Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa
File:                     bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa (raw, json)
Hash identifier:          yLOARWH5a92LozlM7AKWiTYvgxXckjVUIPgRg7U16MU=
Subject key identifier:   5A:21:74:AD:10:23:89:C9:B1:8E:84:6B:54:B4:16:74:4B:54:CC:D9
Certificate issuer:       /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial:       277011
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa
Signing time:             Tue 07 Nov 2023 16:00:44 +0000
ROA not before:           Tue 07 Nov 2023 16:00:38 +0000
ROA not after:            Tue 07 Nov 2028 16:00:38 +0000
asID:                     265689
IP address blocks:        200.123.59.0/24 maxlen: 24
                          200.123.60.0/23 maxlen: 24
                          200.50.162.0/23 maxlen: 24
                          200.50.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584593 (0x277011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Validity
            Not Before: Nov  7 16:00:38 2023 GMT
            Not After : Nov  7 16:00:38 2028 GMT
        Subject: CN=bf30c69eb9dc7ca3e064d4bc722268f5be71fe61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:82:d1:7d:08:bc:75:58:60:88:09:01:1d:
                    0c:ea:12:88:8b:a0:2e:de:6f:d3:6c:72:fe:e1:5f:
                    8b:21:82:6a:8d:92:50:85:17:4c:96:dc:54:85:11:
                    67:92:d3:78:01:ca:21:4f:fc:7e:5c:93:b1:1c:e0:
                    04:ec:8a:4b:96:cc:fd:6b:40:4a:39:6b:0e:03:32:
                    2f:80:ea:b6:2e:01:ef:49:cb:bf:b8:49:9a:53:f1:
                    ea:36:cd:88:e7:e2:3e:8a:85:9a:c0:d9:51:df:4a:
                    56:d0:88:42:ba:63:5b:07:a5:9e:d5:3c:cf:79:72:
                    49:4b:84:ac:9d:7c:d9:69:d1:02:7d:3f:6c:4e:11:
                    e7:80:4b:06:32:13:77:02:61:2a:b2:49:5b:12:c8:
                    e3:77:56:33:8d:6b:89:21:ba:ff:a7:f7:cf:5d:a6:
                    08:8d:e2:07:98:03:5d:a4:ff:c0:bd:0c:44:2d:da:
                    11:aa:11:a0:68:48:3d:22:42:a1:f4:ed:11:51:83:
                    2a:82:8b:f2:e3:39:f0:34:e6:fd:fb:72:25:71:ac:
                    83:2b:84:c2:39:b1:e1:4f:c0:b7:18:97:a4:32:cb:
                    ab:78:10:ac:65:02:87:e4:2a:61:0f:9f:92:92:74:
                    8b:cf:be:ae:69:55:5b:35:72:4e:1d:9e:0e:22:b2:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:21:74:AD:10:23:89:C9:B1:8E:84:6B:54:B4:16:74:4B:54:CC:D9
            X509v3 Authority Key Identifier:
                keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bf30c69eb9dc7ca3e064d4bc722268f5be71fe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23
                  200.50.165.0/24
                  200.123.59.0-200.123.61.255

    Signature Algorithm: sha256WithRSAEncryption
         30:44:7b:54:b1:92:04:34:6c:31:17:0b:d7:fe:29:03:61:c1:
         ef:1d:63:05:f5:e5:38:45:d6:af:50:f2:71:35:bf:0b:f3:c1:
         bc:86:95:6e:5b:7f:79:a2:d9:b4:49:5c:a6:33:0b:b9:6a:d8:
         ff:4a:0b:9f:c8:b3:42:8c:2b:92:58:9b:72:84:9b:da:91:7b:
         96:7a:08:88:b7:7c:3a:b2:2d:de:12:e3:4c:81:e5:4e:a1:2c:
         85:27:9a:7b:f8:7f:6a:18:45:d6:0e:fc:7e:71:f6:3d:b2:2b:
         b2:fe:68:3b:d7:dc:c1:66:47:b3:23:28:31:62:5e:46:a3:6f:
         dd:45:0e:25:6d:0a:49:bb:75:8d:b5:06:86:03:7a:f9:e5:4d:
         26:01:bd:22:e1:5c:1b:6c:10:82:2c:08:2c:5d:ba:29:37:78:
         c2:2e:f6:9a:02:5d:69:31:4d:ec:08:ec:c1:11:3b:90:82:4c:
         5d:ec:15:7a:73:ff:23:0d:d1:56:5c:e6:cd:f6:c0:fd:ef:cd:
         84:60:e1:e1:6a:31:a1:40:50:56:2c:26:ac:c7:f4:8b:49:0f:
         a3:3b:b0:bf:ff:d4:31:0c:d4:5c:a7:88:ef:a8:5f:74:48:71:
         f7:bb:6c:2c:51:34:27:0f:6f:03:a6:3b:a3:20:31:76:8f:e6:
         62:b3:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org