Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa
File:                     73adf51dcf9f6c533870f14a1c495254fd913f2e.roa (raw, json)
Hash identifier:          w/Y6WiOQTg3ngmcPKmC0F2Bku/fYlbK9J600nilEoa4=
Subject key identifier:   84:EB:5C:42:73:AD:CC:88:41:63:65:A9:44:30:34:52:32:B9:4E:21
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       12571F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa
Signing time:             Wed 29 Nov 2023 15:50:41 +0000
ROA not before:           Wed 29 Nov 2023 15:50:41 +0000
ROA not after:            Sat 29 Nov 2025 15:50:41 +0000
asID:                     27813
IP address blocks:        201.254.236.0/24 maxlen: 24
                          201.254.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201951 (0x12571f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:50:41 2023 GMT
            Not After : Nov 29 15:50:41 2025 GMT
        Subject: CN=73adf51dcf9f6c533870f14a1c495254fd913f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:67:a3:b2:23:32:71:fc:94:1c:4a:4c:e7:
                    87:09:f7:e1:54:cb:c9:fc:a4:96:4a:d5:34:1c:8d:
                    51:5f:6d:01:b5:b5:4d:bd:29:d5:0b:ed:20:44:a6:
                    1f:5e:6d:2e:fa:64:c3:ac:96:d5:0e:e2:21:42:2d:
                    8c:35:cc:be:74:d8:86:46:6d:e3:75:54:da:61:fb:
                    f8:e8:60:89:24:15:af:88:8a:8c:80:0f:22:d6:e7:
                    ce:c3:24:6a:f6:7c:e1:bd:2d:dd:38:c9:a8:82:47:
                    68:1b:6d:b2:9f:71:ce:a3:a8:83:8e:79:bb:17:07:
                    c2:28:f1:b2:9a:89:44:12:d1:2e:93:82:b7:04:d6:
                    21:8e:98:72:0d:b0:1d:54:50:d5:9b:6f:ae:d6:cc:
                    c9:11:f9:f7:7f:6e:dd:59:4c:57:17:d7:7c:b9:f9:
                    37:fe:81:de:39:ac:7c:90:9e:5e:e9:9d:61:1d:cd:
                    ca:0c:58:e0:3a:b9:20:59:b9:63:21:33:24:57:8c:
                    c7:9f:a9:c2:0e:9b:16:33:2a:dd:52:f4:42:e0:c1:
                    a0:46:8d:11:e0:e3:7f:bb:e8:c7:31:ce:58:37:28:
                    29:eb:ea:d2:4c:f4:16:53:31:07:e9:bb:d8:d7:6a:
                    27:45:2f:4e:b3:5b:2c:cd:f6:2f:7b:23:06:af:40:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:5C:42:73:AD:CC:88:41:63:65:A9:44:30:34:52:32:B9:4E:21
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/73adf51dcf9f6c533870f14a1c495254fd913f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.254.236.0/24
                  201.254.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:37:cf:5d:4e:e6:c5:0b:88:78:36:df:79:76:2c:ac:38:
         d5:6e:e4:91:77:c1:6d:ab:8a:b1:99:bb:d3:86:bf:d2:ed:20:
         b4:66:59:0d:10:b2:b6:8e:a8:1d:77:70:76:48:69:97:b2:f7:
         9a:7c:df:e4:86:33:44:18:d0:10:fb:03:41:7e:fa:14:ad:13:
         ae:f3:62:0d:b4:53:7c:e8:f2:1b:4f:c5:2e:3f:99:d4:e3:9d:
         f7:6e:ed:94:22:87:3b:9e:fc:31:14:13:ce:09:0b:3a:c7:0f:
         82:d3:81:fa:a0:50:76:35:19:34:83:30:bb:8e:7e:ba:6c:9a:
         3d:3a:77:c7:0a:93:c8:40:a2:7e:4b:16:62:77:ff:70:46:57:
         5a:cf:a6:54:7f:e2:33:73:2e:4c:ce:ad:13:f1:9a:09:6f:84:
         5a:5d:17:84:ed:bd:fc:2c:44:4f:4c:f6:39:5a:83:f9:13:df:
         21:ce:1f:66:58:06:8c:e3:e2:b8:08:12:51:ad:e6:25:65:7f:
         37:aa:65:ec:45:a0:b4:78:dd:36:25:2b:14:96:6b:5e:60:24:
         a8:a9:a9:66:d0:37:49:15:32:e0:01:8a:ef:17:7a:c1:c8:47:
         a4:1d:07:66:02:e7:f2:8f:4b:1d:f7:72:97:c8:9c:9d:5a:e9:
         52:f8:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org