Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/25d3dea038af56a2724063eb27a32805faf32900.roa
File:                     25d3dea038af56a2724063eb27a32805faf32900.roa (raw, json)
Hash identifier:          2LIQZjO3vwQqSEjD2f65YjULVhFz+cBNp5t29EahviA=
Subject key identifier:   53:BE:B1:AB:4E:01:43:24:58:42:D4:0F:4A:2C:B2:4E:07:38:E9:47
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       0314CB
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/25d3dea038af56a2724063eb27a32805faf32900.roa
Signing time:             Wed 09 Aug 2023 14:57:56 +0000
ROA not before:           Tue 08 Aug 2023 14:57:56 +0000
ROA not after:            Sat 09 Aug 2025 14:57:56 +0000
asID:                     7004
IP address blocks:        200.54.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201931 (0x314cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  8 14:57:56 2023 GMT
            Not After : Aug  9 14:57:56 2025 GMT
        Subject: CN=25d3dea038af56a2724063eb27a32805faf32900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:62:71:66:a2:70:1c:bc:3b:45:4d:f7:74:
                    86:39:91:e4:9e:03:b0:88:31:89:bd:ec:e7:2b:18:
                    52:bb:05:d9:b3:38:fe:70:34:3c:a0:ec:9d:d8:ec:
                    97:35:9b:58:71:12:ab:e8:e6:4d:e4:04:06:bf:f3:
                    48:71:62:a7:b6:89:ef:c4:3d:a0:83:25:97:43:34:
                    e5:51:d0:91:7e:f8:e8:e3:fe:1f:0f:f7:01:95:78:
                    f3:1e:bc:0a:75:40:78:83:9b:4c:8b:60:c1:c6:50:
                    58:9b:6c:80:aa:cf:14:9d:e8:40:70:23:a6:e5:0e:
                    3c:f4:e9:29:fe:6a:21:25:ed:77:ba:72:5b:41:38:
                    58:7e:2a:3a:96:fc:39:52:93:1a:e8:5b:9a:11:03:
                    9e:96:ee:0c:67:7e:ea:7f:b4:00:72:0f:2f:9e:e1:
                    4d:ed:3a:bd:4e:96:28:ee:a3:18:40:88:9d:8d:83:
                    72:80:69:d2:d0:ab:e6:56:b5:ba:0e:03:cc:6e:15:
                    7a:54:24:7a:f7:63:d7:7d:32:b3:a7:95:eb:79:2b:
                    4a:fd:0e:f4:f0:60:c1:8f:16:96:3f:f3:da:cb:69:
                    03:34:73:b4:88:49:74:68:15:3d:71:0a:bf:0c:91:
                    dd:64:69:8d:fd:99:e7:2d:06:f4:2f:80:5a:9f:92:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BE:B1:AB:4E:01:43:24:58:42:D4:0F:4A:2C:B2:4E:07:38:E9:47
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/25d3dea038af56a2724063eb27a32805faf32900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:be:32:ac:4e:fd:b4:29:e0:2e:69:07:bd:ed:5a:e5:51:
         bc:18:65:17:92:f2:00:8d:f8:67:d9:70:70:cf:99:79:d5:43:
         98:ef:b7:c0:f0:ba:43:0c:45:2a:6b:fe:11:b8:3e:70:73:89:
         be:f0:a2:f9:e3:f8:dd:ba:18:9b:38:10:1c:96:11:f9:49:e7:
         4f:23:1b:01:52:43:37:7d:2c:ba:ca:c5:41:35:6c:15:71:00:
         3f:54:eb:e4:87:62:2c:ab:87:e3:43:f5:85:e1:cc:b8:26:6d:
         f9:68:b7:e0:ec:71:47:4b:28:9e:58:23:fb:ac:8b:f4:fc:e0:
         ad:50:f9:64:6a:c3:5f:d5:2d:e9:21:14:df:c1:7f:1b:31:f3:
         b1:9b:dd:ae:98:19:78:b7:0e:42:92:5c:73:47:68:5f:34:c7:
         7c:88:a3:88:f4:11:df:d6:6f:9b:ea:3f:82:63:42:48:dc:98:
         44:01:a3:1e:97:d9:83:78:08:e2:d4:01:59:05:a4:3e:97:4f:
         bc:99:06:79:6d:8a:dc:5c:6f:e9:a7:48:62:db:81:7c:f8:44:
         28:08:28:94:c8:b7:60:8d:7c:7f:53:e3:96:1d:1d:0c:5c:08:
         05:c0:20:c6:1a:73:84:c7:2f:b7:e8:8c:49:cf:0e:29:0a:e4:
         b4:da:07:1a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAxTLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMwODA4
MTQ1NzU2WhcNMjUwODA5MTQ1NzU2WjAzMTEwLwYDVQQDEygyNWQzZGVhMDM4YWY1
NmEyNzI0MDYzZWIyN2EzMjgwNWZhZjMyOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr2RicWaicBy8O0VN93SGOZHkngOwiDGJveznKxhSuwXZszj+
cDQ8oOyd2OyXNZtYcRKr6OZN5AQGv/NIcWKntonvxD2ggyWXQzTlUdCRfvjo4/4f
D/cBlXjzHrwKdUB4g5tMi2DBxlBYm2yAqs8UnehAcCOm5Q489Okp/mohJe13unJb
QThYfio6lvw5UpMa6FuaEQOelu4MZ37qf7QAcg8vnuFN7Tq9TpYo7qMYQIidjYNy
gGnS0KvmVrW6DgPMbhV6VCR692PXfTKzp5XreStK/Q708GDBjxaWP/Pay2kDNHO0
iEl0aBU9cQq/DJHdZGmN/ZnnLQb0L4Ban5LVMQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFO+satOAUMkWELUD0ossk4HOOlHMB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhLzI1ZDNkZWEwMzhhZjU2YTI3MjQwNjNlYjI3YTMyODA1ZmFmMzI5MDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg2bjANBgkqhkiG9w0BAQsFAAOCAQEAE/y+MqxO/bQp4C5p
B73tWuVRvBhlF5LyAI34Z9lwcM+ZedVDmO+3wPC6QwxFKmv+Ebg+cHOJvvCi+eP4
3boYmzgQHJYR+UnnTyMbAVJDN30susrFQTVsFXEAP1Tr5IdiLKuH40P1heHMuCZt
+Wi34OxxR0sonlgj+6yL9PzgrVD5ZGrDX9Ut6SEU38F/GzHzsZvdrpgZeLcOQpJc
c0doXzTHfIijiPQR39Zvm+o/gmNCSNyYRAGjHpfZg3gI4tQBWQWkPpdPvJkGeW2K
3Fxv6adIYtuBfPhEKAgolMi3YI18f1Pjlh0dDFwIBcAgxhpzhMcvt+iMSc8OKQrk
tNoHGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org