Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5fc0e9fdcae41c5b87b07fe381ebb865a394bda6.roa
File:                     5fc0e9fdcae41c5b87b07fe381ebb865a394bda6.roa (raw, json)
Hash identifier:          07HzLVIYnhdMDkZLScrVrAdGEzCPTdxFWX6wb0jk934=
Subject key identifier:   CA:84:59:E1:7F:25:05:A1:1B:16:3F:59:65:40:FA:9E:8D:56:1D:28
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       124F9E
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5fc0e9fdcae41c5b87b07fe381ebb865a394bda6.roa
Signing time:             Wed 29 Nov 2023 15:49:35 +0000
ROA not before:           Wed 29 Nov 2023 15:49:35 +0000
ROA not after:            Sat 29 Nov 2025 15:49:35 +0000
asID:                     272113
IP address blocks:        201.254.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200030 (0x124f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:49:35 2023 GMT
            Not After : Nov 29 15:49:35 2025 GMT
        Subject: CN=5fc0e9fdcae41c5b87b07fe381ebb865a394bda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:2a:6b:d6:35:bc:5a:07:91:ea:25:13:2d:
                    1a:e2:3a:05:c6:89:6c:39:f9:0f:d4:83:7b:e5:63:
                    b0:f9:59:d7:ed:cf:ac:1e:73:2d:29:ec:1e:1e:41:
                    5f:b7:fb:95:ce:31:79:93:bf:f4:ff:ff:6b:82:d4:
                    f3:70:78:c9:64:42:5c:8b:7b:ea:0c:4b:05:f1:75:
                    aa:e0:54:76:f0:8b:52:b2:fd:4c:6d:6d:e2:2d:00:
                    01:35:98:60:6b:21:23:73:e2:17:96:45:dd:62:0e:
                    b0:df:9f:2f:94:2d:74:6d:38:48:c6:45:f3:90:84:
                    05:ac:7c:71:54:87:10:5c:fb:1f:de:ef:55:01:ee:
                    13:ff:2d:3b:12:d8:48:50:69:03:c0:78:9b:d6:5d:
                    ba:7d:e5:8f:99:21:d2:16:03:81:31:a2:80:a2:5a:
                    94:8c:d4:28:9d:e4:f7:ef:21:e1:42:e3:7f:64:c9:
                    6b:2f:7c:23:72:5f:41:10:da:00:00:6a:a0:2d:0b:
                    fa:8c:f3:fd:e6:c4:0d:53:7e:be:4f:ae:0b:56:f8:
                    97:00:04:49:9a:2e:7f:fd:20:34:29:d1:36:65:76:
                    24:1e:7b:6d:4a:6a:fe:48:14:28:9d:81:6a:9d:7a:
                    10:3f:a1:d1:70:25:ee:7b:70:e9:bc:0e:04:ea:4e:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:59:E1:7F:25:05:A1:1B:16:3F:59:65:40:FA:9E:8D:56:1D:28
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/5fc0e9fdcae41c5b87b07fe381ebb865a394bda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:b7:ff:63:94:68:7c:8a:74:61:00:b4:a8:6d:e6:45:08:
         56:78:46:28:13:b3:43:e1:3b:94:e5:8f:df:e6:46:fd:ff:21:
         b1:ef:1a:16:51:da:6f:24:78:30:52:19:cf:76:af:bf:af:b1:
         5f:c6:dd:10:82:37:68:c9:05:27:d4:dc:12:38:87:a4:79:1f:
         81:de:51:5f:d3:1f:60:c6:06:65:0a:5a:a1:b9:aa:6b:df:94:
         1b:bc:53:5f:51:3a:1a:38:a2:31:c8:67:16:db:80:68:eb:e5:
         70:bc:15:95:1c:95:d9:ff:3c:d8:48:ca:c7:e4:8d:e7:b7:9b:
         32:3c:ba:f3:20:cf:9b:fe:27:ab:13:22:5e:e8:75:6a:ee:f0:
         93:79:0b:ce:2a:c4:90:a4:32:a6:e1:ae:2c:8d:e0:2a:02:30:
         f1:de:67:ac:72:f9:25:80:ff:52:c2:23:6b:10:42:0c:e1:1c:
         5d:74:42:7b:e7:0e:be:9f:97:62:6e:9f:5b:a9:65:b1:79:90:
         e7:51:3f:05:80:2e:f4:64:1b:96:84:6e:bc:c4:23:fc:6c:33:
         55:7a:27:07:83:8c:8b:7c:89:21:e3:ed:03:0d:b1:27:ea:01:
         63:17:f0:7a:40:ec:f5:c8:cf:e9:a0:10:35:e2:03:9a:cc:92:
         2b:10:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org