Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/feb7d3052176641facd69df7c592eea083e9988c.roa
File:                     feb7d3052176641facd69df7c592eea083e9988c.roa (raw, json)
Hash identifier:          yX0BvdiKnRLfpOUC+hD/9M4yhNCmbDP8PBZm597meyY=
Subject key identifier:   33:34:7D:5E:1B:E4:29:95:38:1C:EF:C4:3E:CC:78:40:FF:23:9B:1C
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04F439
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/feb7d3052176641facd69df7c592eea083e9988c.roa
Signing time:             Mon 16 Oct 2023 22:10:21 +0000
ROA not before:           Sun 15 Oct 2023 22:10:21 +0000
ROA not after:            Thu 16 Oct 2025 22:10:21 +0000
asID:                     52310
IP address blocks:        200.54.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324665 (0x4f439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:10:21 2023 GMT
            Not After : Oct 16 22:10:21 2025 GMT
        Subject: CN=feb7d3052176641facd69df7c592eea083e9988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:8d:7f:8b:31:74:ec:7e:25:94:e4:c5:f4:
                    ac:42:b1:46:b3:4e:49:ec:8b:8d:72:5b:88:c1:bb:
                    aa:47:3c:0a:ad:56:f2:64:54:58:52:16:a0:86:9e:
                    0f:11:0c:8b:3e:de:a9:94:1e:4d:b8:d9:f3:83:7d:
                    07:30:9c:c0:c0:de:3d:c9:c3:92:b1:5c:ca:bb:4d:
                    38:78:88:6b:00:4d:ea:1e:2d:67:65:6c:5f:d6:11:
                    e5:eb:f4:fc:e1:72:a3:ba:a0:55:07:79:9e:da:3f:
                    43:e9:55:5f:a6:03:e0:7b:4c:59:64:1e:87:3f:66:
                    c5:4a:29:5b:10:2f:b6:20:3a:ba:b4:ae:2d:a4:06:
                    35:d7:3e:7c:7d:b9:32:84:81:bc:ba:50:38:ed:74:
                    d2:b8:7a:61:06:bb:ef:62:a2:f6:dc:a1:63:6e:ed:
                    d1:dd:99:41:b9:7a:2a:51:02:2a:00:65:55:47:b8:
                    85:04:d3:1a:07:35:33:76:39:dd:cf:0d:e0:af:57:
                    7b:82:ac:d9:4d:07:61:7b:84:0f:a1:b6:77:58:0a:
                    80:fd:21:44:a0:65:2b:d6:db:e8:a2:14:31:fd:47:
                    07:af:b2:a1:56:d7:3f:85:27:ae:d3:2b:ae:39:e7:
                    e2:9f:e1:95:49:f3:8a:4b:cc:7c:9e:b5:72:0a:c8:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:7D:5E:1B:E4:29:95:38:1C:EF:C4:3E:CC:78:40:FF:23:9B:1C
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/feb7d3052176641facd69df7c592eea083e9988c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:65:48:a8:72:a0:c8:1f:4b:e3:cf:23:ca:21:88:86:c3:
         6e:fc:09:31:58:3c:f9:a0:e7:46:ae:15:15:a1:52:ca:6e:14:
         01:57:62:ae:cd:e8:a1:4b:35:4d:24:89:81:49:20:2b:93:7b:
         b4:c1:19:e5:66:04:9c:0d:21:0e:21:02:fd:b3:ec:b2:3b:df:
         dc:29:63:4c:55:25:07:e8:05:08:ac:ea:98:b2:05:b6:af:ec:
         db:5a:ba:ce:36:7c:31:33:6b:de:ed:23:b4:22:8d:64:3e:ee:
         86:42:8f:0e:5b:a4:27:fd:83:19:4e:08:fd:6e:13:3f:ec:62:
         24:51:0f:ed:68:d3:5f:37:ca:93:72:9b:bf:0c:4f:33:31:70:
         8c:dd:fd:20:db:4c:12:76:dc:5a:69:3d:2f:e2:b8:d4:e9:78:
         a1:89:f6:51:92:ef:6b:00:b3:e5:77:cf:47:5d:0c:14:27:e2:
         a8:22:67:59:88:73:b6:e1:fd:ff:60:b4:ae:f9:70:61:cb:b1:
         80:4a:05:67:f6:c3:42:98:39:67:56:b5:bc:55:23:50:72:fc:
         ff:3b:41:6a:18:47:b9:a2:97:08:28:9b:2d:8a:f1:83:20:28:
         ca:e0:a1:00:d0:cb:5f:b6:5a:8c:04:c7:11:3f:3f:48:f7:9d:
         c2:d0:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org