Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/576e6e5427b77a7606d10a0b0605b01854aa4f75.roa
File:                     576e6e5427b77a7606d10a0b0605b01854aa4f75.roa (raw, json)
Hash identifier:          DKogQqygmt6pcc/DKOg0LBsbKMd5HOyL+Zn8tFm0AgE=
Subject key identifier:   FF:91:FB:85:F3:8D:C8:39:18:74:2B:37:C7:98:05:AF:3F:8A:C7:8A
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       050797
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/576e6e5427b77a7606d10a0b0605b01854aa4f75.roa
Signing time:             Mon 16 Oct 2023 22:21:18 +0000
ROA not before:           Sun 15 Oct 2023 22:21:18 +0000
ROA not after:            Thu 16 Oct 2025 22:21:18 +0000
asID:                     15311
IP address blocks:        200.68.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329623 (0x50797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:21:18 2023 GMT
            Not After : Oct 16 22:21:18 2025 GMT
        Subject: CN=576e6e5427b77a7606d10a0b0605b01854aa4f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:da:05:7e:e7:11:16:a7:ce:12:4e:6c:2f:
                    07:83:2f:2e:26:e1:c1:f1:b3:12:7e:90:60:20:00:
                    a2:6a:5b:cd:6a:0b:b9:7b:8f:ce:72:d7:df:b1:b6:
                    56:54:3c:e6:d8:91:d7:e8:1e:71:37:b0:22:81:d4:
                    7f:e0:db:ac:fb:d4:c0:cc:fe:f6:97:c7:ec:69:62:
                    5d:30:d2:40:58:65:5e:0f:ab:9d:2b:24:8c:dc:01:
                    c1:da:e6:87:e2:25:a9:c6:f6:67:a7:79:bd:f2:a9:
                    2c:b6:4a:6e:d6:77:da:3b:d1:61:f0:27:fe:55:b7:
                    1e:e3:f9:52:72:a8:db:1b:c7:1b:2d:a4:83:56:ce:
                    70:62:dd:75:44:20:df:c4:55:38:c6:01:0c:45:19:
                    80:3e:6a:61:0b:91:91:95:a2:90:98:a8:34:c9:68:
                    82:82:8d:3f:f6:ae:df:8b:ae:d1:28:0d:5f:35:d9:
                    02:08:c9:4b:18:54:62:08:8a:9e:fb:5e:01:c5:69:
                    40:c9:6b:ac:fb:aa:24:77:2d:b9:3d:f3:8e:b3:62:
                    0e:48:19:61:7d:34:98:e3:16:2a:c2:9b:7b:24:68:
                    51:79:53:64:9b:d3:85:1d:76:93:90:1f:e7:5f:df:
                    05:ef:05:80:25:a8:82:b9:08:08:30:a5:80:a5:64:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:FB:85:F3:8D:C8:39:18:74:2B:37:C7:98:05:AF:3F:8A:C7:8A
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/576e6e5427b77a7606d10a0b0605b01854aa4f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:50:a1:db:2d:ed:9a:7c:25:50:cf:52:49:55:c0:77:ce:0d:
         5e:80:1b:7c:6f:b5:81:90:73:1c:ad:9d:46:51:f4:f4:5f:28:
         ce:d1:0e:6d:26:da:6b:10:15:59:16:d9:de:33:91:e4:3b:4e:
         ab:b3:c4:a6:86:c4:95:e1:22:de:83:90:b3:dc:8b:9f:1d:b3:
         0f:19:8d:b3:2a:08:93:f3:45:2f:1c:11:bf:da:75:3b:72:61:
         08:b7:da:a4:ae:59:86:e5:2b:79:90:99:d6:a1:73:c0:a3:e1:
         83:fc:4d:46:ae:00:d9:79:9c:42:fd:2d:77:d8:ba:f7:b3:84:
         37:81:b8:e2:e8:25:5c:14:7e:a5:65:b3:25:9d:23:15:2e:87:
         c6:2f:51:8e:4b:a7:3d:0d:74:e0:79:18:bd:91:25:ba:4f:5f:
         18:06:59:c3:fb:18:ff:44:f0:94:a3:9f:cd:09:2b:e1:88:5c:
         25:c5:b2:de:08:c2:32:90:04:39:32:b1:6c:d0:73:5b:f7:22:
         66:80:09:88:b1:1d:69:07:0f:5b:66:88:ab:a5:1b:93:6f:0c:
         e4:d1:3b:7f:21:40:4f:41:ce:fa:fa:0c:fb:2a:e5:16:cb:1b:
         1a:d8:3d:ff:08:14:8a:22:26:59:ff:dc:d9:96:4d:de:cd:69:
         0e:82:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org