Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/ff8f1a1d8a0eef406069a5a6f42f6eeaa6dc2cb3.roa
File:                     ff8f1a1d8a0eef406069a5a6f42f6eeaa6dc2cb3.roa (raw, json)
Hash identifier:          o8bloShFsPV5G/XBBXiEyxQp5JH7y/Vn71GQ/AFV6ME=
Subject key identifier:   5F:78:4C:CF:EF:7F:A1:DB:35:6C:73:B1:3E:89:D4:FA:50:CA:3A:FF
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04F00B
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/ff8f1a1d8a0eef406069a5a6f42f6eeaa6dc2cb3.roa
Signing time:             Mon 16 Oct 2023 22:09:40 +0000
ROA not before:           Sun 15 Oct 2023 22:09:40 +0000
ROA not after:            Thu 16 Oct 2025 22:09:40 +0000
asID:                     11340
IP address blocks:        200.54.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323595 (0x4f00b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 15 22:09:40 2023 GMT
            Not After : Oct 16 22:09:40 2025 GMT
        Subject: CN=ff8f1a1d8a0eef406069a5a6f42f6eeaa6dc2cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:99:2e:bb:1a:c2:08:70:e7:78:80:6c:b7:
                    01:62:37:30:ed:65:d0:4f:a9:4f:8b:52:ea:11:2b:
                    df:c4:bb:85:70:90:f6:96:18:3c:6c:37:3f:d6:57:
                    dc:ce:c8:1c:9a:b4:a2:af:fa:ef:18:46:1c:10:21:
                    33:43:62:40:37:d2:d5:1a:d4:bc:08:f4:19:f8:91:
                    c2:95:1c:d4:e5:96:a7:df:b0:7c:53:9d:fe:5d:cb:
                    3a:2e:82:e0:e6:5f:07:2f:65:0b:2d:ae:f5:cf:e7:
                    e2:2f:e4:99:29:3b:e2:43:14:ba:5f:46:56:b8:0b:
                    1f:df:8c:36:19:7e:ae:08:ed:4e:8e:6d:83:8f:3f:
                    9a:03:f9:df:56:c0:ff:77:19:fb:e1:1b:1b:9c:62:
                    94:65:e5:2c:a0:2c:99:07:8b:55:48:c6:74:b7:12:
                    76:a6:00:44:95:f1:77:b9:43:49:aa:12:e9:76:c0:
                    bd:a3:87:8e:41:10:ff:8a:73:6d:fb:a2:6a:24:b5:
                    20:e7:2f:81:f9:db:bb:00:58:e2:78:7c:11:94:02:
                    13:c9:73:b4:96:9f:57:77:13:b3:bf:d4:c2:2a:48:
                    00:c5:53:14:ae:84:e9:cf:16:cc:18:7e:22:d0:7f:
                    0f:72:dd:9a:d8:cd:4c:18:b6:f1:3d:1a:79:15:ea:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:4C:CF:EF:7F:A1:DB:35:6C:73:B1:3E:89:D4:FA:50:CA:3A:FF
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/ff8f1a1d8a0eef406069a5a6f42f6eeaa6dc2cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:df:20:10:eb:04:53:c7:cd:86:03:bd:59:7d:55:ce:ed:
         34:8f:e6:63:1e:f7:25:0d:e8:68:a2:70:23:f3:0f:a3:45:80:
         7c:03:4e:3c:9e:2b:a2:1e:1c:95:2f:c8:f7:d2:a6:eb:2a:d5:
         00:40:24:3b:f2:ed:ed:75:01:c6:61:1a:fd:92:3d:3e:bd:79:
         f4:11:81:cd:54:0b:03:a6:ac:a0:fe:41:fb:b7:e5:af:90:d9:
         2c:13:fd:cf:a6:46:03:51:c2:00:01:d1:66:1b:7c:84:83:51:
         db:c1:a0:1c:3c:a0:2e:d7:23:ee:90:6f:15:00:97:75:9e:af:
         08:5c:82:50:4a:38:18:71:36:17:0e:19:a0:c8:89:d3:35:b1:
         c4:2e:68:ac:8d:93:1b:4b:29:07:61:cf:b1:32:92:98:dd:72:
         87:ba:b5:6d:df:65:35:92:58:74:00:80:06:5c:4c:73:46:2f:
         dd:99:f3:b9:d3:ef:23:9f:18:51:67:04:61:2d:00:bc:b2:52:
         81:08:cf:5f:f2:90:50:9b:45:ea:45:9c:eb:f8:09:a1:e1:4f:
         2f:11:df:7e:d2:f2:91:e6:45:94:59:b8:00:9e:a5:a6:b1:e3:
         37:08:a3:fa:2a:e7:d3:1d:34:47:91:46:e1:8e:14:dd:4b:e3:
         90:93:d8:dc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBPALMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMxMDE1
MjIwOTQwWhcNMjUxMDE2MjIwOTQwWjAzMTEwLwYDVQQDEyhmZjhmMWExZDhhMGVl
ZjQwNjA2OWE1YTZmNDJmNmVlYWE2ZGMyY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5SqZLrsawghw53iAbLcBYjcw7WXQT6lPi1LqESvfxLuFcJD2
lhg8bDc/1lfczsgcmrSir/rvGEYcECEzQ2JAN9LVGtS8CPQZ+JHClRzU5Zan37B8
U53+Xcs6LoLg5l8HL2ULLa71z+fiL+SZKTviQxS6X0ZWuAsf34w2GX6uCO1Ojm2D
jz+aA/nfVsD/dxn74RsbnGKUZeUsoCyZB4tVSMZ0txJ2pgBElfF3uUNJqhLpdsC9
o4eOQRD/inNt+6JqJLUg5y+B+du7AFjieHwRlAITyXO0lp9XdxOzv9TCKkgAxVMU
roTpzxbMGH4i0H8Pct2a2M1MGLbxPRp5FerMqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF94TM/vf6HbNWxzsT6J1PpQyjr/MB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhL2ZmOGYxYTFkOGEwZWVmNDA2MDY5YTVhNmY0MmY2ZWVhYTZkYzJjYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMg2cjANBgkqhkiG9w0BAQsFAAOCAQEAZejfIBDrBFPHzYYD
vVl9Vc7tNI/mYx73JQ3oaKJwI/MPo0WAfANOPJ4roh4clS/I99Km6yrVAEAkO/Lt
7XUBxmEa/ZI9Pr159BGBzVQLA6asoP5B+7flr5DZLBP9z6ZGA1HCAAHRZht8hINR
28GgHDygLtcj7pBvFQCXdZ6vCFyCUEo4GHE2Fw4ZoMiJ0zWxxC5orI2TG0spB2HP
sTKSmN1yh7q1bd9lNZJYdACABlxMc0Yv3ZnzudPvI58YUWcEYS0AvLJSgQjPX/KQ
UJtF6kWc6/gJoeFPLxHfftLykeZFlFm4AJ6lprHjNwij+irn0x00R5FG4Y4U3Uvj
kJPY3A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org