Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/1b5a1e1900daa5cf0f785af8d8debfeae9f3b227.roa
File:                     1b5a1e1900daa5cf0f785af8d8debfeae9f3b227.roa (raw, json)
Hash identifier:          rPzkGO8Fcfb/IPUKdsQpkc25H3QHVbzPnJwhBkAhGfg=
Subject key identifier:   87:E3:D3:8B:8B:A7:18:CA:7A:9A:9E:B2:77:A8:57:58:56:0C:0A:A4
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04E29F
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/1b5a1e1900daa5cf0f785af8d8debfeae9f3b227.roa
Signing time:             Mon 16 Oct 2023 22:06:45 +0000
ROA not before:           Sun 15 Oct 2023 22:06:45 +0000
ROA not after:            Thu 16 Oct 2025 22:06:45 +0000
asID:                     52396
IP address blocks:        200.54.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320159 (0x4e29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:06:45 2023 GMT
            Not After : Oct 16 22:06:45 2025 GMT
        Subject: CN=1b5a1e1900daa5cf0f785af8d8debfeae9f3b227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:e4:e2:20:02:31:83:fd:42:f3:dc:e0:e6:
                    a4:a5:cd:b4:c9:15:94:68:c0:71:54:32:b6:26:8b:
                    ef:fc:fe:88:a1:f3:f5:e8:cc:c0:c9:58:6c:80:1d:
                    30:50:81:cc:aa:86:75:3c:5d:98:1f:69:e8:60:f5:
                    7b:59:49:c1:d9:c5:a2:9c:28:b0:b8:4b:d8:71:ad:
                    c0:f4:97:f9:45:2c:77:ad:68:46:60:84:52:f7:f0:
                    8f:fe:df:2f:62:47:ac:fd:30:0d:ca:d8:b3:df:ac:
                    c1:67:7f:4e:dd:e3:ee:7e:29:9a:f6:a6:ab:1b:56:
                    ef:a4:e6:67:ed:64:76:e8:bc:f1:f8:94:af:e3:59:
                    33:30:05:bb:2b:ba:6c:db:c2:91:28:f8:f7:79:20:
                    88:bd:f3:ab:6b:3f:49:1f:2d:6f:82:cb:bd:ad:eb:
                    f8:49:f5:90:cf:fc:55:4b:89:1f:0d:40:5c:44:b5:
                    b3:10:ca:5c:5f:f7:2e:07:35:2a:c7:9d:11:2b:d6:
                    c7:f8:fc:10:cf:67:c0:bf:6c:1c:8a:d7:47:55:c3:
                    95:96:aa:99:28:8a:79:0f:ff:b7:6b:40:83:80:bd:
                    4d:43:32:27:48:df:c0:5c:cc:be:70:c3:e7:46:bf:
                    a4:0c:99:10:da:bc:74:b0:72:2b:0b:67:40:11:6a:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:D3:8B:8B:A7:18:CA:7A:9A:9E:B2:77:A8:57:58:56:0C:0A:A4
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/1b5a1e1900daa5cf0f785af8d8debfeae9f3b227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:95:5d:6b:c9:c7:15:02:4d:5e:36:01:c4:a0:ee:38:81:
         03:5d:80:15:57:d6:21:e8:7b:c1:40:f3:30:ef:46:30:b5:ad:
         46:03:3e:85:cc:bc:14:ba:71:aa:49:15:b4:83:55:ab:6d:45:
         c6:2d:7e:fb:f0:29:1e:3d:4d:e5:57:95:a1:76:5b:63:75:2e:
         62:b1:d5:34:69:79:7a:b5:45:d2:35:40:5d:6e:e1:0d:91:b0:
         13:58:b3:97:61:99:8e:84:f6:d0:10:f4:47:45:7a:53:4a:49:
         0d:ec:b0:d1:a5:dd:28:04:ee:0d:0d:d8:51:c8:60:a1:b0:ef:
         a2:94:1b:bf:b3:5d:dc:27:40:44:0b:9f:5a:11:7d:e6:f1:f1:
         93:f2:7a:72:01:d8:ed:9b:26:19:0c:73:47:f4:32:f7:57:e3:
         0c:cc:77:3a:83:3e:81:d6:89:19:ae:fd:42:60:6c:a1:88:c0:
         f6:52:08:8b:15:11:d7:4c:8d:25:b3:5e:eb:6a:9f:43:b1:ae:
         b8:32:c8:1f:63:d4:79:7b:97:b9:c3:d3:cc:25:56:9a:6e:d0:
         79:56:9c:72:5c:f0:e8:c0:f1:9e:a4:80:45:9a:da:f7:a3:cf:
         52:0b:b7:8a:23:b6:cf:5a:14:1f:fc:ac:49:76:9b:40:14:88:
         99:f5:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org