Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/bf4e1a387938b8c6773b9a0adbe6975219ca52aa.roa
File:                     bf4e1a387938b8c6773b9a0adbe6975219ca52aa.roa (raw, json)
Hash identifier:          IcmA4w3bmP/l8keokeSow2/WLDl+QFSW8+DFZLYNPS0=
Subject key identifier:   87:FE:E3:F2:53:5F:D3:1E:F1:44:91:65:7F:F1:91:42:4F:89:11:B1
Certificate issuer:       /CN=ae3b6dcb33e6143b4093d7f50d6cdab29eaec143
Certificate serial:       35C6
Authority key identifier: 99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/bf4e1a387938b8c6773b9a0adbe6975219ca52aa.roa
Signing time:             Wed 24 Mar 2021 14:46:48 +0000
ROA not before:           Wed 24 Mar 2021 14:46:47 +0000
ROA not after:            Tue 24 Mar 2026 14:46:47 +0000
asID:                     16906
IP address blocks:        200.31.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13766 (0x35c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae3b6dcb33e6143b4093d7f50d6cdab29eaec143
        Validity
            Not Before: Mar 24 14:46:47 2021 GMT
            Not After : Mar 24 14:46:47 2026 GMT
        Subject: CN=bf4e1a387938b8c6773b9a0adbe6975219ca52aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:5e:ac:69:55:e1:23:36:34:9b:fa:b2:4a:
                    e6:9f:14:fd:5e:2e:1d:8d:df:cb:68:8c:c8:52:ff:
                    b1:f0:ce:7e:5c:af:4d:e6:72:03:f6:9c:64:44:7e:
                    fb:19:ab:b1:7c:02:cb:00:59:0f:af:0f:78:b2:02:
                    69:f3:5a:27:15:7a:5b:a9:f0:e4:d3:7a:9b:fd:11:
                    ee:0b:2b:76:a1:fa:c2:16:7b:84:06:33:92:3c:fa:
                    73:ac:5b:05:fb:0f:61:4b:e4:f9:40:fe:70:56:e3:
                    c6:37:32:b2:25:75:ea:71:e1:9a:67:84:ca:37:07:
                    25:e5:d0:84:2f:65:b8:57:19:25:da:19:78:2f:7b:
                    16:16:63:f7:f9:de:18:43:fc:8b:24:21:cd:e5:21:
                    04:77:16:cb:6d:63:03:2d:ac:99:ac:1e:dd:3a:dd:
                    79:a2:12:7a:ce:dc:bc:5e:79:d8:a5:ed:4e:f2:92:
                    cf:d3:91:8f:02:0e:92:bc:74:4e:93:f1:65:ba:b6:
                    5d:bc:98:da:49:f8:e3:53:74:ea:48:19:0b:6e:e1:
                    7e:dd:dd:12:42:22:7d:f7:9f:8a:02:d3:77:e0:63:
                    a2:5d:aa:98:53:d6:47:35:d2:2c:ed:13:bf:d1:ef:
                    30:6c:c2:a7:8c:23:a4:1e:22:0c:33:67:cf:9c:a0:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FE:E3:F2:53:5F:D3:1E:F1:44:91:65:7F:F1:91:42:4F:89:11:B1
            X509v3 Authority Key Identifier:
                keyid:99:0F:80:7D:3A:92:E7:29:88:03:22:F0:A7:45:7C:2B:F2:60:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/bf4e1a387938b8c6773b9a0adbe6975219ca52aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17e83500-1aba-4739-8aa7-6f6a087ecffe/ae3b6dcb33e6143b4093d7f50d6cdab29eaec143.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:87:70:ab:3b:7c:32:12:e1:ef:60:d6:b9:27:c5:95:1b:
         54:21:f8:6c:94:4e:58:eb:4b:99:3f:29:47:01:b2:e2:71:af:
         e7:7e:8f:4f:d4:c8:17:f6:15:2e:18:b3:d3:82:13:6f:2e:59:
         49:9c:32:71:15:ac:02:16:16:52:86:ce:2a:f2:dd:29:f6:60:
         6d:cf:c5:9b:4b:6c:50:a0:53:9a:00:73:bc:9c:0a:6f:56:a2:
         3c:3c:cc:38:f6:50:a3:0f:7a:e9:27:e3:6d:d0:df:e6:fb:28:
         7c:0e:ab:1d:4e:33:86:cc:d6:82:a0:91:de:59:bb:23:2c:b7:
         be:fa:48:7f:e2:77:e1:f7:1d:bb:99:2e:cc:3c:5d:4e:a6:d2:
         5d:b6:85:5a:31:94:06:36:4b:2e:75:7d:3f:38:d2:24:78:9f:
         64:88:59:9f:eb:73:90:1a:b4:f4:0d:fd:f7:ff:18:cc:8b:64:
         61:43:e2:77:13:da:cc:d9:11:f3:3d:80:2e:bb:9f:c2:66:e1:
         76:22:38:48:b6:ca:f4:5e:65:87:e2:26:d1:23:f7:5e:df:1c:
         8d:20:9b:95:88:c9:b3:4f:86:ee:2f:68:fb:62:bb:ab:e4:f5:
         8c:a3:25:d3:0f:7b:a8:0c:aa:c7:d3:3f:fe:35:7c:64:37:89:
         ab:16:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org