Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/2681be54065c212ce898ab740973456a0c3e283d.roa
File:                     2681be54065c212ce898ab740973456a0c3e283d.roa (raw, json)
Hash identifier:          G/ojsDVaXgKNXONVB2c65B8hpnb/PyMRXLKnMh7WDOU=
Subject key identifier:   C1:D1:C0:1E:DE:6F:F1:A7:E2:CF:F8:E5:51:C5:DB:F9:2B:84:CF:CC
Certificate issuer:       /CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
Certificate serial:       1FDD
Authority key identifier: 07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/2681be54065c212ce898ab740973456a0c3e283d.roa
Signing time:             Tue 25 Apr 2023 20:44:47 +0000
ROA not before:           Mon 24 Apr 2023 20:44:47 +0000
ROA not after:            Fri 25 Apr 2025 20:44:47 +0000
asID:                     270078
IP address blocks:        200.71.80.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8157 (0x1fdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
        Validity
            Not Before: Apr 24 20:44:47 2023 GMT
            Not After : Apr 25 20:44:47 2025 GMT
        Subject: CN=2681be54065c212ce898ab740973456a0c3e283d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:3d:2e:95:73:0d:ee:39:51:41:71:39:65:
                    49:62:7c:7b:0a:3d:1c:fd:cc:de:c7:b7:27:52:69:
                    02:65:0a:00:8e:f8:9f:95:88:80:3f:e6:35:1b:10:
                    d4:07:d7:12:4f:71:34:6b:67:e5:05:d0:c3:05:38:
                    bc:19:4b:1c:71:59:33:a4:a0:56:5f:b6:2d:85:dd:
                    4c:e1:64:21:85:11:e6:49:6e:d7:eb:19:7d:d4:54:
                    04:13:83:9e:6a:3d:4c:2d:8e:ef:3a:40:47:e3:2e:
                    84:6d:7e:c7:b4:7c:e8:df:0d:fd:ca:4c:d0:a0:21:
                    e0:5b:0a:6f:78:45:0d:9d:5f:a4:06:68:ca:54:34:
                    23:6c:cd:91:af:a1:53:4f:a0:cb:ea:59:2c:fd:b9:
                    4d:9e:71:59:f4:9e:2b:d1:52:bb:db:70:ad:98:f0:
                    ce:fc:98:56:64:9a:94:f7:29:cf:ba:40:02:42:dc:
                    14:c0:e0:66:ef:b1:d6:8a:ce:5e:1a:68:ba:71:ab:
                    9a:f0:ee:d8:0a:74:3b:8e:cc:da:e7:64:89:91:91:
                    bc:aa:5c:42:43:3f:8f:c4:a9:c7:14:23:94:6f:ca:
                    43:d4:81:60:9f:78:51:fe:44:6a:8f:aa:16:c0:6c:
                    53:27:16:b2:b0:28:95:03:93:09:c7:a8:6c:16:2d:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D1:C0:1E:DE:6F:F1:A7:E2:CF:F8:E5:51:C5:DB:F9:2B:84:CF:CC
            X509v3 Authority Key Identifier:
                keyid:07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/2681be54065c212ce898ab740973456a0c3e283d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/c958d4e8b3e978aac802f96e9b7d380f9995c148.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:d9:c5:4b:ed:e5:83:2f:8a:ec:c1:99:ab:66:4a:ce:64:
         64:67:67:0a:85:2f:0a:99:e8:3d:ee:c8:45:ba:e2:d9:20:1e:
         d7:8d:0c:27:7f:84:f3:7a:93:7f:15:fa:09:61:4c:5d:72:9e:
         7c:e8:b5:79:2d:25:1d:4a:ff:35:08:3d:76:df:b6:11:d7:2e:
         32:0c:b0:e3:c2:d9:84:80:92:7b:54:d5:e9:a3:24:54:ea:4f:
         d5:0e:84:6c:3d:65:62:bb:4c:5d:07:69:71:0a:18:b7:69:8b:
         0b:93:16:b1:57:1e:83:8b:70:b3:1c:30:8a:86:d8:ec:d6:46:
         16:24:06:f5:de:8f:b3:15:61:b9:46:18:af:8b:99:13:65:a2:
         d1:34:95:2e:f0:27:d2:c5:10:ec:3f:85:97:92:8d:7e:d2:5a:
         80:e8:a5:af:3d:21:73:43:ff:70:3a:3d:b0:77:6f:af:ab:4c:
         db:64:ae:a5:8d:17:35:2c:67:d7:37:7c:51:1d:d9:c5:15:f2:
         63:68:f7:75:c9:2c:7b:81:bf:cd:ac:14:73:f7:d5:ba:66:a3:
         d0:b0:b4:fd:d4:72:9c:cf:bb:6c:81:4a:1a:97:82:58:5d:90:
         b8:f9:53:0f:06:16:1a:98:b6:a0:6a:eb:d5:9d:36:93:d6:0f:
         be:d0:d1:85
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICH90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYzk1
OGQ0ZThiM2U5NzhhYWM4MDJmOTZlOWI3ZDM4MGY5OTk1YzE0ODAeFw0yMzA0MjQy
MDQ0NDdaFw0yNTA0MjUyMDQ0NDdaMDMxMTAvBgNVBAMTKDI2ODFiZTU0MDY1YzIx
MmNlODk4YWI3NDA5NzM0NTZhMGMzZTI4M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCEGj0ulXMN7jlRQXE5ZUlifHsKPRz9zN7HtydSaQJlCgCO+J+V
iIA/5jUbENQH1xJPcTRrZ+UF0MMFOLwZSxxxWTOkoFZfti2F3UzhZCGFEeZJbtfr
GX3UVAQTg55qPUwtju86QEfjLoRtfse0fOjfDf3KTNCgIeBbCm94RQ2dX6QGaMpU
NCNszZGvoVNPoMvqWSz9uU2ecVn0nivRUrvbcK2Y8M78mFZkmpT3Kc+6QAJC3BTA
4GbvsdaKzl4aaLpxq5rw7tgKdDuOzNrnZImRkbyqXEJDP4/EqccUI5RvykPUgWCf
eFH+RGqPqhbAbFMnFrKwKJUDkwnHqGwWLemvAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUwdHAHt5v8afiz/jlUcXb+SuEz8wwHwYDVR0jBBgwFoAUB82oCpBv8qriaWUF
IXhebUT5PFowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jOTU4ZDRl
OGIzZTk3OGFhYzgwMmY5NmU5YjdkMzgwZjk5OTVjMTQ4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mOGRlZTI2MS03YmZmLTRhOWUtOTk3Yy02YmEzNTE4
ODIzMWYvMjY4MWJlNTQwNjVjMjEyY2U4OThhYjc0MDk3MzQ1NmEwYzNlMjgzZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y4ZGVlMjYxLTdiZmYtNGE5ZS05OTdjLTZiYTM1
MTg4MjMxZi9jOTU4ZDRlOGIzZTk3OGFhYzgwMmY5NmU5YjdkMzgwZjk5OTVjMTQ4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQByEdQMA0GCSqGSIb3DQEBCwUAA4IBAQBa79nFS+3lgy+K7MGZ
q2ZKzmRkZ2cKhS8Kmeg97shFuuLZIB7XjQwnf4TzepN/FfoJYUxdcp586LV5LSUd
Sv81CD1237YR1y4yDLDjwtmEgJJ7VNXpoyRU6k/VDoRsPWViu0xdB2lxChi3aYsL
kxaxVx6Di3CzHDCKhtjs1kYWJAb13o+zFWG5Rhivi5kTZaLRNJUu8CfSxRDsP4WX
ko1+0lqA6KWvPSFzQ/9wOj2wd2+vq0zbZK6ljRc1LGfXN3xRHdnFFfJjaPd1ySx7
gb/NrBRz99W6ZqPQsLT91HKcz7tsgUoal4JYXZC4+VMPBhYamLagauvVnTaT1g++
0NGF
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org