Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5599adc149ff81058e23cd569295c234f61b5137.roa
File:                     5599adc149ff81058e23cd569295c234f61b5137.roa (raw, json)
Hash identifier:          MGgWecSdDGeoxvCoVczajbQExc0mQI079cmT4hLhW0Q=
Subject key identifier:   68:D8:FF:69:42:63:B3:D5:6E:A5:1C:C4:86:14:1E:07:C5:76:0A:D6
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       032AC0
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5599adc149ff81058e23cd569295c234f61b5137.roa
Signing time:             Thu 10 Aug 2023 14:35:01 +0000
ROA not before:           Wed 09 Aug 2023 14:35:01 +0000
ROA not after:            Sun 10 Aug 2025 14:35:01 +0000
asID:                     15311
IP address blocks:        200.54.154.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207552 (0x32ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:35:01 2023 GMT
            Not After : Aug 10 14:35:01 2025 GMT
        Subject: CN=5599adc149ff81058e23cd569295c234f61b5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4e:1f:da:3b:1e:28:9d:74:bf:91:78:35:52:
                    8b:9c:a2:88:a2:1d:7e:23:30:9f:f6:d0:ea:53:e4:
                    43:41:48:e4:a8:92:f4:0a:22:b8:97:23:33:62:5d:
                    ee:b0:21:84:b6:7e:ef:57:e8:4b:b9:41:4b:e7:6d:
                    95:94:6a:27:ba:5e:1a:23:87:1c:04:9b:59:68:4e:
                    ae:ab:f0:9c:5e:05:4a:35:43:ac:7e:a1:6b:77:83:
                    0d:92:cc:b0:f4:bf:f2:4a:00:2b:20:a3:0a:0f:55:
                    0b:92:dd:85:41:2f:cf:b6:04:8c:53:d8:d6:79:83:
                    10:88:90:c3:3a:bf:2e:98:22:67:40:e8:d2:c5:ce:
                    b2:89:7d:7e:e2:67:62:6b:8e:cb:11:31:70:e8:e1:
                    ad:72:c9:31:44:22:07:fb:a3:8d:9d:23:ea:81:07:
                    9f:0e:ed:a7:2c:de:33:dd:cb:4d:8f:fb:a4:04:14:
                    b4:9b:f4:0a:21:82:fe:c8:3d:bc:98:5d:1b:fe:85:
                    c9:1f:9a:94:d2:57:e0:ca:1b:69:81:f2:00:4d:f3:
                    18:dc:ed:7a:0f:b1:4d:4e:3b:f8:5f:0c:83:02:b9:
                    63:b8:11:3d:54:2f:44:50:8b:70:42:7f:c9:97:2e:
                    c0:2d:37:f0:12:3e:02:12:04:7f:e3:51:2f:62:c3:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:FF:69:42:63:B3:D5:6E:A5:1C:C4:86:14:1E:07:C5:76:0A:D6
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5599adc149ff81058e23cd569295c234f61b5137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:71:f2:fa:e6:bc:e3:d6:66:69:ac:03:ec:0f:02:58:36:41:
         54:0c:e5:fc:61:8f:a8:90:98:a8:7f:12:7a:e1:b7:1c:1d:e8:
         52:1c:27:a9:25:a3:61:ff:1f:cd:af:10:78:d2:fe:1f:94:d9:
         8f:6c:9b:89:97:ad:20:b7:b1:16:ed:f6:27:e1:37:66:5a:8c:
         ac:9e:32:a4:bb:33:d8:23:2a:27:7f:38:4e:78:8b:af:95:31:
         80:d7:40:11:47:bb:3a:c5:14:31:0c:b1:d6:a8:51:90:3b:af:
         f8:90:dc:4d:ee:25:e1:0a:fc:b1:a4:16:c2:ba:ad:bc:59:47:
         f1:66:5f:0d:23:4e:be:44:ac:29:3f:fe:d7:91:fc:e3:51:75:
         18:3b:2b:23:13:3c:d7:91:b3:6b:40:2e:30:fe:54:5f:7a:93:
         37:0c:da:5f:7b:aa:5d:68:2c:48:e1:ac:b1:62:ae:1c:60:42:
         c8:c4:c1:57:36:7d:4b:c4:a3:fc:fc:69:a6:0c:ea:82:64:6c:
         5a:6e:82:98:ad:bd:c1:09:0e:30:5d:2d:f4:74:aa:81:f0:33:
         93:05:3f:ca:3e:03:fc:61:0f:ff:0f:4a:70:c3:26:26:f9:b2:
         3c:7f:58:38:f8:83:4e:3c:ea:21:af:39:28:aa:e5:c8:91:ae:
         26:99:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org