Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/41e4b10290686dc6e3f1f157f5935992ca56ef5c.roa
File:                     41e4b10290686dc6e3f1f157f5935992ca56ef5c.roa (raw, json)
Hash identifier:          eyWf9ZH08gVq4cfwcZiXdm8w6PfZMcck+gQNYZiaQ7w=
Subject key identifier:   EA:C8:C6:8E:E6:A1:51:42:56:73:03:52:9F:94:0C:E4:16:A8:67:16
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       0339EF
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/41e4b10290686dc6e3f1f157f5935992ca56ef5c.roa
Signing time:             Thu 10 Aug 2023 14:38:26 +0000
ROA not before:           Wed 09 Aug 2023 14:38:26 +0000
ROA not after:            Sun 10 Aug 2025 14:38:26 +0000
asID:                     15311
IP address blocks:        200.54.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211439 (0x339ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:38:26 2023 GMT
            Not After : Aug 10 14:38:26 2025 GMT
        Subject: CN=41e4b10290686dc6e3f1f157f5935992ca56ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:04:1a:9f:59:8b:e0:64:55:8a:da:fb:8a:
                    dc:df:2c:91:b2:fa:f2:bc:1c:1e:7e:1b:16:58:4c:
                    9b:33:de:fe:45:23:ee:a9:77:f7:1f:59:ec:06:b2:
                    8b:3f:24:38:af:e7:7f:7f:02:56:05:8d:a2:d2:4c:
                    f6:1d:7e:ee:c6:1b:97:41:f1:6f:8a:4d:b4:9e:ab:
                    94:b0:70:30:0a:ea:c8:77:2a:a1:8f:12:4d:42:d6:
                    d5:4d:ce:8b:a4:a6:8f:ca:e4:e4:9f:7b:2a:31:c1:
                    f5:6c:6c:f0:9a:37:05:83:52:dd:be:3d:0e:3b:f0:
                    da:cf:73:bd:b4:c6:eb:f2:53:50:b5:73:a9:5c:e3:
                    f9:a1:0f:77:b2:ea:0d:1a:2b:11:ec:e7:61:76:4f:
                    c0:80:7e:a6:34:3f:0b:e3:bc:20:cb:f5:fc:1f:d3:
                    87:cc:11:dc:df:39:f4:75:bc:75:7c:c6:91:98:a1:
                    ed:9c:0f:45:a6:41:ab:1a:6d:a3:d3:8e:b8:d6:f6:
                    73:2c:71:72:61:56:28:f8:5a:05:e4:73:5a:88:6e:
                    d8:2b:07:18:68:ae:b3:11:35:e3:7e:f6:24:d7:00:
                    b7:b6:73:3f:41:e1:1e:e9:aa:81:2d:66:94:3f:69:
                    35:38:9d:ad:77:5f:af:27:fa:a1:88:55:57:aa:1a:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:C6:8E:E6:A1:51:42:56:73:03:52:9F:94:0C:E4:16:A8:67:16
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/41e4b10290686dc6e3f1f157f5935992ca56ef5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:d4:fd:6c:66:b2:ce:ce:1e:e1:f9:7b:41:bd:5e:f8:bb:
         69:93:b8:ec:f0:46:69:ae:a9:a6:ee:42:b3:48:03:4e:00:25:
         b0:69:d9:ce:70:ac:36:eb:82:33:b4:30:0f:a9:69:f3:43:50:
         cf:8b:3a:25:04:24:74:10:82:97:7c:72:d1:50:08:bc:62:96:
         de:da:cc:80:4e:83:1a:7d:a3:85:d6:ca:f2:c9:e7:47:1d:f0:
         57:da:82:70:42:24:d5:86:4d:65:45:53:4d:92:94:ba:0e:70:
         76:cd:0e:8c:f1:df:07:11:b6:05:86:95:2c:9b:32:5e:cb:ce:
         ca:0d:ae:2a:4b:67:f4:40:81:f6:55:ee:9e:b9:61:18:50:5c:
         a2:87:ea:12:32:47:ab:e9:7e:69:0b:d0:ad:b7:9d:b9:e7:e9:
         66:11:27:88:ff:e8:69:19:1c:f3:90:1c:53:a4:df:26:22:ec:
         4d:e3:5a:6d:da:66:86:b2:c5:29:3a:75:16:c4:46:c2:f3:6d:
         de:e4:e2:08:aa:fd:4c:6b:e3:45:b1:d5:9b:ab:91:6b:2a:62:
         46:96:b0:6e:e3:ad:99:90:ff:f6:3d:9e:48:6d:f3:38:18:a4:
         ca:ad:cb:ce:3a:94:ac:6a:bb:20:3d:e2:0f:5c:c5:3f:8e:eb:
         04:8d:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org