7a:0f:
         22:57:52:58:c5:05:f5:c0:22:d5:0d:5e:02:19:13:fe:84:e2:
         fd:ef:5e:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF0BvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
M2M3OTcyZjc0OGU0NTZhZmJjZTNkMmRhN2Q1ZDllODQ4NGI5MzMwHhcNMjMwODAy
MjMwOTQyWhcNMjgwODAzMjMwOTQyWjAzMTEwLwYDVQQDEyhiNTRjZjIwODkxYzJm
NzQ4ODRiNjRlNzMyMDhlOWI0OWRmYmU5MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6MMkS/2gjgWrqImRr2/QPwQFk0oO5tjWOxVW4qdV56FfSmdh
nGTBZPDwQG40BS3S64lOFGpoT/bS/UUhyfXuw3CEB3kDDBwED7C3Z4d6tHVZwQnz
RA3pkKXSBgkvFN1qyJzPj7q5cnh3SqotH7X2CIEey9J3jjZ/mJVG+BcGjLgiU0DL
kX+M3GuCZA3dnrhtETr5Lt7C8Jzp92kWloqMccIv6cZbrbrtqTUd7bYBq93Di7ux
ay88gmnn5VcafGRaO4NN2fmOGqRMRq/FOYmwixWz0ON6Pvai6B6kApYP/Hw+DvWh
83zYblubCQ7no/CHVBGxPyKUnpDRKKF/wUydSwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCMNKx3MGTNn2w3rAjh7tOWqTDJcMB8GA1UdIwQYMBaAFFP2uWVNa68bQt1b
h0qbMjBjM2QNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgzYzc5
NzJmNzQ4ZTQ1NmFmYmNlM2QyZGE3ZDVkOWU4NDg0YjkzMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI5OWQxNTMtMjNkYS00M2I3LThjNGEtMTJlZjM4
ZmRjMzU0L2I1NGNmMjA4OTFjMmY3NDg4NGI2NGU3MzIwOGU5YjQ5ZGZiZTkyOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjk5ZDE1My0yM2RhLTQzYjctOGM0YS0xMmVm
MzhmZGMzNTQvZjgzYzc5NzJmNzQ4ZTQ1NmFmYmNlM2QyZGE3ZDVkOWU4NDg0Yjkz
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzDjANBgkqhkiG9w0BAQsFAAOCAQEAOOIxTLmKnsFmz86b
CeV2iZDiSvVQwhozJGu9WnyZOunbUOppCv3RgvdthoJco+cR4pgmz0q8MfAOOCUQ
+ZVZIMC8rUIqvcb1Qc44vAHU4a7Q0lQvYYq5cKY6rUE44y5SwrgURNkVf/cfs4SW
LxPjknpg74q9gmsI6Jy/WW/nhH/ttThaGjGfimOc+JY3i9ofXUoNechJ3F8ZR0d8
omF5v8k91fdQmpia13Z14iru1CvN6VmBbIm5aHi2FTkYVqborTND6CRYtYT8Pnv3
jU23bUkOHq7I+hlMixuWg9CQ4FJuZUFRFFW9mHoPIldSWMUF9cAi1Q1eAhkT/oTi
/e9eSg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org