Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5b109bf350ca46cb8db89356d0a0da353c28b19e.roa
File:                     5b109bf350ca46cb8db89356d0a0da353c28b19e.roa (raw, json)
Hash identifier:          t/R6NpkmBDkbuCXodjCAWNm/ltyXbr9X6FtdumeZ04Y=
Subject key identifier:   43:57:CE:C3:F4:47:7F:69:3F:ED:33:18:DE:0D:45:F1:77:1D:F1:30
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       03468C
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5b109bf350ca46cb8db89356d0a0da353c28b19e.roa
Signing time:             Thu 10 Aug 2023 14:39:42 +0000
ROA not before:           Wed 09 Aug 2023 14:39:42 +0000
ROA not after:            Sun 10 Aug 2025 14:39:42 +0000
asID:                     15311
IP address blocks:        200.54.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214668 (0x3468c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:39:42 2023 GMT
            Not After : Aug 10 14:39:42 2025 GMT
        Subject: CN=5b109bf350ca46cb8db89356d0a0da353c28b19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:d4:76:56:a1:55:c7:35:b0:6f:60:61:30:
                    29:6b:61:9d:e2:29:89:e0:83:4a:b5:78:42:07:f3:
                    3a:44:80:5d:36:ae:91:bd:4c:c4:56:0e:8f:b5:60:
                    30:4f:04:1d:f0:8d:c8:57:23:fb:3d:0e:9f:bd:26:
                    78:8f:09:e1:e5:ba:04:f2:62:df:49:c6:d8:b2:df:
                    b8:10:79:f1:d7:41:2a:68:c5:b2:39:9e:1f:93:0d:
                    43:58:be:14:5f:71:e9:e8:fd:65:9b:14:0c:d7:f8:
                    c9:f9:0a:b1:6e:d8:39:1a:78:78:ca:3e:94:8c:57:
                    d8:94:7d:a7:39:32:a7:ae:c0:da:e6:47:fb:49:ea:
                    2a:17:75:06:62:3a:4f:19:13:3d:b0:ef:a6:1a:a6:
                    57:03:b7:0a:a3:a6:31:78:49:51:33:da:e3:44:59:
                    e3:17:82:7f:dc:9a:62:7d:1b:53:6f:09:02:4a:41:
                    86:f8:64:9b:45:ca:03:b0:70:ec:f9:00:f0:86:fa:
                    1c:cd:b6:62:a8:0f:15:e2:54:24:0d:f2:40:7f:54:
                    f5:0f:17:6d:55:a0:19:47:ad:69:68:67:e5:b5:4c:
                    2d:98:b0:e5:d9:00:99:55:8e:0b:6b:63:d6:e1:ff:
                    6f:22:51:63:a0:fd:04:08:de:7e:97:bc:70:a9:b2:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:CE:C3:F4:47:7F:69:3F:ED:33:18:DE:0D:45:F1:77:1D:F1:30
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/5b109bf350ca46cb8db89356d0a0da353c28b19e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:92:9b:d8:6e:6a:a5:9c:e7:39:4d:5a:da:29:60:18:ee:24:
         98:be:d4:82:e3:97:fa:65:2a:4e:aa:99:4a:9a:6a:e5:2c:3c:
         bd:9a:b1:42:80:43:e6:a9:a8:61:15:66:7f:67:90:72:75:35:
         68:d9:9b:a2:dd:fb:ea:57:5d:57:aa:3b:a0:c1:3f:61:e1:90:
         10:0b:c5:4d:31:61:23:9a:28:83:f1:56:62:4a:18:fe:95:e0:
         11:4c:c3:c8:d7:28:ef:a5:a0:b4:18:8c:ea:3c:f9:64:56:6d:
         71:fb:13:74:0c:26:20:6f:4a:8a:b0:4c:66:6e:52:16:96:e6:
         c3:f1:92:b1:0e:e2:b4:71:a7:32:a9:cc:64:26:14:04:32:be:
         96:dc:aa:d6:53:41:83:47:59:e6:26:4f:09:e5:84:33:79:cb:
         5a:f1:a2:6e:c6:7e:fc:7e:6f:f6:03:8e:f3:46:52:9a:f1:05:
         8b:e4:1f:d2:f6:4c:1a:10:1c:61:84:f7:86:a1:2b:bf:64:5b:
         7e:27:31:42:a0:53:e0:ed:61:9a:44:8f:d9:22:32:88:1e:8f:
         86:4b:fd:9e:98:ec:22:12:35:c8:a4:6a:34:28:61:2c:c5:23:
         8e:98:a8:a0:ef:ee:0b:29:39:27:0d:e7:6a:00:f1:59:c3:eb:
         ba:f1:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org