Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/c8a12ce374038c15ff61ce8a40a090ea504b2744.roa
File:                     c8a12ce374038c15ff61ce8a40a090ea504b2744.roa (raw, json)
Hash identifier:          e7iTEO0pE69KY/6sMUUyZZvGOqIG6bnWDKEPfFz2NIQ=
Subject key identifier:   B3:47:A8:BD:17:72:B2:C7:D4:9F:7C:19:79:DD:FC:B5:F6:6C:B3:E9
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       034D50
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/c8a12ce374038c15ff61ce8a40a090ea504b2744.roa
Signing time:             Thu 10 Aug 2023 14:40:39 +0000
ROA not before:           Wed 09 Aug 2023 14:40:39 +0000
ROA not after:            Sun 10 Aug 2025 14:40:39 +0000
asID:                     15311
IP address blocks:        200.54.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216400 (0x34d50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:40:39 2023 GMT
            Not After : Aug 10 14:40:39 2025 GMT
        Subject: CN=c8a12ce374038c15ff61ce8a40a090ea504b2744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:39:bd:57:9c:37:60:a6:9a:ca:56:f1:69:
                    26:5e:77:96:b4:56:dc:fd:88:88:09:94:f0:77:a8:
                    8a:aa:7b:ab:da:e6:e0:54:87:9b:7a:34:4b:ca:c0:
                    64:11:69:2f:ac:4e:db:ed:c3:6c:0c:a6:1d:1f:57:
                    b8:5d:4f:fb:a4:1c:2e:12:8a:c3:73:24:ac:45:be:
                    32:bf:6e:18:d3:1e:61:96:68:e4:4a:51:49:43:77:
                    44:87:62:89:5e:93:90:04:2d:c5:2c:ff:38:27:90:
                    52:9e:a1:7c:82:7a:a1:cf:4d:bd:2e:ef:83:f4:5b:
                    73:1e:64:0b:62:15:2c:67:a8:62:e0:6a:49:d3:01:
                    39:c5:15:b0:90:fa:9b:d5:6a:eb:bf:b9:2d:f3:f8:
                    b3:ae:1c:f6:a1:2b:fb:d3:eb:49:f2:50:47:82:fd:
                    a0:b0:9f:d6:90:83:94:66:89:46:49:fc:1d:78:3d:
                    3e:f6:16:cb:91:62:84:f1:e4:5b:ee:61:3d:e7:a6:
                    3b:8f:d4:e1:72:c2:ee:2a:91:23:e6:e2:f9:a0:fe:
                    43:d8:ce:37:f2:18:c6:8b:ae:67:9c:19:02:37:f1:
                    38:0b:57:40:11:f3:bd:7d:02:ae:60:cd:68:8d:d4:
                    9e:e6:75:bf:2f:49:4d:ab:03:9e:b2:8d:1e:7a:60:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:A8:BD:17:72:B2:C7:D4:9F:7C:19:79:DD:FC:B5:F6:6C:B3:E9
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/c8a12ce374038c15ff61ce8a40a090ea504b2744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:31:15:86:d6:a9:c1:66:bb:fa:32:88:aa:28:ad:f1:83:
         41:ae:41:36:43:9e:8e:16:10:5f:27:3e:f5:c0:be:dd:41:fa:
         56:19:72:54:8f:26:90:91:37:f7:76:bb:a4:26:48:34:ce:34:
         b6:c5:39:41:50:0a:dd:44:3f:e3:1c:b8:56:b5:5b:fa:5d:4e:
         53:80:3e:92:5f:1b:73:79:68:c1:94:b9:f1:04:b3:11:ee:b7:
         3b:7b:01:9f:ac:a7:3b:e7:1b:b6:5d:f6:07:6b:d3:0b:ee:5f:
         45:51:15:0e:4c:0c:f7:fe:48:df:b8:41:d4:99:97:0a:b0:02:
         ca:a1:fe:b1:d3:f6:bb:4e:df:32:00:33:fc:25:53:2c:9a:73:
         0b:5c:ec:63:2a:d7:18:4b:dd:02:24:f6:7f:ac:80:d7:ca:eb:
         1e:a6:a3:b7:a8:0d:cc:7a:f6:2b:5d:91:d3:4d:33:cf:90:f9:
         40:4e:93:d1:4c:10:4b:a4:05:25:61:b9:0e:05:9d:43:d7:17:
         5e:68:b4:30:88:d4:7d:4d:e8:0b:54:eb:b5:1b:7e:36:2c:b5:
         74:e2:b1:08:a4:37:4c:cf:b2:bd:d7:22:25:3f:af:92:9d:bd:
         74:0a:36:aa:3f:8c:50:29:c4:0e:1e:23:10:57:4f:50:3b:e0:
         6a:a3:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org