Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4e41d8425571965dd29f04d80e4c577deeb21289.roa
File:                     4e41d8425571965dd29f04d80e4c577deeb21289.roa (raw, json)
Hash identifier:          QAQiF6oXCn6Z50Z2/yXCoOUeT+xQJQc2JioOlnxAwuc=
Subject key identifier:   CC:87:00:66:DF:F6:0E:4F:D2:CD:20:AC:15:89:C9:D6:1F:99:4D:EB
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       11E287
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4e41d8425571965dd29f04d80e4c577deeb21289.roa
Signing time:             Wed 29 Nov 2023 14:16:29 +0000
ROA not before:           Wed 29 Nov 2023 14:16:29 +0000
ROA not after:            Sat 29 Nov 2025 14:16:29 +0000
asID:                     27983
IP address blocks:        179.40.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172103 (0x11e287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 14:16:29 2023 GMT
            Not After : Nov 29 14:16:29 2025 GMT
        Subject: CN=4e41d8425571965dd29f04d80e4c577deeb21289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:b4:6a:e6:03:1f:6e:52:31:6c:f9:e2:31:
                    e5:9f:b0:15:27:e1:34:3b:29:44:94:35:56:bb:4f:
                    8f:97:ea:3e:46:09:7a:01:41:69:d5:6c:96:df:f6:
                    d0:0c:a1:09:95:ed:df:cf:9a:65:80:82:c0:8a:3d:
                    4d:1e:e1:7e:9b:96:c5:db:86:66:81:1c:ca:3d:3a:
                    11:b6:db:1a:b5:33:db:ec:ea:63:13:0f:71:e7:72:
                    8a:40:a3:18:12:69:51:40:a2:bb:0d:e7:d1:ab:31:
                    0c:89:7f:e6:a5:fd:f4:5c:94:a4:07:38:82:17:dd:
                    0e:29:09:c9:f0:91:b2:43:7a:7e:ec:19:11:79:b4:
                    79:12:35:de:fa:04:01:3a:e0:8c:ca:5d:04:5a:b8:
                    8e:43:45:92:ef:27:12:8d:a0:44:30:32:f8:10:c8:
                    4d:6d:17:e0:de:07:66:f6:b4:bd:54:30:65:70:c0:
                    19:ad:fb:c7:f9:0d:19:e7:d9:aa:7a:14:6c:15:68:
                    f9:67:a6:d4:fd:1a:9f:74:fa:59:9e:48:72:24:6a:
                    74:a0:5d:83:07:49:e6:58:a6:ba:d8:e5:f5:90:b2:
                    7e:da:d3:cb:d5:dc:e3:13:e9:52:79:ea:3e:40:d3:
                    04:d9:41:e7:2b:05:1c:6c:4a:60:24:6d:f5:8a:e9:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:87:00:66:DF:F6:0E:4F:D2:CD:20:AC:15:89:C9:D6:1F:99:4D:EB
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/4e41d8425571965dd29f04d80e4c577deeb21289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:a3:8f:87:7a:29:b8:86:c8:14:af:f7:bd:39:2c:41:a6:
         ba:d8:dc:ac:53:a8:1b:2d:6c:a5:43:e3:6f:6f:f9:fa:83:18:
         9b:56:79:1b:e1:8a:d7:ed:80:9a:75:ad:5e:91:c9:81:7e:4e:
         f4:10:9a:0d:bd:4a:ad:7b:4d:a9:6b:7c:fd:b9:f3:3f:37:41:
         6a:95:8b:23:11:74:38:0a:22:0c:3f:48:b6:ae:ae:34:f3:ec:
         25:00:cd:3c:84:61:93:c6:0f:45:30:98:5d:d9:e6:36:9d:66:
         e6:cc:00:f6:7f:0a:b4:44:cb:96:10:1f:a1:89:da:48:3d:4e:
         ed:0a:70:94:c7:8f:e2:b2:ec:4f:be:db:f6:49:6a:a3:f9:51:
         32:36:58:77:d3:2b:e5:22:43:2c:ee:07:bd:a7:c0:02:8d:d5:
         b8:a2:9c:66:89:db:cf:02:17:a1:38:a4:9b:f0:58:f6:f2:42:
         f2:6d:09:39:9e:e1:0f:3b:bb:22:ce:60:90:f5:5b:99:b0:d7:
         52:fb:8b:e8:33:78:dd:6c:9b:cd:2b:54:7a:27:09:10:82:1e:
         d8:ee:1a:ba:b2:3f:20:dd:cf:b7:e3:18:00:f7:cf:f6:20:3e:
         b5:b6:6f:4f:71:6b:a2:da:07:b7:4f:1e:c5:83:cc:a0:61:fa:
         b3:50:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org