Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa
File:                     028a024239063776fd279a355deac4328cda3ca7.roa (raw, json)
Hash identifier:          YBlXp5CIa6ubljCGwrOTXiSyK98K/ZY/kXS4yegUeAM=
Subject key identifier:   04:FE:78:93:66:8C:B6:3C:96:C5:E1:6B:18:96:B5:13:E5:DC:15:50
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11F3D3
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa
Signing time:             Wed 29 Nov 2023 14:55:02 +0000
ROA not before:           Wed 29 Nov 2023 14:55:02 +0000
ROA not after:            Sat 29 Nov 2025 14:55:02 +0000
asID:                     262231
IP address blocks:        186.38.37.0/24 maxlen: 24
                          186.38.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176531 (0x11f3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 14:55:02 2023 GMT
            Not After : Nov 29 14:55:02 2025 GMT
        Subject: CN=028a024239063776fd279a355deac4328cda3ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:a8:c5:f6:13:ff:ed:d0:c8:a8:5e:f5:43:
                    65:c2:65:90:d5:5b:92:1f:6b:4b:53:1b:c6:8c:a7:
                    ed:8d:b7:31:61:89:94:66:45:c8:80:b7:b8:e1:62:
                    bf:d0:f3:4e:ad:18:01:b9:44:84:4e:8e:d8:25:0e:
                    b6:34:d1:f5:bd:e8:0a:3b:b2:0c:19:a7:18:b1:83:
                    7c:00:4d:57:be:c5:e1:4d:09:b3:d0:f9:e1:22:20:
                    45:5a:e6:e0:c4:6d:1e:2d:80:24:ab:22:59:02:95:
                    51:f7:16:c7:85:b2:16:8e:35:0b:c6:54:2e:40:02:
                    d6:be:10:c0:76:20:fe:92:dd:c1:92:e0:36:f3:87:
                    cd:72:b3:8f:8a:c5:db:ee:5e:c4:67:f9:ce:ef:75:
                    87:70:2c:21:86:02:18:6e:aa:51:40:36:48:1e:f2:
                    8b:5a:35:38:48:16:e4:f3:45:50:3c:e0:96:b2:85:
                    78:ea:a8:bd:27:98:82:ba:9c:04:9b:a0:2a:0d:28:
                    19:11:20:3e:77:87:9f:b0:13:24:18:ae:5f:a5:94:
                    a2:ac:a2:a8:08:7d:25:23:9b:de:c5:7f:a6:e1:d1:
                    ae:1b:a0:46:83:03:bb:7d:b6:0b:de:db:8a:1f:a0:
                    f9:4a:a9:2d:dc:1a:e7:65:ee:45:98:58:44:c9:c5:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:78:93:66:8C:B6:3C:96:C5:E1:6B:18:96:B5:13:E5:DC:15:50
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.37.0/24
                  186.38.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:52:bc:d9:78:64:21:0e:bd:a9:f9:ee:60:ba:87:99:1c:8a:
         75:c2:fb:5a:7e:a4:61:3f:c5:c0:9c:f6:00:ec:16:eb:f2:29:
         62:d7:78:09:2a:c0:2d:01:7d:5f:d1:41:79:58:37:f6:29:b1:
         54:db:42:a2:e6:58:2b:43:1f:f7:53:ff:98:16:13:f3:85:60:
         c5:b1:6f:f4:7c:40:92:8e:41:61:b1:3a:3c:f7:d3:eb:6a:a0:
         18:49:c7:35:eb:22:c3:8e:9a:71:de:87:02:5e:e6:ee:23:37:
         2e:88:a6:2e:40:de:0c:64:d5:86:77:6c:31:b6:42:19:87:ef:
         0b:99:79:38:f2:b0:ef:15:84:7d:92:52:31:77:5e:63:a8:81:
         c7:85:e5:bd:99:ec:de:54:91:d6:d7:92:7a:65:70:7c:2c:24:
         fd:cc:53:76:b3:11:74:d1:2a:01:75:7a:f5:61:56:ba:c4:bd:
         90:ca:35:d7:eb:75:6d:d1:df:77:41:5e:88:7a:49:13:a7:19:
         d0:66:39:93:16:be:87:b4:07:4a:18:a3:cf:fd:83:26:53:c5:
         50:d2:a9:2f:3c:ec:ca:6e:c2:d3:74:de:b4:ad:8e:2b:3c:69:
         5d:5d:ef:85:e1:84:e5:61:e4:bd:02:38:ad:78:63:fd:9b:cc:
         f4:03:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org