Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa
File:                     264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa (raw, json)
Hash identifier:          Pzlnbk+ALZ7SsZs6mLs/1TaIc7sbZxl2OdgaU3OuxZ4=
Subject key identifier:   99:D8:6D:75:19:BB:24:93:86:00:34:27:CE:BF:F2:26:9D:8E:CB:7D
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11AF69
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa
Signing time:             Mon 27 Nov 2023 20:12:21 +0000
ROA not before:           Mon 27 Nov 2023 20:12:21 +0000
ROA not after:            Thu 27 Nov 2025 20:12:21 +0000
asID:                     52444
IP address blocks:        179.40.69.0/24 maxlen: 24
                          179.40.70.0/24 maxlen: 24
                          186.38.42.0/24 maxlen: 24
                          201.251.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159017 (0x11af69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 27 20:12:21 2023 GMT
            Not After : Nov 27 20:12:21 2025 GMT
        Subject: CN=264fe28ad06e704d22c6ee4cb728f8354da04dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:6d:dd:52:3f:b1:16:08:0b:e7:ac:20:d9:
                    29:d9:fe:d8:4b:f4:96:72:0d:8d:e0:9c:ab:bf:fc:
                    9d:6c:78:ff:5b:7d:90:92:c3:bc:12:4f:4f:51:94:
                    00:d7:53:44:4a:23:84:a5:3d:c5:67:f2:3f:c6:5b:
                    a6:55:6a:ec:fd:94:d8:29:05:36:a2:c7:64:54:44:
                    b2:2f:43:13:a8:45:37:cc:c1:8c:2c:64:de:fb:12:
                    ec:d6:14:24:db:c2:75:75:87:1e:ee:f3:25:a7:93:
                    fa:e7:ff:5a:44:6e:ff:3f:3b:92:da:81:51:38:1c:
                    01:f1:78:a8:af:f2:92:21:d9:67:f1:c1:81:62:65:
                    b1:f0:c0:e4:bc:a3:ac:dd:61:d4:25:fc:22:09:e9:
                    a9:2e:27:74:00:bd:fc:04:be:fe:8f:a9:68:f4:1d:
                    07:b3:9f:53:e3:0a:cd:d8:50:9b:84:2a:b3:4b:08:
                    d5:71:93:3c:ff:51:b6:5e:97:b0:58:83:fd:c2:14:
                    f5:ba:5e:83:6d:59:45:a3:56:c1:e4:5c:16:c6:73:
                    2b:05:77:f7:e1:0d:39:3b:dd:fc:25:32:6b:a7:80:
                    8f:16:33:7e:6d:c2:48:2b:f5:5c:e0:70:b8:e9:b1:
                    e0:47:03:dd:34:19:26:cf:47:9e:ba:6f:56:f0:89:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D8:6D:75:19:BB:24:93:86:00:34:27:CE:BF:F2:26:9D:8E:CB:7D
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.69.0-179.40.70.255
                  186.38.42.0/24
                  201.251.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:af:3d:d8:f6:cd:71:05:63:2f:2a:aa:b9:3c:e9:83:24:15:
         f3:a3:7c:21:51:ee:b7:f0:02:39:d5:24:3e:41:df:71:30:1d:
         22:aa:2f:a6:3c:80:0f:f0:fd:8a:e0:2b:63:91:e9:e4:67:25:
         93:41:91:e8:09:98:53:d6:7c:ed:41:17:38:7f:f8:dc:dc:06:
         27:bd:a4:76:b4:0b:99:e3:94:b4:bf:db:79:da:c0:82:c6:d3:
         82:29:bc:c4:f9:1e:c5:db:93:25:c3:cb:f5:97:00:df:22:18:
         32:48:0b:e1:ec:c3:d6:40:a3:a6:33:64:ce:b8:80:69:ff:08:
         1a:51:05:11:2f:eb:f2:17:4e:04:bd:bc:75:30:b3:db:a0:61:
         fd:17:b6:93:5a:dc:e4:0e:34:89:26:27:63:89:a3:f5:82:33:
         d8:44:4c:f3:c0:fe:35:0e:c3:b2:ae:fe:3e:d4:40:d7:2c:98:
         3e:d7:12:de:64:b7:20:8f:66:1e:62:a2:c8:40:41:43:66:01:
         d4:fd:e6:98:87:d9:2b:a1:4b:e8:eb:6c:7d:32:29:7b:10:fd:
         c6:d3:9e:e3:e6:23:78:f9:09:8c:ac:3f:f4:3f:f4:6c:50:bb:
         36:96:53:6a:ef:85:dd:eb:74:98:bc:2b:fc:5d:a4:cd:39:a0:
         48:ee:3a:4a
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDEa9pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI3
MjAxMjIxWhcNMjUxMTI3MjAxMjIxWjAzMTEwLwYDVQQDEygyNjRmZTI4YWQwNmU3
MDRkMjJjNmVlNGNiNzI4ZjgzNTRkYTA0ZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAitpt3VI/sRYIC+esINkp2f7YS/SWcg2N4Jyrv/ydbHj/W32Q
ksO8Ek9PUZQA11NESiOEpT3FZ/I/xlumVWrs/ZTYKQU2osdkVESyL0MTqEU3zMGM
LGTe+xLs1hQk28J1dYce7vMlp5P65/9aRG7/PzuS2oFROBwB8Xior/KSIdln8cGB
YmWx8MDkvKOs3WHUJfwiCempLid0AL38BL7+j6lo9B0Hs59T4wrN2FCbhCqzSwjV
cZM8/1G2XpewWIP9whT1ul6DbVlFo1bB5FwWxnMrBXf34Q05O938JTJrp4CPFjN+
bcJIK/Vc4HC46bHgRwPdNBkmz0eeum9W8Ine/QIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFJnYbXUZuySThgA0J86/8iadjst9MB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzI2NGZlMjhhZDA2ZTcwNGQyMmM2ZWU0Y2I3MjhmODM1NGRhMDRkYzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGjAMAwQAsyhFAwQAsyhGAwQAuiYqAwQAyfuoMA0GCSqGSIb3DQEB
CwUAA4IBAQAIrz3Y9s1xBWMvKqq5POmDJBXzo3whUe638AI51SQ+Qd9xMB0iqi+m
PIAP8P2K4CtjkenkZyWTQZHoCZhT1nztQRc4f/jc3AYnvaR2tAuZ45S0v9t52sCC
xtOCKbzE+R7F25Mlw8v1lwDfIhgySAvh7MPWQKOmM2TOuIBp/wgaUQURL+vyF04E
vbx1MLPboGH9F7aTWtzkDjSJJidjiaP1gjPYREzzwP41DsOyrv4+1EDXLJg+1xLe
ZLcgj2YeYqLIQEFDZgHU/eaYh9kroUvo62x9Mil7EP3G057j5iN4+QmMrD/0P/Rs
ULs2llNq74Xd63SYvCv8XaTNOaBI7jpK
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org