Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/17e1312b3a87f64f7a656de726d017ee3b263777.roa
File:                     17e1312b3a87f64f7a656de726d017ee3b263777.roa (raw, json)
Hash identifier:          lWcmwcHXVAhBhbJ9qmFizUzHTzVbyLs0PgOXqpQSdms=
Subject key identifier:   78:2A:04:F1:63:DB:19:47:B5:47:D1:17:57:6A:43:44:7F:FF:A7:64
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1273E6
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/17e1312b3a87f64f7a656de726d017ee3b263777.roa
Signing time:             Wed 29 Nov 2023 21:12:23 +0000
ROA not before:           Wed 29 Nov 2023 21:12:23 +0000
ROA not after:            Sat 29 Nov 2025 21:12:23 +0000
asID:                     27997
IP address blocks:        186.56.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209318 (0x1273e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:12:23 2023 GMT
            Not After : Nov 29 21:12:23 2025 GMT
        Subject: CN=17e1312b3a87f64f7a656de726d017ee3b263777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:74:0c:58:03:13:8c:38:96:b1:cd:df:de:
                    90:12:a1:fb:79:ce:8b:30:b8:c9:9c:5a:92:a1:ab:
                    2a:ca:4d:90:53:45:de:2f:ba:fa:1a:d8:28:e8:c6:
                    40:ec:43:4c:96:c9:ad:2e:be:f0:00:ab:1a:0d:e6:
                    75:cb:7f:1b:8d:56:b0:f6:63:cc:0a:f5:f5:cf:f2:
                    a6:8c:64:7b:99:f0:ba:45:75:ec:59:81:d2:56:9c:
                    18:34:38:3d:e7:5e:61:71:b4:11:98:14:20:51:2a:
                    38:2c:bd:5f:87:5a:59:d9:3b:42:25:ae:eb:45:bf:
                    b1:83:73:ce:ec:55:6d:82:fb:fb:78:62:44:6d:d3:
                    b1:10:fc:1a:ff:69:95:03:58:96:f6:0a:e7:82:92:
                    af:0d:4e:61:10:c9:44:13:eb:d2:5c:3b:5d:55:db:
                    84:fa:9b:7e:b1:63:d8:c5:61:90:59:b5:e3:3f:e9:
                    fc:a5:3e:77:36:ca:54:bb:36:fa:89:6c:b7:06:c5:
                    ee:d6:c0:1d:17:1c:e4:69:0d:fa:41:23:b2:ae:2b:
                    47:e6:c4:69:79:6e:40:64:16:08:30:e9:a9:00:92:
                    10:0b:f8:b7:d6:45:6e:00:ec:5d:09:4f:9b:1e:3e:
                    ed:80:2f:e1:60:4e:a5:5b:d4:f8:c5:1b:87:b2:75:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:04:F1:63:DB:19:47:B5:47:D1:17:57:6A:43:44:7F:FF:A7:64
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/17e1312b3a87f64f7a656de726d017ee3b263777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:6f:d5:aa:7e:d1:46:c8:f9:8f:87:b6:2e:f2:80:96:1d:
         15:f5:d5:3b:80:d6:0c:4e:a5:24:1f:65:c4:d7:31:a3:61:3c:
         8c:c1:58:0e:65:a2:1a:2c:78:88:39:0f:9c:f0:3a:e8:cb:24:
         52:83:0e:3e:41:9e:f3:94:d1:d5:8c:0b:97:c1:83:ba:1a:42:
         63:cf:29:92:b3:3f:88:b5:36:bd:5c:75:8f:66:ee:7c:ba:ef:
         c8:d1:06:29:8a:f9:2e:13:1a:6a:a9:0f:3a:dc:e2:e4:fd:38:
         cf:b9:bc:41:da:6a:cd:e8:3a:e4:69:f7:e1:1f:7d:b8:b3:e7:
         76:e7:6c:1c:b3:dc:0d:bf:71:db:0d:fc:c7:f9:87:2b:a8:c7:
         9b:cf:13:1b:3d:a5:ac:7c:8a:01:97:8b:1f:24:ac:f4:9e:42:
         d8:55:71:42:70:1a:f0:bf:b4:46:21:d1:4a:97:25:89:26:c9:
         c4:32:03:15:e8:b5:c5:19:63:b2:a0:60:2b:cb:4c:81:1d:33:
         18:a5:9e:ad:55:fa:63:4b:3f:97:0d:5e:2c:33:29:5c:71:7e:
         ff:ce:32:2b:5d:77:fe:f4:5f:0c:41:18:24:88:fa:1b:39:77:
         ba:3a:b9:d1:b6:ac:28:96:ef:69:11:0b:c5:89:35:69:c0:8e:
         8b:c6:ed:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEnPmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjExMjIzWhcNMjUxMTI5MjExMjIzWjAzMTEwLwYDVQQDEygxN2UxMzEyYjNhODdm
NjRmN2E2NTZkZTcyNmQwMTdlZTNiMjYzNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo+Z0DFgDE4w4lrHN396QEqH7ec6LMLjJnFqSoasqyk2QU0Xe
L7r6Gtgo6MZA7ENMlsmtLr7wAKsaDeZ1y38bjVaw9mPMCvX1z/KmjGR7mfC6RXXs
WYHSVpwYNDg9515hcbQRmBQgUSo4LL1fh1pZ2TtCJa7rRb+xg3PO7FVtgvv7eGJE
bdOxEPwa/2mVA1iW9grngpKvDU5hEMlEE+vSXDtdVduE+pt+sWPYxWGQWbXjP+n8
pT53NspUuzb6iWy3BsXu1sAdFxzkaQ36QSOyritH5sRpeW5AZBYIMOmpAJIQC/i3
1kVuAOxdCU+bHj7tgC/hYE6lW9T4xRuHsnUeJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHgqBPFj2xlHtUfRF1dqQ0R//6dkMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzE3ZTEzMTJiM2E4N2Y2NGY3YTY1NmRlNzI2ZDAxN2VlM2IyNjM3Nzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALo4ZjANBgkqhkiG9w0BAQsFAAOCAQEAbMFv1ap+0UbI+Y+H
ti7ygJYdFfXVO4DWDE6lJB9lxNcxo2E8jMFYDmWiGix4iDkPnPA66MskUoMOPkGe
85TR1YwLl8GDuhpCY88pkrM/iLU2vVx1j2bufLrvyNEGKYr5LhMaaqkPOtzi5P04
z7m8Qdpqzeg65Gn34R99uLPndudsHLPcDb9x2w38x/mHK6jHm88TGz2lrHyKAZeL
HySs9J5C2FVxQnAa8L+0RiHRSpcliSbJxDIDFei1xRljsqBgK8tMgR0zGKWerVX6
Y0s/lw1eLDMpXHF+/84yK113/vRfDEEYJIj6Gzl3ujq50basKJbvaRELxYk1acCO
i8btYg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org