Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4beb4a3cfc17e44f2a9bc3633879cdccfd61efc5.roa
File:                     4beb4a3cfc17e44f2a9bc3633879cdccfd61efc5.roa (raw, json)
Hash identifier:          qNk3YcxUHz0uAeaUmLuumJiE4oJBu8OXwo675hHiUcM=
Subject key identifier:   B1:E5:29:8E:D2:FD:C0:C5:FC:7B:7C:4D:EA:D3:7B:19:27:45:AD:28
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       12A189
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4beb4a3cfc17e44f2a9bc3633879cdccfd61efc5.roa
Signing time:             Thu 30 Nov 2023 19:05:03 +0000
ROA not before:           Thu 30 Nov 2023 19:05:03 +0000
ROA not after:            Sun 30 Nov 2025 19:05:03 +0000
asID:                     265720
IP address blocks:        186.38.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221001 (0x12a189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 30 19:05:03 2023 GMT
            Not After : Nov 30 19:05:03 2025 GMT
        Subject: CN=4beb4a3cfc17e44f2a9bc3633879cdccfd61efc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:64:ce:ae:40:31:60:f5:e2:10:28:83:b2:
                    21:4f:2d:f7:49:d4:8d:bc:cc:47:69:12:fc:5f:dd:
                    ee:8d:6e:e0:8f:1a:d3:86:8a:42:a0:bf:ed:fb:a6:
                    f5:e7:65:0d:27:2f:86:8f:88:bd:a5:f0:35:3b:43:
                    6e:07:e4:9a:10:ed:12:6d:8b:e5:5a:ff:8f:ce:25:
                    5d:34:b4:0b:a9:a3:13:16:46:31:e8:f0:76:0b:f8:
                    fe:d2:2a:4c:af:2d:67:af:50:1c:b4:30:96:ac:3e:
                    b6:1b:f8:73:b9:39:1b:a2:31:4a:a6:14:a5:b5:90:
                    76:cf:45:5f:75:f5:8f:24:81:bf:f3:bf:e2:34:95:
                    19:1d:17:a1:0e:4f:30:c5:28:d7:7c:b5:6a:0c:e9:
                    bb:36:75:cb:e4:41:05:a1:20:88:8f:f6:fd:e7:30:
                    12:4e:c0:f2:52:23:89:51:2f:e7:9f:7d:dc:55:0d:
                    7a:25:ea:a3:95:89:4a:77:c4:0b:8e:95:ea:9d:da:
                    28:37:f9:2a:97:f8:9e:40:28:26:e7:ed:99:3a:46:
                    d8:ac:3b:26:a0:b9:48:e4:a6:88:53:52:9e:72:75:
                    51:43:87:b1:66:2d:cd:fe:44:f6:93:3c:6b:c1:04:
                    a7:8d:a4:99:32:e7:27:40:61:38:f1:e2:c2:56:6c:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E5:29:8E:D2:FD:C0:C5:FC:7B:7C:4D:EA:D3:7B:19:27:45:AD:28
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4beb4a3cfc17e44f2a9bc3633879cdccfd61efc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:31:85:3c:93:10:4b:42:70:9b:25:b5:7e:64:aa:f2:fe:
         72:5b:95:53:36:d5:8f:cd:71:ba:fb:88:3c:19:75:4f:9c:b1:
         cf:3a:7c:a9:14:1f:35:18:85:ba:0e:81:6a:ce:26:89:4c:48:
         60:b2:90:80:4a:73:a0:59:ba:a9:19:b7:6f:c3:90:bd:22:68:
         bc:74:7a:4e:49:c5:f2:6c:21:6c:ed:cd:3c:e4:25:66:9f:2a:
         26:90:c6:97:7d:44:2e:ee:9a:a4:20:17:d8:96:74:63:60:a1:
         dd:91:87:fa:2d:67:2c:e9:e7:b0:2d:b7:00:7e:78:ba:aa:90:
         8d:97:b5:b3:d4:f9:48:60:a9:75:8c:3f:95:dc:ea:65:96:f7:
         fb:0d:0c:0b:0c:6b:e2:37:22:e6:f3:b7:a6:3b:4d:96:19:5c:
         f7:07:09:79:9e:8d:bc:1c:ce:58:2d:21:6e:e6:84:c0:81:0d:
         39:05:5e:41:44:dd:b8:d3:c7:8f:4e:f2:86:ad:fc:35:d2:d3:
         06:38:99:a6:9a:ec:d3:3a:19:72:dd:d1:63:7d:ea:de:8c:8f:
         b8:ed:e5:7a:eb:a9:d3:0f:ea:d5:26:96:40:1c:0f:f9:24:61:
         09:8d:2e:f9:35:12:61:cc:79:6b:37:2a:8a:99:2e:8c:d4:fd:
         86:7a:1e:8e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEqGJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTMw
MTkwNTAzWhcNMjUxMTMwMTkwNTAzWjAzMTEwLwYDVQQDEyg0YmViNGEzY2ZjMTdl
NDRmMmE5YmMzNjMzODc5Y2RjY2ZkNjFlZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlMFkzq5AMWD14hAog7IhTy33SdSNvMxHaRL8X93ujW7gjxrT
hopCoL/t+6b152UNJy+Gj4i9pfA1O0NuB+SaEO0SbYvlWv+PziVdNLQLqaMTFkYx
6PB2C/j+0ipMry1nr1ActDCWrD62G/hzuTkbojFKphSltZB2z0VfdfWPJIG/87/i
NJUZHRehDk8wxSjXfLVqDOm7NnXL5EEFoSCIj/b95zASTsDyUiOJUS/nn33cVQ16
JeqjlYlKd8QLjpXqndooN/kql/ieQCgm5+2ZOkbYrDsmoLlI5KaIU1KecnVRQ4ex
Zi3N/kT2kzxrwQSnjaSZMucnQGE48eLCVmxbNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLHlKY7S/cDF/Ht8TerTexknRa0oMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzRiZWI0YTNjZmMxN2U0NGYyYTliYzM2MzM4NzljZGNjZmQ2MWVmYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALomDTANBgkqhkiG9w0BAQsFAAOCAQEAL6MxhTyTEEtCcJsl
tX5kqvL+cluVUzbVj81xuvuIPBl1T5yxzzp8qRQfNRiFug6Bas4miUxIYLKQgEpz
oFm6qRm3b8OQvSJovHR6TknF8mwhbO3NPOQlZp8qJpDGl31ELu6apCAX2JZ0Y2Ch
3ZGH+i1nLOnnsC23AH54uqqQjZe1s9T5SGCpdYw/ldzqZZb3+w0MCwxr4jci5vO3
pjtNlhlc9wcJeZ6NvBzOWC0hbuaEwIENOQVeQUTduNPHj07yhq38NdLTBjiZpprs
0zoZct3RY33q3oyPuO3leuup0w/q1SaWQBwP+SRhCY0u+TUSYcx5azcqipkujNT9
hnoejg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org