Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa
File:                     8d90de51c7352a287ce38413e2f1237c74eace79.roa (raw, json)
Hash identifier:          fD0i6hMFe5ZK5GDLOiRCWJoAl4jpC2HVe18S5PQIueY=
Subject key identifier:   6D:89:21:01:F7:0B:AC:E5:25:8F:DF:7F:0E:59:8A:82:BA:F8:86:98
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       1279A8
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa
Signing time:             Wed 29 Nov 2023 21:16:57 +0000
ROA not before:           Wed 29 Nov 2023 21:16:57 +0000
ROA not after:            Sat 29 Nov 2025 21:16:57 +0000
asID:                     22927
IP address blocks:        186.56.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210792 (0x1279a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:16:57 2023 GMT
            Not After : Nov 29 21:16:57 2025 GMT
        Subject: CN=8d90de51c7352a287ce38413e2f1237c74eace79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:ce:ff:b0:9d:72:71:f8:55:14:39:07:6b:
                    71:31:4c:a6:40:9f:57:86:a0:4a:46:49:60:6b:c8:
                    3a:0a:91:67:b7:6b:65:12:62:e1:9d:49:19:15:13:
                    9c:09:2c:eb:53:86:4a:45:75:5e:48:a5:c7:aa:60:
                    4f:80:1e:fd:28:b4:22:16:b5:97:4b:9e:b3:2a:ad:
                    4c:a0:d7:19:16:3a:4c:43:48:d6:b0:f7:9f:27:d4:
                    a3:f4:18:cf:c3:f7:92:7d:6f:c1:ba:d9:d7:55:19:
                    1f:93:9c:d9:aa:7a:f2:12:e0:cd:5e:a5:b6:3c:9d:
                    f2:13:9e:90:4d:a2:29:69:63:42:c6:2a:3b:80:42:
                    59:b1:2d:40:e0:06:44:74:f5:ff:93:a2:3a:75:ff:
                    0f:2b:83:e8:27:99:a0:0d:ef:dc:09:02:a1:32:23:
                    82:7d:79:74:cd:10:a1:ae:a2:9f:23:a1:f7:c3:a4:
                    c3:0e:14:b0:6f:bc:76:40:52:e3:f1:4a:bd:82:e1:
                    89:0e:3b:10:97:41:d2:58:bc:78:a1:35:ed:2b:28:
                    52:4e:19:87:80:b0:bc:34:19:bd:28:23:7f:aa:3e:
                    b6:c2:a1:8a:a7:cf:f2:73:d7:91:ba:e8:f6:74:3f:
                    ed:57:5f:43:74:0f:bc:7d:81:03:c4:83:0b:14:9b:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:21:01:F7:0B:AC:E5:25:8F:DF:7F:0E:59:8A:82:BA:F8:86:98
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/8d90de51c7352a287ce38413e2f1237c74eace79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:59:62:4d:ad:ef:40:98:a4:6b:55:f3:5c:2d:87:41:13:
         da:a2:0f:40:fd:be:8b:f9:c8:2e:e8:02:ed:a7:51:dc:f9:ae:
         b1:c4:10:61:c4:dd:da:47:6d:26:21:29:8f:62:a0:bb:ce:0c:
         eb:90:e9:e0:7d:86:7e:f0:5d:70:de:fe:97:55:5b:8b:ea:09:
         bc:f0:5e:d9:12:de:b7:49:90:12:1c:df:86:70:89:01:82:2f:
         1d:52:c4:83:59:92:3b:30:02:de:69:cc:41:17:65:b8:3e:d7:
         97:92:44:ba:c1:fa:e2:2d:93:1e:d3:90:b6:99:23:1e:05:ca:
         13:11:1e:f2:18:ba:dd:2d:c2:a9:f5:de:b7:58:30:00:0b:ee:
         17:54:7d:05:5f:45:34:8a:26:68:c4:51:72:bf:74:d9:c2:74:
         ad:4b:b8:23:2b:85:53:3f:3f:d0:fe:d4:16:0e:cc:c0:b3:34:
         a1:9b:96:83:4b:08:49:b7:87:e3:09:81:d1:c7:2a:2c:37:08:
         ad:49:05:ea:c7:b0:94:8b:5e:7a:21:3d:36:82:1e:02:34:0a:
         c6:2a:1b:a6:89:84:f1:4e:df:98:e8:55:34:2b:97:9d:72:ed:
         89:9f:64:13:05:c2:ec:21:e4:b4:85:f5:0b:85:bf:a4:82:39:
         e8:75:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org