Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa
File:                     78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa (raw, json)
Hash identifier:          tGsVYo+4uv7NOvJxeT9CWgFZB+BfTmeaYufoYLJJQqI=
Subject key identifier:   4A:8B:03:77:0F:3F:96:D2:07:F3:ED:BA:94:8A:10:BE:A8:80:DA:18
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       126BBF
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa
Signing time:             Wed 29 Nov 2023 21:10:59 +0000
ROA not before:           Wed 29 Nov 2023 21:10:59 +0000
ROA not after:            Sat 29 Nov 2025 21:10:59 +0000
asID:                     264830
IP address blocks:        186.56.71.0/24 maxlen: 24
                          186.56.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207231 (0x126bbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:10:59 2023 GMT
            Not After : Nov 29 21:10:59 2025 GMT
        Subject: CN=78b2f03a6f41c59ed0c42cd4be7ab06209f36d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:45:18:71:ff:36:2b:10:17:4d:f1:66:bc:
                    15:79:59:8a:15:7c:bd:2a:a1:24:00:80:e2:75:39:
                    75:05:86:1e:6d:c5:c3:bb:64:ef:24:c7:eb:a8:d7:
                    40:a7:48:35:ac:b4:67:dc:45:39:ba:06:ba:06:31:
                    99:10:5f:28:af:c8:74:f5:6b:e2:d7:89:0e:7e:74:
                    70:71:07:2b:6c:ec:31:60:2b:07:a7:dd:f7:a5:be:
                    98:13:da:76:80:5e:ad:25:8d:e2:80:f0:c3:93:fe:
                    9a:ef:15:5d:e7:0c:10:6a:e2:e0:fd:73:64:2a:37:
                    f0:0d:73:30:c2:dd:92:9f:e3:b5:ce:85:dd:44:1f:
                    d7:72:25:95:80:4a:b0:b4:2d:2d:a6:7f:38:2b:e3:
                    fb:b4:76:a3:81:25:1d:09:39:22:1b:c9:48:e1:56:
                    a8:10:a2:b1:e2:cf:b5:e2:cd:22:51:47:ac:e3:f4:
                    ea:59:ff:10:38:fd:49:a8:0c:68:5a:53:91:de:e7:
                    3d:b3:a8:e7:d0:8d:26:eb:36:27:31:a7:0f:a8:c9:
                    0f:ad:1f:8f:c3:8d:e7:92:74:f1:16:7a:c4:40:7a:
                    d3:46:49:23:37:a4:72:5b:b5:36:73:94:93:c1:3f:
                    3d:f7:ac:cb:99:b8:25:e9:56:38:a8:fe:c3:ba:87:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:03:77:0F:3F:96:D2:07:F3:ED:BA:94:8A:10:BE:A8:80:DA:18
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.71.0-186.56.72.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:8b:9c:4f:33:d8:5d:fc:99:90:9f:fa:a1:61:dc:f0:ac:
         29:c8:ab:b2:4a:3a:2f:c0:31:43:45:4f:a9:9d:93:1c:38:4b:
         a5:e7:87:10:3e:63:e6:70:19:68:d6:50:f3:28:a2:54:0d:d5:
         fa:40:65:15:5b:64:1a:2b:13:02:7f:51:11:02:07:76:ee:36:
         86:11:f4:4d:d7:a8:c9:84:99:e8:d5:07:86:3a:7d:72:a8:fc:
         ff:a1:66:28:eb:da:0d:33:9e:d2:b3:c4:45:c0:81:e5:66:fe:
         7e:20:bd:4c:9a:33:ad:0b:61:cd:c1:2a:a9:6e:4f:15:bb:13:
         a0:fe:9f:f1:bc:45:3c:1a:a2:75:e0:e4:27:b3:bf:b5:ac:1c:
         b5:f4:0f:c5:e1:0b:4a:20:57:74:29:8b:70:03:c0:47:e5:ed:
         84:58:14:b3:c8:6b:c5:22:c8:bb:b4:aa:c2:14:12:85:3a:26:
         05:47:3d:90:96:d5:2c:5e:13:cf:9c:db:c7:21:b1:2e:21:ca:
         a1:86:07:ec:3d:a6:ec:66:a9:5d:50:c4:68:4c:0a:c0:05:05:
         a9:3e:b6:dd:13:da:c0:a5:64:2b:f0:d6:41:df:0e:ba:ba:0b:
         82:1b:47:9b:7b:62:59:5c:c7:5f:6a:9a:ff:16:26:49:0e:a1:
         76:6d:04:91
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEmu/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjExMDU5WhcNMjUxMTI5MjExMDU5WjAzMTEwLwYDVQQDEyg3OGIyZjAzYTZmNDFj
NTllZDBjNDJjZDRiZTdhYjA2MjA5ZjM2ZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsAtFGHH/NisQF03xZrwVeVmKFXy9KqEkAIDidTl1BYYebcXD
u2TvJMfrqNdAp0g1rLRn3EU5uga6BjGZEF8or8h09Wvi14kOfnRwcQcrbOwxYCsH
p933pb6YE9p2gF6tJY3igPDDk/6a7xVd5wwQauLg/XNkKjfwDXMwwt2Sn+O1zoXd
RB/XciWVgEqwtC0tpn84K+P7tHajgSUdCTkiG8lI4VaoEKKx4s+14s0iUUes4/Tq
Wf8QOP1JqAxoWlOR3uc9s6jn0I0m6zYnMacPqMkPrR+Pw43nknTxFnrEQHrTRkkj
N6RyW7U2c5STwT8996zLmbgl6VY4qP7DuoeSAQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFEqLA3cPP5bSB/PtupSKEL6ogNoYMB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2Lzc4YjJmMDNhNmY0MWM1OWVkMGM0MmNkNGJlN2FiMDYyMDlmMzZkMzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAujhHAwQAujhIMA0GCSqGSIb3DQEBCwUAA4IBAQAKCouc
TzPYXfyZkJ/6oWHc8KwpyKuySjovwDFDRU+pnZMcOEul54cQPmPmcBlo1lDzKKJU
DdX6QGUVW2QaKxMCf1ERAgd27jaGEfRN16jJhJno1QeGOn1yqPz/oWYo69oNM57S
s8RFwIHlZv5+IL1MmjOtC2HNwSqpbk8VuxOg/p/xvEU8GqJ14OQns7+1rBy19A/F
4QtKIFd0KYtwA8BH5e2EWBSzyGvFIsi7tKrCFBKFOiYFRz2QltUsXhPPnNvHIbEu
IcqhhgfsPabsZqldUMRoTArABQWpPrbdE9rApWQr8NZB3w66uguCG0ebe2JZXMdf
apr/FiZJDqF2bQSR
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org