Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/55a6c65234f4129821f6117913b9f15f38c0f021.roa
File:                     55a6c65234f4129821f6117913b9f15f38c0f021.roa (raw, json)
Hash identifier:          OmUQj5al98FNeeW8zzrDw9l50xyQuL0cITtarGMm2E4=
Subject key identifier:   53:85:5B:D2:9E:5B:78:5B:A6:DC:BA:07:0C:37:00:F0:4C:E1:EB:1F
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1277AF
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/55a6c65234f4129821f6117913b9f15f38c0f021.roa
Signing time:             Wed 29 Nov 2023 21:15:42 +0000
ROA not before:           Wed 29 Nov 2023 21:15:41 +0000
ROA not after:            Sat 29 Nov 2025 21:15:41 +0000
asID:                     52477
IP address blocks:        186.56.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210287 (0x1277af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:15:41 2023 GMT
            Not After : Nov 29 21:15:41 2025 GMT
        Subject: CN=55a6c65234f4129821f6117913b9f15f38c0f021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:6a:14:11:da:fc:8d:7a:35:e0:a7:de:f6:
                    87:b5:30:75:24:2f:2f:99:d5:d8:b1:78:36:e7:7b:
                    20:09:5a:85:c7:db:04:0a:74:df:38:21:6d:9e:f4:
                    cd:53:f7:53:c9:85:e4:03:6f:96:d7:b8:33:25:3a:
                    59:ea:02:62:69:15:44:fd:80:a0:e3:59:96:54:c8:
                    fe:82:e2:37:ef:8e:c7:86:d0:f2:80:85:a5:83:35:
                    05:a0:fc:a8:8e:f0:ff:1d:60:1f:13:cc:c7:cc:b5:
                    d8:b4:38:57:ce:94:40:8d:70:cf:a7:18:fd:a1:b9:
                    21:25:ac:03:44:7d:3c:f5:35:3f:98:43:b4:4c:a7:
                    1d:46:4b:ea:1e:52:23:83:97:92:15:00:0f:d5:a9:
                    a9:9c:45:7b:84:b1:81:b7:d3:ef:d7:df:f1:58:ae:
                    d2:2e:04:6f:c5:3d:33:a9:7d:70:65:0a:e0:e5:55:
                    ba:9f:14:20:83:8b:d7:54:f8:93:55:04:5c:37:23:
                    30:30:d6:a7:22:61:f3:40:bd:83:5e:d9:bb:30:66:
                    d0:a0:7d:c0:b9:64:00:07:47:93:66:5a:58:27:96:
                    04:ea:fd:5d:aa:fa:9d:33:38:fa:69:e7:4d:73:fe:
                    93:5d:be:d6:c1:1e:bc:3f:4a:df:f9:aa:25:ff:eb:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:85:5B:D2:9E:5B:78:5B:A6:DC:BA:07:0C:37:00:F0:4C:E1:EB:1F
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/55a6c65234f4129821f6117913b9f15f38c0f021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:25:55:e8:00:5d:a0:d4:98:be:3d:c1:df:10:68:a3:4e:
         e3:3d:be:23:10:50:db:96:b2:0b:6b:ec:e1:d3:1d:76:94:0b:
         a0:d2:60:a6:5b:53:be:27:d1:0d:1b:b8:65:89:25:a5:2d:23:
         d2:b0:a1:b7:ac:00:19:87:56:49:34:e8:c3:96:a9:50:24:ff:
         40:08:d6:12:b8:5b:42:2c:a6:d0:d7:af:8e:ea:e9:d4:cc:1d:
         62:e6:e9:d0:59:dd:c4:20:d3:5d:9c:ac:0b:0b:10:44:f7:d7:
         c5:fc:3e:b5:53:9d:f5:5f:68:df:80:9c:34:e3:10:56:c2:32:
         33:48:af:0d:4e:ea:34:81:b2:8f:ea:08:f4:3d:57:45:da:4b:
         42:33:36:83:e0:0e:b6:1d:13:a8:be:d3:14:91:90:f2:9e:fc:
         58:4e:59:ae:83:b6:8e:13:3e:45:a1:e1:ef:11:db:8f:86:39:
         c5:91:52:9a:6a:af:5d:a5:cf:03:a6:df:27:2f:71:77:94:27:
         f3:9b:54:c9:8d:fd:c6:2b:97:6b:11:a1:87:b7:ce:09:c8:01:
         34:d4:a1:83:74:b9:a9:fa:68:18:4b:f3:da:77:c7:34:71:de:
         87:c2:04:28:8b:98:13:78:10:09:78:00:4c:eb:2a:94:d2:06:
         91:ab:e7:e2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEnevMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjExNTQxWhcNMjUxMTI5MjExNTQxWjAzMTEwLwYDVQQDEyg1NWE2YzY1MjM0ZjQx
Mjk4MjFmNjExNzkxM2I5ZjE1ZjM4YzBmMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnQhqFBHa/I16NeCn3vaHtTB1JC8vmdXYsXg253sgCVqFx9sE
CnTfOCFtnvTNU/dTyYXkA2+W17gzJTpZ6gJiaRVE/YCg41mWVMj+guI3747HhtDy
gIWlgzUFoPyojvD/HWAfE8zHzLXYtDhXzpRAjXDPpxj9obkhJawDRH089TU/mEO0
TKcdRkvqHlIjg5eSFQAP1ampnEV7hLGBt9Pv19/xWK7SLgRvxT0zqX1wZQrg5VW6
nxQgg4vXVPiTVQRcNyMwMNanImHzQL2DXtm7MGbQoH3AuWQAB0eTZlpYJ5YE6v1d
qvqdMzj6aedNc/6TXb7WwR68P0rf+aol/+uW2QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFOFW9KeW3hbpty6Bww3APBM4esfMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzU1YTZjNjUyMzRmNDEyOTgyMWY2MTE3OTEzYjlmMTVmMzhjMGYwMjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALo4bjANBgkqhkiG9w0BAQsFAAOCAQEADQklVegAXaDUmL49
wd8QaKNO4z2+IxBQ25ayC2vs4dMddpQLoNJgpltTvifRDRu4ZYklpS0j0rCht6wA
GYdWSTTow5apUCT/QAjWErhbQiym0Nevjurp1MwdYubp0FndxCDTXZysCwsQRPfX
xfw+tVOd9V9o34CcNOMQVsIyM0ivDU7qNIGyj+oI9D1XRdpLQjM2g+AOth0TqL7T
FJGQ8p78WE5ZroO2jhM+RaHh7xHbj4Y5xZFSmmqvXaXPA6bfJy9xd5Qn85tUyY39
xiuXaxGhh7fOCcgBNNShg3S5qfpoGEvz2nfHNHHeh8IEKIuYE3gQCXgATOsqlNIG
kavn4g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org