Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/56d04f3263787cd1d9422ccc169900a699178a11.roa
File:                     56d04f3263787cd1d9422ccc169900a699178a11.roa (raw, json)
Hash identifier:          P/HhgRZCzSuDL8wGP44Tzfk91c6lw4nVhB4MpRYtd7U=
Subject key identifier:   16:5A:AF:F8:44:5B:E6:A1:3F:39:E1:E2:D0:5E:B1:38:82:C3:85:5F
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04FA6F
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/56d04f3263787cd1d9422ccc169900a699178a11.roa
Signing time:             Mon 16 Oct 2023 22:11:48 +0000
ROA not before:           Sun 15 Oct 2023 22:11:48 +0000
ROA not after:            Thu 16 Oct 2025 22:11:48 +0000
asID:                     16629
IP address blocks:        200.54.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326255 (0x4fa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:11:48 2023 GMT
            Not After : Oct 16 22:11:48 2025 GMT
        Subject: CN=56d04f3263787cd1d9422ccc169900a699178a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:d7:79:20:64:b3:95:f4:25:68:10:11:39:
                    3a:5c:41:93:ad:1a:86:05:8d:28:7c:99:b2:fb:6e:
                    1f:46:9b:27:37:5f:0e:53:52:c9:3c:44:85:77:2e:
                    ab:5f:a2:4f:ef:10:33:dc:0f:f6:0d:ba:8a:d9:ff:
                    cd:3f:1c:62:70:8d:57:4b:dd:ba:06:94:66:85:1e:
                    6f:f4:bb:dc:2b:ee:29:22:44:95:0c:2b:da:39:2c:
                    59:7a:51:50:3d:5b:73:9c:f1:10:1f:0a:6b:5f:bd:
                    f6:3b:a5:db:c0:82:c4:39:e0:e1:2b:76:ef:25:d8:
                    17:cf:ce:7a:68:0e:ae:64:3a:30:87:c7:69:cb:1b:
                    fe:ac:b0:42:e4:a6:b2:0b:fc:9c:42:f4:30:a3:86:
                    fd:10:f5:2d:82:55:76:82:d2:27:8c:53:53:d2:9e:
                    11:3a:37:72:27:a7:2c:92:6a:d7:15:00:20:ec:cd:
                    1a:ff:ea:6a:47:59:12:ae:0e:d6:bd:33:9a:ab:4c:
                    33:f7:d7:f0:24:e0:bc:56:98:e9:8f:d0:65:9e:a2:
                    f2:48:85:8a:d7:de:32:75:3a:f0:bd:ab:7b:23:82:
                    80:e7:ee:bf:dc:b5:99:f6:82:a5:e8:72:b5:20:81:
                    ed:d5:a5:91:c7:3f:0e:4d:ef:38:f4:1a:45:ea:03:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5A:AF:F8:44:5B:E6:A1:3F:39:E1:E2:D0:5E:B1:38:82:C3:85:5F
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/56d04f3263787cd1d9422ccc169900a699178a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:a0:9c:f2:e8:64:91:40:0a:eb:8e:50:5c:94:54:df:ad:
         c8:ed:c7:a7:8b:e7:bc:62:8e:cb:97:59:96:ac:71:1a:f5:36:
         5d:33:26:d4:41:8c:89:d6:c5:0f:bc:94:7a:5e:53:ab:84:3d:
         ff:47:fe:75:b1:07:42:79:61:4e:b3:55:fa:55:9d:93:02:72:
         d2:29:8b:b9:fd:e4:e1:b9:4b:c3:c0:20:e3:74:4d:b8:0a:bc:
         42:ab:36:6c:6f:e4:03:c6:0f:52:0d:13:5c:e3:65:f9:a8:5d:
         27:cd:cf:a2:58:95:e9:cf:32:3a:e6:e9:39:1a:3b:32:33:41:
         06:02:a1:34:e4:e9:1b:b0:15:d1:7e:32:08:2e:2d:03:3b:59:
         0f:51:7b:87:20:36:23:12:3e:40:12:e4:ca:52:c2:6a:33:5a:
         78:7d:50:6c:11:4e:fe:3e:82:1c:4f:10:66:27:25:70:b5:9a:
         c4:7f:c8:b7:ce:64:16:9a:79:88:cc:db:33:ee:e9:7b:8f:d4:
         88:62:6e:a2:dc:37:2d:29:b3:c0:de:ca:0a:53:6d:a9:d8:f0:
         c1:31:68:22:7e:d2:c4:1e:66:6f:66:7a:c0:14:9b:a6:3a:c5:
         0c:c8:ea:b9:19:c6:cd:b4:9d:be:93:0c:48:18:48:9e:59:e7:
         3c:1a:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org