Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8ba1a964bdf4f8927746ed08160e2d2ff6da858d.roa
File:                     8ba1a964bdf4f8927746ed08160e2d2ff6da858d.roa (raw, json)
Hash identifier:          wUX0wfUyF2j2BnsJK5Gm1IFe8Rc958mehC5wH452gU4=
Subject key identifier:   F0:1F:4E:AF:BE:5C:0C:24:EC:F6:19:E4:6D:39:B2:C4:85:3E:91:65
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       120ED5
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8ba1a964bdf4f8927746ed08160e2d2ff6da858d.roa
Signing time:             Wed 29 Nov 2023 15:04:15 +0000
ROA not before:           Wed 29 Nov 2023 15:04:15 +0000
ROA not after:            Sat 29 Nov 2025 15:04:15 +0000
asID:                     270022
IP address blocks:        186.38.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183445 (0x120ed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 15:04:15 2023 GMT
            Not After : Nov 29 15:04:15 2025 GMT
        Subject: CN=8ba1a964bdf4f8927746ed08160e2d2ff6da858d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:03:a3:22:72:19:9d:ce:80:f6:d5:84:76:
                    01:69:76:d4:dc:13:3a:af:2d:e0:27:90:2d:01:50:
                    dc:a0:fd:d7:91:cb:12:cc:6d:81:79:44:9f:e4:1f:
                    16:96:88:45:66:b7:31:a2:7d:e2:6e:67:0e:78:5d:
                    99:d3:08:88:84:61:a9:8c:47:c7:16:ad:c5:82:fe:
                    7b:a8:c7:d0:02:cb:ab:2b:86:a8:a0:dd:50:64:14:
                    6a:42:99:43:a8:ba:69:b1:6c:76:94:4f:ab:67:d8:
                    7f:a2:bb:d0:76:28:47:12:eb:83:fb:7d:ec:09:39:
                    1d:96:d6:25:4e:a4:38:e9:d3:55:4c:f8:11:e3:ae:
                    da:ca:1e:d3:17:77:81:51:f6:bd:34:1c:e3:ac:53:
                    2a:ac:5d:e3:6b:68:ab:21:33:0e:53:fa:3d:09:9b:
                    91:c7:6f:4e:b4:35:eb:0e:bf:1a:c3:a9:ef:f9:1b:
                    63:75:61:e9:bb:21:6b:e5:c7:91:4b:97:c0:24:a7:
                    bd:56:1b:fc:0e:ed:2b:54:c2:43:22:cd:b5:79:54:
                    ad:1f:e9:19:e6:83:ba:59:79:8a:1a:8e:f1:58:33:
                    c0:ba:c2:40:6b:af:2b:ba:9a:64:5f:70:bf:0d:ef:
                    d9:bf:f1:72:46:ae:21:fb:54:01:e3:e2:b6:62:4c:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1F:4E:AF:BE:5C:0C:24:EC:F6:19:E4:6D:39:B2:C4:85:3E:91:65
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8ba1a964bdf4f8927746ed08160e2d2ff6da858d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:73:95:e5:25:a4:e4:b0:49:75:d8:42:01:bf:bf:0d:28:d5:
         b1:de:3e:dc:4b:da:5e:63:19:e4:ce:0b:a2:f9:d9:72:a2:ff:
         e6:d6:ab:ca:e4:fd:86:e0:a0:5f:3d:80:30:be:84:05:0e:bb:
         86:c3:fd:40:f3:3e:0d:67:d5:0a:69:8f:3d:4b:5f:3c:44:48:
         20:4b:55:dc:9b:30:34:2a:12:df:c4:d5:f5:e7:23:aa:e6:69:
         17:ed:31:e3:8d:3b:26:31:f2:cf:60:ad:9a:5b:3e:e5:7f:cc:
         88:81:31:76:66:dc:15:5e:c0:77:0c:02:4e:97:d2:6d:fa:da:
         75:25:eb:64:81:2a:c8:ea:1e:e4:cb:de:11:be:f7:74:a0:9f:
         6a:93:b2:b2:c9:8e:4b:15:0a:84:4b:92:06:50:4e:c6:ac:52:
         c0:9f:66:3f:47:39:4e:fc:be:50:4a:b4:91:75:da:6e:b7:08:
         0b:e9:be:18:95:60:0d:af:9b:8f:b7:bb:3a:b9:33:90:6a:18:
         ae:9c:df:00:06:35:b9:ba:e9:7f:87:68:fa:8a:3d:5f:49:77:
         92:c8:c3:f5:c0:d6:07:79:67:2f:09:e4:da:5f:ec:66:ee:1e:
         91:72:6b:db:96:a1:76:56:e0:db:49:3c:47:73:5a:92:07:fe:
         3a:e9:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org