Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/7d664cfdfc9e143b989827879fd8df824812e7c3.roa
File:                     7d664cfdfc9e143b989827879fd8df824812e7c3.roa (raw, json)
Hash identifier:          gVfJ4KDBiZACVzczspVcJwRO3Tz7Jwihpy1UrLYvjKc=
Subject key identifier:   08:E2:CD:22:E0:5B:C4:29:40:0E:AC:40:CA:16:58:5C:1F:E0:64:EC
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04EA71
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/7d664cfdfc9e143b989827879fd8df824812e7c3.roa
Signing time:             Mon 16 Oct 2023 22:08:49 +0000
ROA not before:           Sun 15 Oct 2023 22:08:49 +0000
ROA not after:            Thu 16 Oct 2025 22:08:49 +0000
asID:                     52230
IP address blocks:        200.54.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322161 (0x4ea71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:08:49 2023 GMT
            Not After : Oct 16 22:08:49 2025 GMT
        Subject: CN=7d664cfdfc9e143b989827879fd8df824812e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:8b:d0:38:2d:c5:a5:d7:ea:df:43:b1:07:
                    22:87:1f:93:72:84:65:bb:11:41:77:cb:7c:bd:73:
                    36:0e:3f:57:60:0a:cd:1f:b1:ac:b7:64:eb:72:80:
                    6d:3f:0a:c5:2d:f2:55:47:ef:34:4c:11:c8:11:ca:
                    61:33:55:cb:32:49:91:40:18:d4:25:1d:aa:99:f5:
                    f7:ea:d9:bf:95:cc:be:cb:d9:71:b9:58:0d:f5:c2:
                    5c:77:e5:86:02:65:0b:a0:00:6e:ee:e6:cc:94:f2:
                    6e:f7:97:11:a2:24:db:d7:e8:b1:c7:36:50:80:c2:
                    77:e9:c0:ea:42:0f:50:c0:d4:16:35:59:09:ac:1c:
                    83:17:f4:e9:72:4f:ce:9e:19:de:f4:46:f6:c9:a1:
                    1f:3b:36:08:9d:99:2c:94:fd:fd:e5:85:1b:ec:b8:
                    35:9d:78:49:83:bf:48:e3:54:7f:b9:28:0d:d7:b3:
                    35:19:ab:06:f8:bd:dc:b5:2f:8d:da:e8:66:a7:69:
                    99:e1:1f:9e:ff:91:45:53:de:02:3b:96:83:32:86:
                    95:5d:85:eb:6d:c8:5a:c3:b3:e3:b0:a7:2c:e5:d4:
                    7f:fb:46:99:1d:f9:3e:48:2e:12:26:ba:c4:80:9d:
                    e4:e0:53:a6:88:2f:88:a5:71:fe:e8:62:a3:6a:e4:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E2:CD:22:E0:5B:C4:29:40:0E:AC:40:CA:16:58:5C:1F:E0:64:EC
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/7d664cfdfc9e143b989827879fd8df824812e7c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:96:6b:bb:0f:f2:a6:dc:a4:3e:be:9e:40:1c:01:fc:e4:d1:
         94:27:49:92:ba:90:53:e8:e6:78:a1:8d:b8:93:47:7e:48:6b:
         b2:ca:ef:4b:33:ab:a2:60:06:8a:f2:30:e9:6d:76:86:1d:b7:
         c0:55:e8:f7:a7:d1:e7:ba:b4:c4:f2:d1:37:a9:b0:c2:84:5e:
         76:00:88:27:aa:88:ef:51:6c:36:a7:e0:e3:90:3c:29:2e:71:
         47:94:da:8d:e6:5d:4a:6a:be:e9:a5:0a:e8:7c:f2:0e:55:19:
         2c:fa:c1:10:69:94:57:43:35:33:95:c0:ee:14:02:7a:35:01:
         cf:81:8b:1a:d8:56:b4:6b:48:0c:4e:29:03:8b:fb:22:c9:7a:
         c7:51:67:1b:e7:65:b3:dd:12:a1:96:6b:39:5b:16:b0:aa:28:
         75:2b:76:a0:a6:1a:33:d4:f4:be:f5:35:e4:fd:99:4c:ef:5d:
         89:28:4c:43:f8:ff:03:7c:ad:c5:c9:21:15:86:bd:7b:04:cb:
         0f:ce:51:3a:e1:bf:32:24:80:c8:bd:81:17:9f:00:69:fb:fe:
         0a:11:d9:d0:f3:10:0d:56:63:68:2f:9b:00:c6:a4:1a:1b:74:
         49:f6:bd:da:3c:b4:b8:90:35:6d:96:bc:f5:b8:23:77:4a:93:
         bd:db:22:c1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBOpxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMxMDE1
MjIwODQ5WhcNMjUxMDE2MjIwODQ5WjAzMTEwLwYDVQQDEyg3ZDY2NGNmZGZjOWUx
NDNiOTg5ODI3ODc5ZmQ4ZGY4MjQ4MTJlN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn3iL0DgtxaXX6t9DsQcihx+TcoRluxFBd8t8vXM2Dj9XYArN
H7Gst2TrcoBtPwrFLfJVR+80TBHIEcphM1XLMkmRQBjUJR2qmfX36tm/lcy+y9lx
uVgN9cJcd+WGAmULoABu7ubMlPJu95cRoiTb1+ixxzZQgMJ36cDqQg9QwNQWNVkJ
rByDF/Tpck/Onhne9Eb2yaEfOzYInZkslP395YUb7Lg1nXhJg79I41R/uSgN17M1
GasG+L3ctS+N2uhmp2mZ4R+e/5FFU94CO5aDMoaVXYXrbchaw7PjsKcs5dR/+0aZ
Hfk+SC4SJrrEgJ3k4FOmiC+IpXH+6GKjauRHRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAjizSLgW8QpQA6sQMoWWFwf4GTsMB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhLzdkNjY0Y2ZkZmM5ZTE0M2I5ODk4Mjc4NzlmZDhkZjgyNDgxMmU3YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg2czANBgkqhkiG9w0BAQsFAAOCAQEAdpZruw/yptykPr6e
QBwB/OTRlCdJkrqQU+jmeKGNuJNHfkhrssrvSzOromAGivIw6W12hh23wFXo96fR
57q0xPLRN6mwwoRedgCIJ6qI71FsNqfg45A8KS5xR5TajeZdSmq+6aUK6HzyDlUZ
LPrBEGmUV0M1M5XA7hQCejUBz4GLGthWtGtIDE4pA4v7Isl6x1FnG+dls90SoZZr
OVsWsKoodSt2oKYaM9T0vvU15P2ZTO9diShMQ/j/A3ytxckhFYa9ewTLD85ROuG/
MiSAyL2BF58Aafv+ChHZ0PMQDVZjaC+bAMakGht0Sfa92jy0uJA1bZa89bgjd0qT
vdsiwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org