Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa
File:                     0bc1983967ee0212a46e4a1649f954477a2811af.roa (raw, json)
Hash identifier:          gLRVmAftzBrq3sr77CKuGQCQHlKbzeTXPq5KnLwfrHM=
Subject key identifier:   CE:59:17:A5:5D:78:51:CA:B0:70:5A:ED:4D:1E:F0:75:9B:7C:D2:11
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       142E97
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa
Signing time:             Tue 30 Jan 2024 19:35:30 +0000
ROA not before:           Tue 30 Jan 2024 19:35:30 +0000
ROA not after:            Fri 30 Jan 2026 19:35:30 +0000
asID:                     10834
IP address blocks:        200.63.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322647 (0x142e97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Jan 30 19:35:30 2024 GMT
            Not After : Jan 30 19:35:30 2026 GMT
        Subject: CN=0bc1983967ee0212a46e4a1649f954477a2811af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:32:ce:c9:04:98:49:6c:17:b4:76:c3:e3:
                    aa:b6:1c:6b:90:16:28:02:e8:66:64:f6:86:54:2b:
                    7b:7d:82:86:df:55:76:b6:8d:b9:00:24:ea:84:64:
                    ba:87:da:b0:56:76:a2:22:23:65:70:fe:43:82:9c:
                    ec:49:85:09:17:43:74:37:86:13:7d:85:81:d4:8f:
                    c8:86:0f:2c:1f:ae:e5:58:94:a8:e0:ec:69:0f:ee:
                    1c:6f:97:98:61:f1:ee:1c:82:3d:4a:f8:45:09:b2:
                    d9:11:cd:6d:59:8f:24:7f:d2:15:f7:2a:99:a0:dd:
                    d8:10:cc:40:41:f0:af:27:e1:98:49:42:85:88:7c:
                    b8:88:2b:79:bd:35:46:6c:72:80:66:e9:d7:82:bb:
                    1d:1a:d4:52:b0:b6:ce:20:75:9e:c5:e6:db:c3:7e:
                    d4:5d:03:02:65:9b:b5:bf:b8:74:2c:74:e1:41:2a:
                    45:21:78:b5:61:7a:43:be:81:e5:52:14:92:9a:f1:
                    bf:ee:86:25:76:19:2f:a8:09:ae:85:54:e1:1e:86:
                    c4:08:ca:12:c5:b8:0b:9b:8b:6e:ba:90:e8:af:05:
                    25:0e:8d:90:15:05:c4:07:21:84:a8:02:f9:c8:50:
                    d5:aa:af:77:7c:55:52:e3:30:82:23:74:2c:de:21:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:17:A5:5D:78:51:CA:B0:70:5A:ED:4D:1E:F0:75:9B:7C:D2:11
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0bc1983967ee0212a46e4a1649f954477a2811af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:66:91:ab:24:8e:97:b0:7a:91:fe:d1:e2:b5:24:62:e0:
         23:56:b3:20:45:44:7b:fd:23:23:1a:aa:b0:d4:cb:72:30:e2:
         81:37:8f:e4:1f:a0:9a:8b:33:d2:45:84:83:c4:9d:84:c7:88:
         db:58:8d:fa:ba:b7:35:b0:d8:1b:05:5c:9a:26:13:3d:fa:62:
         6f:95:7c:6f:78:a0:9f:5c:a9:a5:a8:ff:fa:81:63:80:db:da:
         25:5d:1b:0d:71:0b:da:ac:67:08:dd:eb:27:0f:0d:07:ef:99:
         a8:0c:a1:43:a4:ce:01:e2:16:ed:c9:49:d7:ee:53:0d:f1:06:
         f5:c3:34:f9:82:06:0e:0a:24:35:82:fe:07:5f:e4:96:08:15:
         c4:4f:97:4f:f5:78:ec:c6:8c:a3:10:d1:75:35:7c:27:28:48:
         fe:41:bf:4a:30:ef:67:c0:8a:73:8c:3d:cc:3b:b6:a5:03:cf:
         28:59:05:31:d0:2b:42:63:37:c4:f8:91:a8:ac:93:4f:45:b8:
         1f:aa:25:32:d2:de:bd:58:ab:fb:7e:d4:2c:9e:30:5f:d2:7f:
         23:6d:7e:66:7d:e8:c5:68:fd:c2:be:8f:08:e9:60:89:b9:d2:
         88:08:3d:7a:25:7c:cc:eb:7a:7e:54:f4:0f:b7:32:17:43:3f:
         d0:e6:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org