Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/fa83876e66fe0a17f13726a9c675edacf812aca0.roa
File:                     fa83876e66fe0a17f13726a9c675edacf812aca0.roa (raw, json)
Hash identifier:          cKCYSeBFSOG2aziomcsEDLDxauB89Borflt1ZdLhhQU=
Subject key identifier:   C7:46:B6:7B:FB:ED:02:00:66:61:8A:39:CB:D2:62:24:CD:E0:AD:D7
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       032BD6
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/fa83876e66fe0a17f13726a9c675edacf812aca0.roa
Signing time:             Thu 10 Aug 2023 14:35:37 +0000
ROA not before:           Wed 09 Aug 2023 14:35:36 +0000
ROA not after:            Sun 10 Aug 2025 14:35:36 +0000
asID:                     15311
IP address blocks:        200.54.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207830 (0x32bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Aug  9 14:35:36 2023 GMT
            Not After : Aug 10 14:35:36 2025 GMT
        Subject: CN=fa83876e66fe0a17f13726a9c675edacf812aca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:9e:17:4b:39:99:b5:de:02:1b:4c:6d:b2:
                    dc:9a:be:c2:ce:97:3d:3c:d3:44:42:1c:1f:93:2c:
                    cd:c2:22:0b:12:6f:74:fa:88:e8:98:e3:8b:bd:20:
                    d2:9a:3c:78:32:8a:28:67:cd:38:ab:b9:b2:d6:04:
                    2c:91:5a:d1:60:4c:ba:79:ac:93:9a:d2:9e:52:52:
                    d8:ac:99:ba:7a:92:fc:9b:99:f5:02:0c:ab:a6:80:
                    ab:98:24:98:45:5a:c9:06:22:22:21:5d:bb:79:c4:
                    ce:d6:71:79:66:0e:4a:65:9b:33:c7:1f:bb:77:b9:
                    91:f1:7a:1f:9c:85:3e:fd:8e:76:9b:30:45:e8:e4:
                    e6:79:82:99:67:27:06:b5:13:8a:19:77:5f:ff:c6:
                    c3:5e:b6:72:71:d6:7c:3a:67:ec:a7:fc:a7:5b:1a:
                    fb:e1:e4:ab:b5:01:41:87:20:45:21:4a:2d:8b:4e:
                    2c:57:4a:f2:f0:75:92:53:65:2d:97:80:33:39:9c:
                    1e:4a:52:da:4e:4d:d8:cf:22:81:3a:99:c5:9a:b0:
                    53:05:b5:85:87:f5:bc:22:da:bc:51:74:02:b4:8e:
                    2a:b1:ed:fa:8c:d3:5c:b9:d2:1c:e7:aa:82:aa:0b:
                    3c:24:bf:f7:f0:8d:dc:af:20:d3:d2:63:28:65:2a:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:46:B6:7B:FB:ED:02:00:66:61:8A:39:CB:D2:62:24:CD:E0:AD:D7
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/fa83876e66fe0a17f13726a9c675edacf812aca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:1c:de:22:17:a9:ae:e3:1b:a9:af:65:61:c1:61:3d:13:
         31:18:40:cc:15:0a:b6:65:3d:0d:bb:35:47:5a:28:05:a5:e8:
         b6:97:68:e2:29:59:a5:06:e2:04:e8:57:8c:67:54:3d:b7:ca:
         92:5d:ab:23:58:34:8f:9f:fc:60:7a:c4:2e:14:3a:fd:08:6c:
         b8:1c:b8:d6:00:f8:54:06:92:07:a7:62:53:1c:0d:11:77:05:
         fd:df:4c:30:34:9e:ff:99:1d:21:30:d3:26:33:88:64:3a:ed:
         a3:db:1f:71:c9:d1:1a:f2:1b:53:30:67:bc:91:22:54:15:a2:
         3e:dc:e5:d9:e9:36:e1:d0:b3:6c:e5:56:90:02:f8:2a:e4:ad:
         0e:e6:02:6f:ab:09:67:cd:c4:56:6d:70:5e:84:75:3c:87:cf:
         05:a9:3e:2c:b1:42:93:1f:6c:fa:3e:5f:4e:f0:1b:5e:01:ca:
         b7:86:e4:ab:d0:6b:a8:25:66:37:a0:fa:fa:c3:e9:bf:15:99:
         8b:fa:2e:ce:ac:3f:8c:bf:00:75:df:8f:ef:49:b3:cd:ec:c8:
         84:a8:c0:ec:55:26:e0:5d:1d:1e:65:94:7c:10:68:d2:58:df:
         1a:09:78:64:22:6c:18:3e:74:4f:a1:43:72:13:b0:0b:95:ae:
         03:af:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org