Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/30d0233a2fbb302fedc2b369593e4538effd52cd.roa
File:                     30d0233a2fbb302fedc2b369593e4538effd52cd.roa (raw, json)
Hash identifier:          WIpwQDjJ47hQ8/124ZsrtylWEND1wcv4cvkNqiErFoE=
Subject key identifier:   8D:5F:DB:8B:79:13:1E:33:54:15:0D:60:F9:19:1B:94:A8:54:55:C4
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11D5A9
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/30d0233a2fbb302fedc2b369593e4538effd52cd.roa
Signing time:             Wed 29 Nov 2023 12:36:34 +0000
ROA not before:           Wed 29 Nov 2023 12:36:34 +0000
ROA not after:            Sat 29 Nov 2025 12:36:34 +0000
asID:                     22927
IP address blocks:        168.226.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168809 (0x11d5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 12:36:34 2023 GMT
            Not After : Nov 29 12:36:34 2025 GMT
        Subject: CN=30d0233a2fbb302fedc2b369593e4538effd52cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:56:04:7e:ec:cc:20:aa:8f:d4:01:74:c8:
                    43:d1:c8:aa:26:2c:77:1c:90:2c:a5:3f:59:11:16:
                    42:bd:3f:81:3c:c5:cf:69:be:5a:2c:55:db:8b:4f:
                    85:08:ca:03:57:a1:53:57:1b:59:e6:a9:35:2b:f3:
                    65:f8:fa:f1:f2:bd:bb:b2:25:b3:9b:c4:bb:97:93:
                    48:0e:07:b7:54:02:00:9a:ff:3e:a6:53:a3:88:d9:
                    a2:a6:7e:7a:d0:44:02:a4:b2:a9:8d:fb:56:6b:c2:
                    31:6d:a6:bf:bd:8e:15:15:46:36:85:1b:b7:f8:0f:
                    62:34:de:b3:ff:3e:f8:d2:ea:cd:4f:e5:6f:42:8a:
                    0a:ab:76:45:39:53:b4:9a:c4:6c:7d:ef:64:2f:e4:
                    a2:bd:8c:ff:34:a3:11:48:bd:00:28:f4:df:86:16:
                    6a:0f:3f:1c:49:e2:6f:a6:da:4c:d2:13:8a:68:e4:
                    f3:49:44:8f:0a:d8:e7:aa:23:cd:29:00:8e:ab:71:
                    2f:fe:e1:a5:75:61:c8:be:4b:f0:2d:25:0f:f6:e5:
                    48:03:e3:45:a9:21:6f:cf:0a:b3:e6:39:33:42:c8:
                    b4:0a:68:4a:8b:46:5c:a0:41:26:b3:e0:da:5c:fa:
                    5a:be:72:8b:0c:40:5a:bf:0a:d4:38:97:27:27:f8:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5F:DB:8B:79:13:1E:33:54:15:0D:60:F9:19:1B:94:A8:54:55:C4
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/30d0233a2fbb302fedc2b369593e4538effd52cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:75:0c:11:25:69:45:92:e2:fd:0c:d0:24:35:33:e8:d2:
         a6:6e:a5:c5:1d:e9:7f:51:4c:64:28:b5:10:98:f2:9b:b8:e7:
         08:9d:f6:54:1b:2d:e6:2e:66:29:d7:67:80:17:27:02:34:0c:
         ae:33:38:2b:ae:6d:e2:a4:d2:74:ab:74:8f:af:5a:f2:f4:37:
         fd:ed:9b:52:9c:c6:1b:3a:2e:49:d7:48:fc:a3:4a:ac:44:2a:
         fd:53:4d:2a:a0:7d:39:11:ce:22:c2:92:93:15:b2:7a:79:7e:
         60:80:4c:61:d8:b7:d7:8d:d6:ad:48:0a:33:a7:9d:e2:b0:95:
         54:72:c1:86:22:e5:ae:e4:39:d6:7e:38:44:b7:a4:ff:6a:4e:
         71:10:3a:a6:ee:91:48:49:d9:df:e8:9a:52:c8:93:a3:f6:12:
         8c:5c:ab:4c:3c:4c:60:22:d0:f0:8c:1f:e2:4b:ab:f8:51:bd:
         1b:8e:14:7a:fc:09:7d:39:30:00:9e:3f:5b:99:73:70:b4:41:
         1d:65:7c:ea:5c:d0:ad:e1:7f:94:d1:98:b7:f7:23:11:78:b1:
         7b:e2:9d:bc:be:21:f3:89:eb:5d:4b:37:fb:9e:73:c0:9d:e5:
         18:56:e7:8f:30:3f:78:d7:07:30:75:77:b0:09:40:af:8f:f7:
         a4:aa:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org