Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/a412c4966cefc1cc2e1072eb78e1a308b2229ea5.roa
File:                     a412c4966cefc1cc2e1072eb78e1a308b2229ea5.roa (raw, json)
Hash identifier:          HQquuLM0StcTffq/BCWJlqZrqDmhPuWMPE6BlRInPE8=
Subject key identifier:   F9:3A:63:38:D2:B1:F6:A3:EF:D2:CD:FF:14:67:78:81:0F:F9:9E:7E
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       033896
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/a412c4966cefc1cc2e1072eb78e1a308b2229ea5.roa
Signing time:             Thu 10 Aug 2023 14:38:05 +0000
ROA not before:           Wed 09 Aug 2023 14:38:05 +0000
ROA not after:            Sun 10 Aug 2025 14:38:05 +0000
asID:                     15311
IP address blocks:        200.54.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211094 (0x33896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:38:05 2023 GMT
            Not After : Aug 10 14:38:05 2025 GMT
        Subject: CN=a412c4966cefc1cc2e1072eb78e1a308b2229ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:34:cb:0e:0e:b2:e9:67:29:ac:83:eb:f6:
                    fd:0c:8c:a5:85:d8:dd:64:b3:15:7e:ea:51:1a:35:
                    6e:ee:cc:26:57:26:4d:e0:c5:a9:48:6a:3e:78:ae:
                    09:d6:79:51:fd:64:45:56:d5:e7:94:47:5e:3f:93:
                    c1:87:b0:5d:82:d3:5d:32:eb:41:f8:3d:b3:e8:28:
                    c7:96:61:b9:b2:b1:06:2b:7c:3f:87:ce:e4:45:18:
                    39:a3:fb:28:00:84:cc:12:28:04:c2:c2:57:e4:be:
                    bb:92:65:e7:22:b3:72:c8:1b:01:e2:1f:15:ad:f7:
                    95:b5:d5:db:4e:b3:64:17:76:a0:40:0c:48:0f:88:
                    83:54:d4:bb:87:ea:66:03:37:99:cf:1e:46:df:c3:
                    76:95:ae:26:4f:a2:56:ba:7d:12:bd:52:f6:30:e7:
                    f4:6a:57:24:70:1e:c3:3e:3d:77:36:98:5c:d1:fc:
                    7c:9d:e4:b3:aa:87:ae:58:9a:5d:1c:4e:03:c2:fe:
                    c3:db:c0:4e:7b:10:8d:87:5a:99:3f:58:d0:d1:c9:
                    e3:3b:10:ae:ba:da:36:4f:90:17:88:0f:18:0e:7b:
                    d8:f0:0e:d1:bc:aa:03:0b:bb:96:61:80:86:72:fc:
                    0f:98:57:00:78:86:ba:9e:a3:e7:f6:b0:e0:52:7f:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:63:38:D2:B1:F6:A3:EF:D2:CD:FF:14:67:78:81:0F:F9:9E:7E
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/a412c4966cefc1cc2e1072eb78e1a308b2229ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:85:81:85:c8:5d:7f:96:06:ca:ea:a9:8e:88:b7:9f:65:58:
         02:15:12:fe:95:b1:b0:b0:8a:f1:bc:15:1d:b4:a1:9b:8e:fa:
         61:a2:76:b9:2e:b6:72:09:4e:be:d0:aa:b0:51:75:f2:90:e4:
         19:13:f0:2d:09:6f:46:7b:80:e8:a8:3d:2d:7b:6c:4c:e8:9e:
         d2:9b:69:29:82:e4:d8:ac:30:87:2a:1c:ac:cc:5f:48:fc:b5:
         43:68:cf:d9:fa:d1:93:37:6b:df:a2:c9:17:65:cd:b1:97:a5:
         b9:aa:04:a9:69:3d:ed:93:2a:34:1f:f2:7a:f5:43:77:07:3b:
         8d:47:ea:f6:24:b8:5b:9d:64:8c:d1:ec:83:d8:a7:6e:12:32:
         7f:50:70:24:7f:27:1f:3b:a0:0e:96:f7:31:80:2a:88:2a:8c:
         af:25:d6:37:e8:7a:ae:9a:c9:91:5c:18:80:2a:4f:3b:b2:d1:
         66:98:5c:fd:2e:2d:ca:74:8d:ab:8d:b0:17:fe:ac:48:61:09:
         69:02:c9:cb:54:70:59:22:33:f0:6d:75:d4:18:60:f1:0b:7f:
         81:c3:a6:36:74:cc:96:57:e9:b1:00:9c:02:cd:b7:cc:f2:f2:
         f5:0b:8d:b7:1b:22:06:91:36:68:77:c5:89:e0:8f:a8:2f:54:
         b3:14:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org