Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/6355c16c1e93e6ca04c37f08345712b3a922c1b6.roa
File:                     6355c16c1e93e6ca04c37f08345712b3a922c1b6.roa (raw, json)
Hash identifier:          Skt4gFnvMuI8Kjha0hJSzBHF18lYVsXeYNc/Sy5Q3pI=
Subject key identifier:   7C:2C:6B:56:B7:59:96:11:17:D6:C5:A7:1F:43:F1:D0:2C:3C:70:79
Certificate issuer:       /CN=df2dedcd12e6d3557cb0c4aed3914512c97a3eac
Certificate serial:       05F9BC
Authority key identifier: 9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/6355c16c1e93e6ca04c37f08345712b3a922c1b6.roa
Signing time:             Thu 21 Mar 2024 06:41:59 +0000
ROA not before:           Thu 21 Mar 2024 06:41:59 +0000
ROA not after:            Sat 21 Mar 2026 06:41:59 +0000
asID:                     269913
IP address blocks:        200.123.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391612 (0x5f9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2dedcd12e6d3557cb0c4aed3914512c97a3eac
        Validity
            Not Before: Mar 21 06:41:59 2024 GMT
            Not After : Mar 21 06:41:59 2026 GMT
        Subject: CN=6355c16c1e93e6ca04c37f08345712b3a922c1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:21:63:cf:ed:c3:e2:38:40:1e:eb:99:c8:
                    89:27:cb:39:4a:85:9d:bb:1c:5b:7c:11:52:71:a9:
                    e1:43:6b:5d:62:77:5a:a0:28:ce:dc:84:99:10:84:
                    60:26:dd:63:81:9b:91:02:8c:91:20:91:fa:ff:43:
                    09:ef:30:08:de:74:3c:03:d2:df:cc:81:87:4d:81:
                    d4:ec:c0:57:16:c6:4e:d0:8f:89:18:c7:40:c4:c5:
                    ad:81:e3:0a:14:72:4d:60:78:a6:2c:0a:37:45:97:
                    e3:7a:e1:8f:e6:8a:ed:ea:a1:1f:2f:f5:4c:10:f7:
                    06:d6:25:73:5a:2b:1e:95:6e:45:b9:22:6a:e0:06:
                    42:27:bb:ee:3c:ee:48:16:0f:71:23:cd:00:4f:6e:
                    e5:80:e1:65:72:f4:a2:ef:69:d8:0e:e9:d4:2c:07:
                    8e:64:55:03:a7:a5:c8:b4:64:73:d1:cd:da:72:2f:
                    f8:75:a6:0b:5e:0f:3d:78:34:d4:d8:e7:4f:e0:79:
                    90:8e:82:08:8c:ca:2c:a1:3b:ce:e7:e3:ce:b4:4a:
                    6d:d3:cc:9e:78:8a:43:b8:5f:5c:61:00:f4:f6:03:
                    02:f3:1e:30:6c:81:8a:2e:e0:9d:f9:87:6f:69:1d:
                    89:9c:36:25:c0:f0:e0:9e:4d:e4:bd:95:4b:eb:ba:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:6B:56:B7:59:96:11:17:D6:C5:A7:1F:43:F1:D0:2C:3C:70:79
            X509v3 Authority Key Identifier:
                keyid:9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/6355c16c1e93e6ca04c37f08345712b3a922c1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:36:26:2b:9d:4f:42:14:94:87:96:18:32:27:f8:59:87:22:
         66:35:05:53:0f:ab:d8:cc:6b:0f:0b:87:3e:cc:95:12:6a:7b:
         18:54:b3:5d:5a:5c:0f:da:1b:eb:17:0e:83:a2:b2:26:b9:d8:
         7c:bb:3d:3f:b0:56:9e:3e:70:4a:e0:ed:bb:b7:63:36:4f:d2:
         5c:f6:de:a7:db:ac:a0:72:0f:b1:64:f3:3f:a5:51:49:eb:cd:
         e2:ae:23:42:6d:9d:5f:37:b5:81:ef:97:9a:a8:5e:bf:25:b0:
         62:0c:a6:59:54:4d:7d:cb:3d:8f:a6:d2:43:8e:19:17:38:21:
         5f:28:f9:94:dc:51:29:7e:3b:3e:db:19:df:f8:f4:d7:a5:83:
         7f:97:b5:3d:2a:56:68:50:70:42:d5:4a:18:92:ca:fb:11:0c:
         2f:ed:c3:46:61:11:63:b8:29:8e:d2:24:e0:4a:99:71:92:4c:
         b8:ad:63:a9:9b:f7:2b:07:77:cf:b4:f8:b4:e3:3c:80:b8:db:
         46:04:7d:ff:c1:c4:ba:cb:fd:fc:e6:0d:98:b7:f4:0c:38:78:
         8a:19:12:27:e0:a5:2e:1c:c4:9c:07:6d:de:15:14:8e:9b:e4:
         6e:c8:19:c2:d2:ba:c5:13:b8:90:d2:6b:b0:43:a9:51:29:64:
         b3:20:9b:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBfm8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MmRlZGNkMTJlNmQzNTU3Y2IwYzRhZWQzOTE0NTEyYzk3YTNlYWMwHhcNMjQwMzIx
MDY0MTU5WhcNMjYwMzIxMDY0MTU5WjAzMTEwLwYDVQQDEyg2MzU1YzE2YzFlOTNl
NmNhMDRjMzdmMDgzNDU3MTJiM2E5MjJjMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhBYhY8/tw+I4QB7rmciJJ8s5SoWduxxbfBFScanhQ2tdYnda
oCjO3ISZEIRgJt1jgZuRAoyRIJH6/0MJ7zAI3nQ8A9LfzIGHTYHU7MBXFsZO0I+J
GMdAxMWtgeMKFHJNYHimLAo3RZfjeuGP5ort6qEfL/VMEPcG1iVzWiselW5FuSJq
4AZCJ7vuPO5IFg9xI80AT27lgOFlcvSi72nYDunULAeOZFUDp6XItGRz0c3aci/4
daYLXg89eDTU2OdP4HmQjoIIjMosoTvO5+POtEpt08yeeIpDuF9cYQD09gMC8x4w
bIGKLuCd+YdvaR2JnDYlwPDgnk3kvZVL67pKJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHwsa1a3WZYRF9bFpx9D8dAsPHB5MB8GA1UdIwQYMBaAFJrrxSbi5K/lJjXk
oIXg3T3Zh/BOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyZGVk
Y2QxMmU2ZDM1NTdjYjBjNGFlZDM5MTQ1MTJjOTdhM2VhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZlNjkwY2ItZWQwZS00ZTJjLTgzYjktYjZiZGRl
NDYwM2E2LzYzNTVjMTZjMWU5M2U2Y2EwNGMzN2YwODM0NTcxMmIzYTkyMmMxYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmU2OTBjYi1lZDBlLTRlMmMtODNiOS1iNmJk
ZGU0NjAzYTYvZGYyZGVkY2QxMmU2ZDM1NTdjYjBjNGFlZDM5MTQ1MTJjOTdhM2Vh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch75jANBgkqhkiG9w0BAQsFAAOCAQEAVjYmK51PQhSUh5YY
Mif4WYciZjUFUw+r2MxrDwuHPsyVEmp7GFSzXVpcD9ob6xcOg6KyJrnYfLs9P7BW
nj5wSuDtu7djNk/SXPbep9usoHIPsWTzP6VRSevN4q4jQm2dXze1ge+XmqhevyWw
YgymWVRNfcs9j6bSQ44ZFzghXyj5lNxRKX47PtsZ3/j016WDf5e1PSpWaFBwQtVK
GJLK+xEML+3DRmERY7gpjtIk4EqZcZJMuK1jqZv3Kwd3z7T4tOM8gLjbRgR9/8HE
usv9/OYNmLf0DDh4ihkSJ+ClLhzEnAdt3hUUjpvkbsgZwtK6xRO4kNJrsEOpUSlk
syCbZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org