Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/4fc71fd81bc917fdb414a75c0e4f00b5ec9a364e.roa
File:                     4fc71fd81bc917fdb414a75c0e4f00b5ec9a364e.roa (raw, json)
Hash identifier:          Z4jP5tBQggjtatkmbkkjndNsn+R00k7QnEFlD976SUs=
Subject key identifier:   C8:47:49:01:A7:21:BC:43:1D:AC:67:AA:3F:41:89:27:7F:F6:AF:C8
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       032203
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/4fc71fd81bc917fdb414a75c0e4f00b5ec9a364e.roa
Signing time:             Thu 10 Aug 2023 14:33:48 +0000
ROA not before:           Wed 09 Aug 2023 14:33:48 +0000
ROA not after:            Sun 10 Aug 2025 14:33:48 +0000
asID:                     15311
IP address blocks:        200.54.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205315 (0x32203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:33:48 2023 GMT
            Not After : Aug 10 14:33:48 2025 GMT
        Subject: CN=4fc71fd81bc917fdb414a75c0e4f00b5ec9a364e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:55:7d:d5:64:60:d9:1a:8e:e1:77:4f:9c:
                    d0:e8:54:8b:35:14:ed:ad:be:84:45:0f:34:69:ed:
                    7c:67:cd:44:15:ce:8f:cf:23:3b:c0:be:5c:62:b8:
                    42:4f:dc:c1:70:a4:d2:8c:be:78:ef:cf:ed:8c:2b:
                    d8:d4:fd:25:55:50:13:c8:a6:88:5f:97:60:bd:48:
                    b5:b3:ca:e9:0f:22:4a:60:bd:71:a5:d1:14:d0:67:
                    51:f5:6c:67:ce:59:62:f0:83:ac:f1:7d:a5:ec:43:
                    a0:6a:5d:e0:80:cd:5f:7b:5f:40:db:76:8d:68:2e:
                    c1:d7:fe:43:45:92:00:a3:85:27:bd:d1:47:a8:90:
                    88:64:7d:9b:18:a3:0e:c8:21:9d:18:2a:4d:4d:3d:
                    c6:49:d3:3d:8f:9e:e1:17:c3:f9:a8:96:0a:2f:8e:
                    7a:76:93:3a:af:88:2f:5b:e3:55:e2:c8:74:1e:2b:
                    7d:c1:69:e4:2d:7b:30:bf:0c:97:77:75:33:e0:f1:
                    54:f4:e8:06:d0:06:10:a8:15:7b:c6:ca:ba:e8:aa:
                    e9:14:ef:76:89:38:36:62:ed:fc:43:16:67:dd:57:
                    fb:07:6c:70:ec:58:bf:12:44:2c:2b:5c:01:77:66:
                    f7:19:6d:59:3c:0a:0c:22:2b:6f:01:c8:e6:2d:61:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:49:01:A7:21:BC:43:1D:AC:67:AA:3F:41:89:27:7F:F6:AF:C8
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/4fc71fd81bc917fdb414a75c0e4f00b5ec9a364e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:67:0e:b3:6f:30:c1:db:b6:03:9f:8c:7b:6a:4a:df:99:1a:
         95:24:74:e0:fb:fc:44:a6:b0:f6:0f:b3:b0:11:b6:9b:ad:ce:
         f6:57:fb:27:4f:e4:32:67:0a:00:d9:3f:2e:64:22:e9:2d:c5:
         8c:31:d1:b1:b7:d9:43:ab:61:ba:ae:32:9c:6d:74:1a:98:89:
         6d:f9:12:c9:ba:6c:7f:d5:bf:80:20:d6:2c:e6:83:73:4c:ed:
         c3:6b:e7:86:16:4b:47:6a:8a:eb:11:00:10:0b:1d:52:2f:38:
         2b:fe:a5:da:6a:2b:92:e6:83:81:8e:ff:28:bf:1c:97:b1:51:
         b9:fe:9a:78:6c:3d:85:a1:79:6f:e2:cc:04:7e:18:4a:cd:7b:
         26:75:c7:70:2c:03:3b:e8:9c:62:ed:f7:96:2f:3c:bd:64:39:
         5e:e2:1d:aa:61:79:9a:7f:ed:67:91:04:51:98:91:a0:d8:65:
         75:2e:ae:c5:df:ee:d5:8c:18:09:82:2a:37:8b:67:7c:43:7d:
         fd:62:2d:af:83:18:2d:c2:15:7b:f0:05:85:65:b1:ac:a0:37:
         99:8d:fd:f6:e2:f4:d4:77:fb:c8:9e:e4:65:3d:d2:0b:59:4f:
         28:9b:36:2e:fb:4a:28:fe:c1:68:2d:e2:c4:b5:5d:13:21:9d:
         52:8f:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org