Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/0714a976171e8986e1633863002720b65040d8fa.roa
File:                     0714a976171e8986e1633863002720b65040d8fa.roa (raw, json)
Hash identifier:          pDwQHIUb/GEAaIUSW9tQRklfYyp6hBQ6BQOsrHCZtfs=
Subject key identifier:   C7:7A:A1:B6:74:E9:27:73:23:F1:92:BA:5D:7F:BC:61:5D:C6:EE:56
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       031CC4
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/0714a976171e8986e1633863002720b65040d8fa.roa
Signing time:             Thu 10 Aug 2023 14:33:18 +0000
ROA not before:           Wed 09 Aug 2023 14:33:18 +0000
ROA not after:            Sun 10 Aug 2025 14:33:18 +0000
asID:                     15311
IP address blocks:        200.54.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203972 (0x31cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:33:18 2023 GMT
            Not After : Aug 10 14:33:18 2025 GMT
        Subject: CN=0714a976171e8986e1633863002720b65040d8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:eb:10:1b:b5:4f:c7:f4:79:ac:80:57:cf:
                    95:9c:19:59:4b:fb:65:80:1e:43:05:d0:7e:42:13:
                    8d:10:0a:6b:0a:96:2d:d2:c5:eb:76:f2:10:d6:b5:
                    33:1b:18:8e:d7:fd:49:67:27:be:cd:ee:5c:44:66:
                    d3:d1:bc:8a:16:a0:cc:50:bc:69:cf:6d:56:3a:6b:
                    be:32:0b:b6:6d:4e:ae:c9:72:f8:15:94:3f:92:8c:
                    06:e4:68:dc:b5:25:a5:0c:81:cb:0f:39:c4:bf:c2:
                    5b:cf:55:23:e4:13:98:61:49:20:e2:65:4d:57:5f:
                    b8:ba:14:ad:12:06:e1:60:df:6a:b3:85:d6:0c:96:
                    b1:e1:01:ee:8f:25:3a:cc:98:fc:1c:1c:e8:10:9c:
                    02:c3:88:87:cd:f1:c5:f9:db:7b:31:52:dc:10:84:
                    20:73:7c:52:95:56:3d:65:a4:31:ff:15:69:44:98:
                    a4:45:58:14:d7:cd:da:4d:1a:62:88:29:08:4d:d0:
                    a3:8a:9d:3d:93:90:6a:46:f0:33:6e:78:5b:d1:d4:
                    45:ff:82:85:cc:89:c7:b3:5c:64:99:36:79:da:6a:
                    1a:fa:9d:c4:5b:a1:19:7c:ab:ba:c2:a8:21:95:40:
                    d1:f2:30:0a:9d:6a:0c:33:a9:37:9e:24:d6:7d:f3:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7A:A1:B6:74:E9:27:73:23:F1:92:BA:5D:7F:BC:61:5D:C6:EE:56
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/0714a976171e8986e1633863002720b65040d8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:a5:a5:55:02:88:7c:fd:be:35:38:94:0a:d1:39:97:ce:
         9b:3e:23:b1:ec:4f:bf:9a:e3:8b:90:8d:d9:2e:f2:69:a1:d7:
         37:25:20:13:c2:93:49:c6:80:41:53:e8:e1:9a:12:93:f0:6f:
         49:9d:74:cc:ca:dd:e9:3e:be:33:6e:8a:9b:9d:52:ac:74:b5:
         2c:8b:d8:cb:b9:ae:d5:03:1e:1a:f6:23:d7:60:b2:55:d6:40:
         f9:d8:b5:a3:69:26:7f:cb:b0:65:e4:19:82:51:71:6d:3d:7c:
         9b:be:eb:07:26:97:fe:95:96:4b:68:28:23:5f:ef:4e:7a:2c:
         f8:5e:d0:a9:9c:ad:c4:b7:c8:43:1a:84:0d:4f:9c:d4:06:59:
         15:02:e8:01:84:c4:0c:28:6a:a6:53:6a:6a:c4:a0:a1:f2:e3:
         8b:09:42:91:7d:cd:22:a4:9c:2f:0c:ea:90:b6:e9:ab:22:4e:
         49:a9:70:dd:be:bf:5e:d0:b2:b3:58:bb:9e:7f:7f:1d:92:63:
         7e:27:21:ff:ec:7b:2f:02:90:70:9f:93:5e:32:a8:da:56:fe:
         51:d9:09:71:2f:06:93:6b:1b:26:4a:32:40:07:4f:ea:5e:bb:
         ef:2c:9b:87:c9:65:5f:43:6b:89:53:8c:30:81:dc:eb:a1:93:
         c0:9b:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org