Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/8af45ec0b8f7c1a1cbba3ba32de30148f0202adb.roa
File:                     8af45ec0b8f7c1a1cbba3ba32de30148f0202adb.roa (raw, json)
Hash identifier:          lCoNw/Zb0EHugcfPsdBxn9k5vJ12EK+GH+fOLBTNGXY=
Subject key identifier:   D6:13:2D:52:CE:97:4E:D1:43:D7:86:0D:C6:5C:97:CB:2B:82:5E:37
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       0347CE
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/8af45ec0b8f7c1a1cbba3ba32de30148f0202adb.roa
Signing time:             Thu 10 Aug 2023 14:40:01 +0000
ROA not before:           Wed 09 Aug 2023 14:40:01 +0000
ROA not after:            Sun 10 Aug 2025 14:40:01 +0000
asID:                     15311
IP address blocks:        200.54.196.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214990 (0x347ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:40:01 2023 GMT
            Not After : Aug 10 14:40:01 2025 GMT
        Subject: CN=8af45ec0b8f7c1a1cbba3ba32de30148f0202adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:bd:68:39:e9:9a:ef:ef:61:2d:52:d2:3f:
                    c0:ed:69:58:e8:ec:ae:2d:66:f6:9a:f0:43:ef:1d:
                    fb:33:5c:d4:93:bf:5d:7b:f9:6c:eb:e7:e5:2c:7a:
                    9b:d3:e0:31:78:74:62:b5:65:85:73:e9:4b:67:65:
                    74:bb:93:77:c5:f1:42:c6:f5:f1:10:d3:84:a7:b7:
                    f8:4e:b9:44:b6:f7:0d:6e:91:e9:2a:4f:9a:40:dd:
                    00:e8:95:73:69:aa:73:4d:0d:5b:17:2c:02:05:92:
                    66:ea:07:81:2c:28:17:20:3f:2b:db:75:27:76:cc:
                    23:1f:65:56:89:07:72:0c:55:dd:f1:11:c8:17:3a:
                    36:c6:39:03:45:53:09:e1:a9:4f:4b:5a:ba:40:39:
                    92:f1:1b:e2:d8:ce:b1:62:c2:50:7e:99:bf:53:d6:
                    64:a8:7d:00:de:b2:94:31:6d:66:d2:2d:9c:2d:c0:
                    27:49:b4:0c:cf:49:37:03:0e:c5:13:d9:35:fc:5f:
                    2c:3b:90:4c:ae:02:27:38:e3:b3:7b:7a:1b:03:5c:
                    15:bf:fb:ad:44:58:6f:6c:b8:c1:24:a3:d1:36:4c:
                    23:18:63:c1:bc:17:ff:28:76:c3:56:28:b1:60:19:
                    52:a6:89:84:7e:b0:da:7d:9f:26:c6:d7:e2:be:8a:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:13:2D:52:CE:97:4E:D1:43:D7:86:0D:C6:5C:97:CB:2B:82:5E:37
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/8af45ec0b8f7c1a1cbba3ba32de30148f0202adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:fd:5f:3e:45:24:4c:5a:19:32:7c:52:f1:74:74:20:f1:
         ab:a4:c5:5a:db:71:62:c3:24:aa:63:1b:8b:b1:c0:13:20:30:
         27:76:46:08:fe:9b:b8:95:c2:03:02:08:76:3d:0a:1c:6d:64:
         b3:4c:ac:f6:19:ad:7e:b5:8e:49:29:2b:01:28:ca:db:c5:da:
         80:88:1a:a2:50:1c:00:62:2e:81:b1:2b:89:6d:b6:db:47:46:
         a8:c1:30:06:71:7c:1d:98:0b:63:a0:57:4f:f0:c2:af:2e:b0:
         e2:68:53:13:b9:61:69:31:b4:f4:8c:63:50:87:59:87:5f:07:
         2c:4c:1f:f2:74:a0:2a:10:ca:34:7c:ca:23:1b:bf:7d:06:5d:
         4c:25:8b:c8:66:7d:6e:ed:c9:c3:18:b5:b6:be:9d:97:9f:9b:
         56:b8:62:f1:c5:68:a0:d3:a2:10:fd:15:6e:b0:a0:14:0b:37:
         07:07:10:5d:26:10:67:b5:5d:62:a0:ba:70:89:ee:ad:52:cb:
         73:43:0a:ea:26:5e:13:bd:8a:5d:4f:33:c0:01:98:f3:c0:90:
         54:b2:5f:f7:3d:9c:89:cb:35:95:3a:4c:77:ef:c2:53:5b:99:
         14:c5:f1:75:e8:34:5c:ef:97:16:fd:6a:11:f9:75:7b:13:0b:
         84:e3:73:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA0fOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMwODA5
MTQ0MDAxWhcNMjUwODEwMTQ0MDAxWjAzMTEwLwYDVQQDEyg4YWY0NWVjMGI4Zjdj
MWExY2JiYTNiYTMyZGUzMDE0OGYwMjAyYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDC9aDnpmu/vYS1S0j/A7WlY6OyuLWb2mvBD7x37M1zUk79d
e/ls6+flLHqb0+AxeHRitWWFc+lLZ2V0u5N3xfFCxvXxENOEp7f4TrlEtvcNbpHp
Kk+aQN0A6JVzaapzTQ1bFywCBZJm6geBLCgXID8r23UndswjH2VWiQdyDFXd8RHI
Fzo2xjkDRVMJ4alPS1q6QDmS8Rvi2M6xYsJQfpm/U9ZkqH0A3rKUMW1m0i2cLcAn
SbQMz0k3Aw7FE9k1/F8sO5BMrgInOOOze3obA1wVv/utRFhvbLjBJKPRNkwjGGPB
vBf/KHbDViixYBlSpomEfrDafZ8mxtfivooGgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNYTLVLOl07RQ9eGDcZcl8srgl43MB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhLzhhZjQ1ZWMwYjhmN2MxYTFjYmJhM2JhMzJkZTMwMTQ4ZjAyMDJhZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcg2xDANBgkqhkiG9w0BAQsFAAOCAQEAbQf9Xz5FJExaGTJ8
UvF0dCDxq6TFWttxYsMkqmMbi7HAEyAwJ3ZGCP6buJXCAwIIdj0KHG1ks0ys9hmt
frWOSSkrASjK28XagIgaolAcAGIugbEriW2220dGqMEwBnF8HZgLY6BXT/DCry6w
4mhTE7lhaTG09IxjUIdZh18HLEwf8nSgKhDKNHzKIxu/fQZdTCWLyGZ9bu3Jwxi1
tr6dl5+bVrhi8cVooNOiEP0VbrCgFAs3BwcQXSYQZ7VdYqC6cInurVLLc0MK6iZe
E72KXU8zwAGY88CQVLJf9z2cics1lTpMd+/CU1uZFMXxdeg0XO+XFv1qEfl1exML
hONzWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org