Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa
File:                     21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa (raw, json)
Hash identifier:          ZZHBHIZPygnIZopqlzlxG25JGJEuKTm5WkOdSRdhQkk=
Subject key identifier:   1B:0E:D8:2F:2B:1A:06:33:9F:02:88:29:A7:2A:88:0B:2C:BC:85:7E
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       124921
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa
Signing time:             Wed 29 Nov 2023 15:48:12 +0000
ROA not before:           Wed 29 Nov 2023 15:48:12 +0000
ROA not after:            Sat 29 Nov 2025 15:48:12 +0000
asID:                     28048
IP address blocks:        201.254.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198369 (0x124921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:48:12 2023 GMT
            Not After : Nov 29 15:48:12 2025 GMT
        Subject: CN=21c9dcad133bc045f55bc946eca4e279f10ed3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:df:98:6d:d0:37:52:a2:31:a6:f1:95:e9:
                    ca:da:fb:d8:6b:5d:34:a1:67:9f:c1:8f:7a:e3:ea:
                    69:71:b7:a6:9e:60:52:86:2e:76:50:0d:57:bd:77:
                    c6:68:de:71:07:5d:bf:f1:4a:a4:ae:7e:51:65:2d:
                    69:8c:e6:93:24:8d:93:2d:6d:3d:7b:60:c3:cb:1f:
                    e4:82:c2:ff:31:1e:29:a5:38:9d:46:af:95:29:e0:
                    d7:8f:63:97:eb:c8:18:d3:01:8f:6f:ec:93:02:94:
                    70:91:35:cf:16:c4:a3:e7:9b:ae:b0:29:56:68:7a:
                    90:c6:4b:4b:92:3e:15:13:0e:ce:36:b3:8e:e6:67:
                    8f:7b:32:4b:7c:92:b8:70:d5:b8:2c:dd:08:49:ed:
                    51:f8:79:ce:f1:22:4e:e7:03:34:d4:c7:7b:02:27:
                    b7:a2:b6:68:91:6b:24:b1:c8:6b:ff:50:bf:80:8f:
                    17:14:fe:11:eb:8f:78:ed:a0:53:d1:ca:ff:05:47:
                    1b:b1:86:1e:db:7f:ee:95:2f:40:6b:de:34:9d:fa:
                    cd:e6:ef:60:3b:68:dc:b7:f3:d2:6c:22:2b:70:45:
                    c0:95:d6:e2:59:4a:ce:88:6e:32:3a:1c:e2:28:84:
                    f4:48:d1:6f:e2:2c:6e:d7:f4:d0:26:32:e6:be:74:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:D8:2F:2B:1A:06:33:9F:02:88:29:A7:2A:88:0B:2C:BC:85:7E
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/21c9dcad133bc045f55bc946eca4e279f10ed3a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:63:83:2c:8c:03:0f:d5:b6:17:4e:9c:67:45:69:18:ce:63:
         c6:97:0d:0d:e6:66:4d:5d:98:1b:fb:b0:05:d9:39:ca:d1:3b:
         98:56:87:5c:c7:b7:c4:46:c7:f2:f7:69:81:54:50:1b:51:74:
         54:d0:d6:74:02:39:38:7c:22:3e:16:2a:10:1c:2a:f1:de:36:
         6e:70:64:c7:e5:02:13:2a:27:b4:d7:92:ba:f0:8c:37:69:81:
         68:0f:7d:a3:4e:37:ae:8f:b2:92:1b:e3:66:90:8d:54:f7:01:
         3f:58:7b:3b:7c:33:4b:0c:f4:31:c9:ce:81:97:57:c1:db:32:
         61:a0:e9:a4:62:48:2b:6e:59:1e:7f:ca:55:b8:c7:9e:23:f6:
         8e:ba:b1:22:b2:60:22:b5:e5:d2:31:0f:84:99:8f:46:50:ce:
         62:7c:7c:83:ff:c9:18:24:ce:bb:88:c2:dd:67:7a:7e:ad:e3:
         82:f0:bf:5e:5c:7b:c3:cb:9a:e2:0e:2f:09:98:ce:a1:18:25:
         51:49:5c:c2:1d:7d:e3:b4:ea:58:37:55:65:a4:62:42:e5:97:
         fc:24:e9:45:c2:cf:2f:fb:0d:4b:01:a0:f0:9f:9c:78:b6:89:
         4d:69:29:10:c8:32:5c:e2:dc:cb:25:23:e7:d8:16:30:21:70:
         fb:ef:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org