Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/83a9b4b8616bf9172bff2326392b27b214b06986.roa
File:                     83a9b4b8616bf9172bff2326392b27b214b06986.roa (raw, json)
Hash identifier:          byn78mEMHCprsx0djwyltnaR7IQ0oXeq/8NQJXV76aY=
Subject key identifier:   EC:43:A5:CD:C7:A9:D7:9F:51:CA:44:C0:DC:71:B4:3E:0F:E3:C0:FF
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       141C0F
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/83a9b4b8616bf9172bff2326392b27b214b06986.roa
Signing time:             Tue 30 Jan 2024 17:54:27 +0000
ROA not before:           Tue 30 Jan 2024 17:54:27 +0000
ROA not after:            Fri 30 Jan 2026 17:54:27 +0000
asID:                     10834
IP address blocks:        200.5.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317903 (0x141c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Jan 30 17:54:27 2024 GMT
            Not After : Jan 30 17:54:27 2026 GMT
        Subject: CN=83a9b4b8616bf9172bff2326392b27b214b06986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d9:f8:b3:22:cb:f1:2b:f6:b8:2d:22:8f:a0:
                    86:f3:20:4a:56:be:df:8e:a7:38:80:60:e8:da:30:
                    7c:fd:5b:18:05:dd:d9:9f:90:46:79:8d:55:7b:9c:
                    fa:1a:a5:11:a4:5b:ca:4d:7d:df:e4:09:9e:f1:7f:
                    cd:1a:60:3f:c9:65:ae:b9:55:7a:41:59:e3:84:35:
                    b5:64:cb:9d:c0:77:44:60:5f:cd:6c:0f:f9:ad:a3:
                    24:96:65:01:ed:65:37:39:28:2d:3c:22:c1:ec:8a:
                    25:cf:ee:63:fd:0c:88:5f:60:a6:a4:8a:88:4c:03:
                    70:4e:82:31:f6:bc:4d:59:37:95:fb:2e:7e:fb:46:
                    4a:fe:0f:aa:0f:9f:4c:6f:65:50:c2:b0:72:ab:6e:
                    3b:d1:3c:64:65:c0:05:47:36:74:b9:6b:ff:af:97:
                    85:cc:6a:8d:16:c9:cb:b5:5a:92:94:fc:46:98:a2:
                    65:8e:5c:58:99:88:d0:10:67:ad:89:c3:85:7d:78:
                    09:40:45:dc:39:60:b2:82:9d:2a:99:f0:16:b0:56:
                    cb:2f:7d:36:d7:19:fe:8c:59:0a:2c:fb:81:20:4f:
                    2b:2b:a6:21:cd:75:94:ed:12:02:ed:ea:47:61:2f:
                    06:9b:73:eb:34:d9:d0:c7:4f:ad:6b:de:fb:d0:d2:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:A5:CD:C7:A9:D7:9F:51:CA:44:C0:DC:71:B4:3E:0F:E3:C0:FF
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/83a9b4b8616bf9172bff2326392b27b214b06986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:74:3c:1c:d7:f1:f3:ff:11:46:c8:b2:de:b9:cf:e6:77:bf:
         b4:48:66:52:57:d7:04:1c:18:94:8b:28:7a:7a:dd:14:5c:96:
         ed:97:f4:98:63:94:4b:01:5a:59:9e:6e:a6:a7:38:1b:9c:17:
         b3:b6:63:c2:47:dd:0f:01:34:db:62:a7:2b:f6:1f:ec:ba:2c:
         ec:8c:8c:d5:05:7c:06:e9:8d:a4:70:29:af:c4:43:dd:56:db:
         95:0e:43:71:f6:d1:a0:bf:3e:11:b9:e7:0e:58:c7:fd:02:b1:
         41:e6:af:b6:b3:0d:fa:b1:f8:82:25:01:6b:f3:9c:98:c5:7c:
         91:df:4f:94:15:67:e8:d9:7d:7b:13:4c:46:0a:2d:01:bb:7e:
         75:fb:97:80:3f:0f:22:68:4e:6f:19:d7:92:b4:41:70:9a:56:
         ad:44:b4:eb:9f:ae:95:4c:39:72:96:14:4f:c0:72:88:94:1e:
         8c:3c:72:66:ca:9c:07:24:03:d2:15:7c:43:67:ef:75:76:0f:
         ba:6f:30:e6:12:99:6c:1b:21:27:39:c1:23:67:8f:18:7b:e6:
         d0:ad:42:26:7b:28:e8:a7:05:f4:24:a6:7d:3d:b9:d2:02:e2:
         a6:46:a3:6a:93:ae:23:86:f7:f7:b1:6d:3d:28:b7:a1:6c:ab:
         f3:2c:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org