Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/8f70cff77f3c1fc7badf6f348254e61c00d172a2.roa
File:                     8f70cff77f3c1fc7badf6f348254e61c00d172a2.roa (raw, json)
Hash identifier:          LQawOUri0N34dwW6dBSQbc6Tr894dlwghdflFw9BR1M=
Subject key identifier:   88:BF:69:DC:11:63:48:FA:AC:B7:F7:6D:00:5C:9B:F9:0A:73:F2:16
Certificate issuer:       /CN=f03afcbfee5c0471b8510f9a21ac665a485757d2
Certificate serial:       03301A
Authority key identifier: 3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f03afcbfee5c0471b8510f9a21ac665a485757d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/8f70cff77f3c1fc7badf6f348254e61c00d172a2.roa
Signing time:             Wed 24 Mar 2021 14:28:57 +0000
ROA not before:           Wed 24 Mar 2021 14:28:57 +0000
ROA not after:            Tue 24 Mar 2026 14:28:57 +0000
asID:                     265707
IP address blocks:        200.115.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208922 (0x3301a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03afcbfee5c0471b8510f9a21ac665a485757d2
        Validity
            Not Before: Mar 24 14:28:57 2021 GMT
            Not After : Mar 24 14:28:57 2026 GMT
        Subject: CN=8f70cff77f3c1fc7badf6f348254e61c00d172a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:ee:ca:07:84:98:b0:01:fc:ae:cd:43:54:
                    1a:1c:99:f1:e3:71:a0:67:39:bb:6c:ea:22:1e:df:
                    c3:7e:c0:9a:74:fa:1e:12:04:b3:f8:f0:b5:6a:44:
                    59:26:1a:d7:74:bf:7b:57:e9:04:23:83:a6:72:52:
                    6c:53:83:7f:06:ac:44:ec:f7:2b:9b:f6:6d:b9:af:
                    d0:5d:d3:15:3a:0e:35:c3:b6:38:21:7a:03:36:92:
                    92:b2:03:6a:00:a7:93:8c:57:b5:81:b0:a7:e9:b9:
                    7e:22:69:ee:0c:73:e6:a4:62:87:37:83:60:88:c9:
                    07:83:a9:98:20:ca:1a:22:a8:3c:8c:68:b8:61:2b:
                    f0:4a:37:dc:f2:60:58:d1:34:02:b8:8f:7a:17:1e:
                    8d:31:07:31:9d:51:9d:de:70:ba:63:27:46:de:c2:
                    b1:77:c1:76:bb:08:7a:d8:c8:cd:c3:b5:ab:89:0d:
                    e3:b0:a3:6a:b0:d5:25:67:1a:be:0d:85:bd:01:13:
                    ca:a5:4e:0e:ef:a0:56:67:ff:16:90:f6:cc:1b:8f:
                    33:21:8d:2a:86:4c:c9:99:5e:29:ee:82:72:fc:40:
                    0e:f8:79:dd:71:10:8c:95:47:bc:70:92:52:15:3c:
                    32:b8:0f:86:25:28:07:8f:67:14:6e:23:58:3f:48:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:69:DC:11:63:48:FA:AC:B7:F7:6D:00:5C:9B:F9:0A:73:F2:16
            X509v3 Authority Key Identifier:
                keyid:3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f03afcbfee5c0471b8510f9a21ac665a485757d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/8f70cff77f3c1fc7badf6f348254e61c00d172a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/f03afcbfee5c0471b8510f9a21ac665a485757d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:02:08:11:04:46:d4:47:ab:d8:9f:93:66:7c:4f:5b:33:fe:
         15:aa:1f:e1:8a:39:c3:79:9c:c5:77:be:1c:2d:2f:ec:ea:91:
         5d:9a:e7:3f:f2:05:2e:5a:c1:53:bd:48:f5:21:81:95:c0:95:
         e1:4f:13:80:22:81:46:44:22:28:8b:89:5d:84:02:37:8a:52:
         c0:57:35:5d:55:72:9b:0b:b8:fb:b3:fa:c8:24:5f:4b:7f:98:
         8f:29:9a:1f:5f:cd:8c:97:5e:b6:d6:f7:9e:a8:19:96:a3:37:
         b7:08:cb:34:20:1c:8d:98:78:a9:c8:cd:1e:ec:b2:77:49:98:
         2d:28:e5:57:a6:7a:12:d4:c7:17:1f:67:87:9e:00:64:70:51:
         29:ce:eb:9b:f3:3d:85:56:8a:86:47:5e:df:14:2d:ac:42:a1:
         54:dc:ba:18:0c:47:19:dd:4d:00:f4:7c:60:01:87:4b:6c:05:
         e8:ab:35:92:0d:d1:61:f6:db:e3:da:14:64:0e:69:57:54:69:
         48:da:bf:ff:0f:9d:0b:6d:05:ef:d7:1b:2e:e1:23:c8:3d:ca:
         f9:52:fb:ab:9e:2a:28:b4:89:c7:a0:1d:65:72:71:27:b2:1f:
         3e:84:bb:ad:2c:41:8b:64:c3:cc:b5:e7:1b:71:4c:c7:3e:c2:
         39:d8:d6:61
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAzAaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
M2FmY2JmZWU1YzA0NzFiODUxMGY5YTIxYWM2NjVhNDg1NzU3ZDIwHhcNMjEwMzI0
MTQyODU3WhcNMjYwMzI0MTQyODU3WjAzMTEwLwYDVQQDEyg4ZjcwY2ZmNzdmM2Mx
ZmM3YmFkZjZmMzQ4MjU0ZTYxYzAwZDE3MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhMDuygeEmLAB/K7NQ1QaHJnx43GgZzm7bOoiHt/DfsCadPoe
EgSz+PC1akRZJhrXdL97V+kEI4OmclJsU4N/BqxE7Pcrm/Ztua/QXdMVOg41w7Y4
IXoDNpKSsgNqAKeTjFe1gbCn6bl+ImnuDHPmpGKHN4NgiMkHg6mYIMoaIqg8jGi4
YSvwSjfc8mBY0TQCuI96Fx6NMQcxnVGd3nC6YydG3sKxd8F2uwh62MjNw7WriQ3j
sKNqsNUlZxq+DYW9ARPKpU4O76BWZ/8WkPbMG48zIY0qhkzJmV4p7oJy/EAO+Hnd
cRCMlUe8cJJSFTwyuA+GJSgHj2cUbiNYP0gK2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIi/adwRY0j6rLf3bQBcm/kKc/IWMB8GA1UdIwQYMBaAFD17ljtzT3cKThfe
MeOyYQqOU6V1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjAzYWZj
YmZlZTVjMDQ3MWI4NTEwZjlhMjFhYzY2NWE0ODU3NTdkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjk5YTBhMmUtZTFiYS00YWUxLWJhYTEtZGI5MjVl
MTZjNzJiLzhmNzBjZmY3N2YzYzFmYzdiYWRmNmYzNDgyNTRlNjFjMDBkMTcyYTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOTlhMGEyZS1lMWJhLTRhZTEtYmFhMS1kYjky
NWUxNmM3MmIvZjAzYWZjYmZlZTVjMDQ3MWI4NTEwZjlhMjFhYzY2NWE0ODU3NTdk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzOzANBgkqhkiG9w0BAQsFAAOCAQEAQQIIEQRG1Eer2J+T
ZnxPWzP+Faof4Yo5w3mcxXe+HC0v7OqRXZrnP/IFLlrBU71I9SGBlcCV4U8TgCKB
RkQiKIuJXYQCN4pSwFc1XVVymwu4+7P6yCRfS3+YjymaH1/NjJdettb3nqgZlqM3
twjLNCAcjZh4qcjNHuyyd0mYLSjlV6Z6EtTHFx9nh54AZHBRKc7rm/M9hVaKhkde
3xQtrEKhVNy6GAxHGd1NAPR8YAGHS2wF6Ks1kg3RYfbb49oUZA5pV1RpSNq//w+d
C20F79cbLuEjyD3K+VL7q54qKLSJx6AdZXJxJ7IfPoS7rSxBi2TDzLXnG3FMxz7C
OdjWYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org