Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0165ab4b5bb67a90a5e80912405b69f6d64f15fe.roa
File:                     0165ab4b5bb67a90a5e80912405b69f6d64f15fe.roa (raw, json)
Hash identifier:          rLb4Xjy9GSYx9qa0ZYnjaPDzFpWs/il0Mn/5LcCYBZs=
Subject key identifier:   27:F5:50:DF:DC:05:E3:40:7F:84:41:0F:E3:EE:DD:F0:36:90:8F:28
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11D681
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0165ab4b5bb67a90a5e80912405b69f6d64f15fe.roa
Signing time:             Wed 29 Nov 2023 12:40:20 +0000
ROA not before:           Wed 29 Nov 2023 12:40:20 +0000
ROA not after:            Sat 29 Nov 2025 12:40:20 +0000
asID:                     22927
IP address blocks:        179.36.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169025 (0x11d681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 12:40:20 2023 GMT
            Not After : Nov 29 12:40:20 2025 GMT
        Subject: CN=0165ab4b5bb67a90a5e80912405b69f6d64f15fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:d4:15:fd:14:af:fd:44:f8:ba:02:24:f1:
                    96:20:1b:7b:7b:84:2c:3a:8b:25:50:e1:23:ae:58:
                    46:5b:4d:b4:f6:6b:aa:c5:48:7a:f7:79:92:2b:3e:
                    62:fe:2a:4d:81:9f:e1:bc:39:74:f7:56:2a:6c:16:
                    33:a6:51:c9:39:ee:a8:9b:9b:0a:f3:e4:cc:05:a3:
                    68:8e:77:31:89:38:3d:4a:bb:66:84:b9:58:e9:94:
                    19:0d:b7:76:96:f6:a9:06:71:ff:e3:a9:11:3e:11:
                    d6:0e:67:64:d0:a6:60:a4:a8:43:e5:5e:54:d5:a6:
                    37:3a:9e:aa:9e:a6:7a:1a:9e:33:ad:fc:1b:6b:f7:
                    09:75:24:cc:d4:58:de:39:b8:52:e0:27:f1:b7:94:
                    4b:7f:83:b1:71:72:27:10:95:8c:8d:d1:c4:89:66:
                    8e:3e:16:89:a1:19:c3:2e:07:78:40:3c:cd:f3:d1:
                    b0:50:b7:cb:ef:be:11:e9:44:66:24:d5:92:79:37:
                    ed:e2:83:35:4f:75:99:77:9b:82:47:64:60:24:b1:
                    dd:c9:60:1e:ce:dd:f4:e2:8c:07:52:30:d6:8d:f4:
                    9d:43:3f:11:43:39:14:de:ea:22:6d:84:25:40:f7:
                    8c:b2:fa:dc:02:11:c1:ae:1d:9e:5a:19:f6:2e:12:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:50:DF:DC:05:E3:40:7F:84:41:0F:E3:EE:DD:F0:36:90:8F:28
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0165ab4b5bb67a90a5e80912405b69f6d64f15fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:20:f1:e8:a7:5c:bf:f4:b6:c0:0a:98:5e:6e:55:d6:9a:
         e7:2d:a4:bf:94:3e:43:cb:95:8f:13:38:d4:85:ee:1d:0d:7a:
         1f:8f:0b:e9:64:c0:5f:c4:6e:bb:d3:87:75:d6:98:c4:36:2e:
         1a:28:0d:37:4d:b6:52:46:cd:21:6d:76:2d:ed:e9:b4:ef:c2:
         e8:93:43:79:bd:96:37:09:40:c1:8f:cf:8b:73:51:03:4b:fa:
         e6:45:b5:98:9f:f5:00:65:19:5d:99:bb:fc:b6:de:a5:03:b0:
         fc:2e:e6:35:34:3c:da:76:84:b3:22:7d:84:80:f3:35:d3:3a:
         3d:00:a1:f7:d1:a5:f0:ac:3d:c8:49:93:e3:ac:14:56:de:bc:
         6e:8b:c9:28:4f:51:eb:cc:92:96:1e:c2:c0:06:a3:77:ed:71:
         56:c6:19:27:9a:10:60:07:7c:f8:23:8e:f2:e0:19:f1:71:ec:
         4a:b6:69:93:34:e9:9c:0f:ed:45:1b:8c:5a:cb:7c:74:a7:ef:
         92:22:28:fb:75:2c:36:d4:3b:2f:51:93:a3:5a:bd:64:ce:0e:
         aa:f1:6c:53:28:98:81:f1:57:bc:5e:f6:8d:9a:e6:89:3b:51:
         e9:a3:78:24:cd:6b:60:df:58:ee:b2:bd:71:16:6e:e9:af:26:
         e7:86:b3:bf
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDEdaBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MTI0MDIwWhcNMjUxMTI5MTI0MDIwWjAzMTEwLwYDVQQDEygwMTY1YWI0YjViYjY3
YTkwYTVlODA5MTI0MDViNjlmNmQ2NGYxNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwYfUFf0Ur/1E+LoCJPGWIBt7e4QsOoslUOEjrlhGW0209muq
xUh693mSKz5i/ipNgZ/hvDl091YqbBYzplHJOe6om5sK8+TMBaNojncxiTg9Srtm
hLlY6ZQZDbd2lvapBnH/46kRPhHWDmdk0KZgpKhD5V5U1aY3Op6qnqZ6Gp4zrfwb
a/cJdSTM1FjeObhS4Cfxt5RLf4OxcXInEJWMjdHEiWaOPhaJoRnDLgd4QDzN89Gw
ULfL774R6URmJNWSeTft4oM1T3WZd5uCR2RgJLHdyWAezt304owHUjDWjfSdQz8R
QzkU3uoibYQlQPeMsvrcAhHBrh2eWhn2LhIFIQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFCf1UN/cBeNAf4RBD+Pu3fA2kI8oMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzAxNjVhYjRiNWJiNjdhOTBhNWU4MDkxMjQwNWI2OWY2ZDY0ZjE1ZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDArMkMA0GCSqGSIb3DQEBCwUAA4IBAQCG/iDx6Kdcv/S2wAqY
Xm5V1prnLaS/lD5Dy5WPEzjUhe4dDXofjwvpZMBfxG6704d11pjENi4aKA03TbZS
Rs0hbXYt7em078Lok0N5vZY3CUDBj8+Lc1EDS/rmRbWYn/UAZRldmbv8tt6lA7D8
LuY1NDzadoSzIn2EgPM10zo9AKH30aXwrD3ISZPjrBRW3rxui8koT1HrzJKWHsLA
BqN37XFWxhknmhBgB3z4I47y4BnxcexKtmmTNOmcD+1FG4xay3x0p++SIij7dSw2
1DsvUZOjWr1kzg6q8WxTKJiB8Ve8XvaNmuaJO1Hpo3gkzWtg31jusr1xFm7prybn
hrO/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org